$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa File: f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa (raw, json) Hash identifier: jqCNFO7DRlG7b/A24wJQxG7sxWCi5cd7FnF/M8QtfKA= Subject key identifier: 9F:75:D1:6C:51:8E:35:39:58:8F:C3:AD:3E:E0:44:F6:37:C4:53:E9 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F43285847872125E97D967314202DC880 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 13414 IP address blocks: 64.63.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:25:e9:7d:96:73:14:20:2d:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=1d4774e5-0307-49e4-bbdd-5379648b4084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:88:a0:a9:b2:e3:79:3c:02:31:6d:bf:11: 10:5c:2b:19:7b:be:ba:09:03:23:5b:3d:be:7a:39: c8:d8:62:8f:d9:18:1f:e9:cf:0d:bc:34:73:38:05: fa:71:a6:46:33:da:dd:39:d8:9a:91:fd:a6:01:08: 5e:ff:79:fe:c0:cd:8c:79:eb:ec:d9:67:c4:32:23: ef:1d:75:a9:33:1c:5b:34:54:98:11:f7:d6:be:13: ab:ba:b5:ce:b4:bb:76:51:fa:b3:76:c5:f5:7c:d7: 3f:73:18:91:dc:28:a7:d6:b9:1d:af:62:e9:78:12: ed:bf:0f:dc:e4:5a:58:fb:99:54:f5:d9:71:02:e6: 0a:50:1a:28:22:83:bf:43:c3:d5:8a:8b:b5:b0:54: 6e:06:54:ce:11:d5:c2:06:b5:9b:88:12:26:b0:2c: 5e:1f:32:a9:d6:ea:55:c4:19:84:51:32:ec:53:48: 6b:ab:2d:af:62:25:dd:10:ec:9c:85:e7:d9:37:fd: b4:69:17:10:1e:91:68:7f:31:16:ae:cc:2b:96:a0: 08:24:9e:69:5c:1b:ab:7e:a0:79:dd:e3:4f:aa:ff: aa:0b:f4:de:f3:dc:ab:96:de:6c:22:11:99:e4:e0: 30:7a:79:c9:90:f4:81:17:76:5f:c3:fb:d6:fa:03: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:75:D1:6C:51:8E:35:39:58:8F:C3:AD:3E:E0:44:F6:37:C4:53:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:af:f0:20:43:bf:5a:66:67:54:88:81:cd:cd:f8:78:64:f6: f6:be:6b:05:a6:a1:f5:8d:23:8f:5f:c9:c6:9c:04:04:09:5c: 5a:60:1a:e0:67:8a:fc:7a:48:e6:d1:fd:c5:8c:22:8f:78:a2: 12:b3:b8:d1:55:5b:47:0d:45:f4:69:61:05:8e:3d:db:90:fe: 56:e2:df:f6:77:27:db:32:12:36:79:91:3a:6e:ad:d5:d9:78: f0:2e:24:84:a0:17:97:9f:fd:55:3a:d6:8f:f8:3b:40:5e:2e: e2:89:4b:d5:4c:8a:df:f7:3c:54:7c:f7:49:f7:14:a2:cd:d2: 5d:fb:20:ed:14:8d:38:7b:3f:83:29:25:f8:3f:00:93:59:e2: 5c:a6:73:3e:6d:98:3e:93:37:42:91:40:00:92:6b:a7:5e:80: a9:aa:ba:43:4a:f4:83:52:b4:6c:3e:9b:49:fa:02:3e:5c:18: 3b:0c:42:45:74:ed:59:56:03:29:9a:4a:04:78:3a:86:2b:05: 78:99:52:3c:6f:c1:32:29:ee:2a:a0:78:87:6e:e3:63:6c:0c: 1a:31:6f:49:c6:f8:39:76:74:1b:76:4f:26:c4:c5:86:8d:aa: fa:9e:12:a7:96:00:90:0d:ef:96:fd:d6:72:fb:2a:fa:9a:d9: 5c:c2:bd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHISXpfZZzFCAtyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk MWQ0Nzc0ZTUtMDMwNy00OWU0LWJiZGQtNTM3OTY0OGI0MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZmIoKmy43k8AjFtvxEQXCsZe766CQMjWz2+ ejnI2GKP2Rgf6c8NvDRzOAX6caZGM9rdOdiakf2mAQhe/3n+wM2Meevs2WfEMiPv HXWpMxxbNFSYEffWvhOrurXOtLt2UfqzdsX1fNc/cxiR3Cin1rkdr2LpeBLtvw/c 5FpY+5lU9dlxAuYKUBooIoO/Q8PViou1sFRuBlTOEdXCBrWbiBImsCxeHzKp1upV xBmEUTLsU0hrqy2vYiXdEOychefZN/20aRcQHpFofzEWrswrlqAIJJ5pXBurfqB5 3eNPqv+qC/Te89yrlt5sIhGZ5OAwennJkPSBF3Zfw/vW+gMnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ910WxRjjU5WI/DrT7gRPY3xFPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjk2NDM5NTEtN2NiZi0z MGQ2LWIwYzMtOTI0MDRiOGFiMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGv8CBDv1pmZ1SIgc3N+Hhk9va+awWmofWNI49fycacBAQJXFpgGuBn ivx6SObR/cWMIo94ohKzuNFVW0cNRfRpYQWOPduQ/lbi3/Z3J9syEjZ5kTpurdXZ ePAuJISgF5ef/VU61o/4O0BeLuKJS9VMit/3PFR890n3FKLN0l37IO0UjTh7P4Mp Jfg/AJNZ4lymcz5tmD6TN0KRQACSa6degKmqukNK9INStGw+m0n6Aj5cGDsMQkV0 7VlWAymaSgR4OoYrBXiZUjxvwTIp7iqgeIdu42NsDBoxb0nG+Dl2dBt2TybExYaN qvqeEqeWAJAN75b91nL7Kvqa2VzCvcA= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org