$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/25bcf0e1-f33b-3658-89ef-f07b9951126c.roa File: 25bcf0e1-f33b-3658-89ef-f07b9951126c.roa (raw, json) Hash identifier: qy7KsWPYw4SwFukvxstOq/TL7GyRQMxBAvPXpnDz+yY= Subject key identifier: 7F:C8:6F:28:3A:D7:14:2E:6C:8B:78:40:FC:E4:96:60:EA:3E:AC:90 Certificate issuer: /CN=764e6cce-009d-4ab5-89d3-96e0c12500b3 Certificate serial: 010D0C9F432858477230E5082FDC42D64912F350 Authority key identifier: 18:8B:2D:45:11:18:1C:1B:43:F4:60:08:D3:0E:DF:00:F8:75:47:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/25bcf0e1-f33b-3658-89ef-f07b9951126c.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 53414 IP address blocks: 74.121.244.0/22 maxlen: 22 192.155.69.0/24 maxlen: 24 2606:16c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/764e6cce-009d-4ab5-89d3-96e0c12500b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/764e6cce-009d-4ab5-89d3-96e0c12500b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:e5:08:2f:dc:42:d6:49:12:f3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764e6cce-009d-4ab5-89d3-96e0c12500b3 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=8b9332bf-4a79-4a25-a998-8f10f955be10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:0b:ab:24:bd:d0:a9:5d:b9:93:31:4e:bf: 7f:4d:c7:72:9b:51:10:52:5f:9b:f4:7f:16:7b:d6: c6:aa:17:fe:6b:38:48:df:3d:2c:ee:63:4d:82:07: cb:9e:68:e3:33:76:06:13:56:be:c7:c7:2e:a1:6f: 09:cf:20:92:9f:50:f6:a9:3c:7d:db:0d:da:28:97: a4:8f:1c:9c:36:0d:8c:f3:f1:8e:53:4e:e8:db:d3: f4:30:32:06:d5:14:c8:a2:e9:1d:5a:14:cf:d2:4e: 15:90:8d:6e:ee:4c:89:6f:d8:27:3a:dc:91:fb:2e: 5e:8f:04:e9:6f:43:9a:c4:78:04:98:2b:e9:83:c1: 45:58:b1:f0:e2:fd:1a:d6:09:d7:cc:4c:97:77:d9: 6f:35:54:ca:64:31:a5:4e:14:45:31:b6:e4:08:82: f3:c4:82:97:06:f0:2c:2f:d2:3e:a0:f4:c5:b1:79: 71:90:d1:8c:e0:43:c6:84:ff:9c:f7:ff:bc:ac:f5: 1a:24:ea:ce:ff:9f:f5:1e:75:83:85:09:c9:3e:01: 07:11:41:7a:5d:2f:45:ae:76:39:1c:3c:34:ad:51: 1c:55:78:89:72:df:09:2d:f8:40:aa:74:ba:0e:c1: 0a:ca:ab:07:af:13:ca:25:b9:0c:ff:df:05:e6:64: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C8:6F:28:3A:D7:14:2E:6C:8B:78:40:FC:E4:96:60:EA:3E:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/25bcf0e1-f33b-3658-89ef-f07b9951126c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/764e6cce-009d-4ab5-89d3-96e0c12500b3.crl X509v3 Authority Key Identifier: keyid:18:8B:2D:45:11:18:1C:1B:43:F4:60:08:D3:0E:DF:00:F8:75:47:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3.cer sbgp-ipAddrBlock: critical IPv4: 74.121.244.0/22 192.155.69.0/24 IPv6: 2606:16c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:81:e5:de:55:9c:c2:4f:b4:f3:4a:ab:b0:f5:6c:10:4b:72: 18:0f:c7:30:2b:e5:cd:5c:de:2e:be:cc:5b:ae:f4:d6:a4:56: 8e:98:d6:bb:fb:aa:d0:b7:f6:3a:c0:1c:70:e0:33:32:11:af: f3:bd:57:96:b3:e5:57:d7:4a:35:0b:8c:e8:73:97:be:e5:66: 40:f5:d0:c1:bd:2b:42:da:b9:03:b0:75:d4:24:4d:94:fb:0c: 38:78:e9:9c:a1:c2:70:75:72:6a:3e:09:cc:d2:54:0c:85:fb: b6:19:dd:c8:bb:d2:b7:5e:63:8d:87:c2:ab:e2:c1:4a:c1:e2: 22:3f:61:8b:1e:0b:c7:53:67:81:91:18:00:e1:18:d6:7b:38: 9a:b7:5e:52:c2:64:d4:1f:3a:47:19:5f:f8:a7:46:de:77:b7: 08:69:83:57:90:d0:20:1a:ae:1b:74:30:d9:6a:fa:69:93:cd: 18:22:da:2e:34:dc:1a:0c:96:2b:df:5c:be:56:06:f5:d4:f7: f2:db:f5:4a:e3:af:28:18:5a:e7:63:bf:40:f5:b9:aa:69:f5: 9b:48:fb:66:c0:86:af:33:ad:4d:17:2f:23:f0:91:64:26:95: f7:82:fd:f9:69:ca:3f:94:09:66:47:e4:c4:04:7c:a6:dd:0e: f7:48:e8:d5 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEdyMOUIL9xC1kkS81AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY0ZTZjY2UtMDA5ZC00YWI1LTg5ZDMtOTZlMGMxMjUw MGIzMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk OGI5MzMyYmYtNGE3OS00YTI1LWE5OTgtOGYxMGY5NTViZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4kLqyS90KlduZMxTr9/Tcdym1EQUl+b9H8W e9bGqhf+azhI3z0s7mNNggfLnmjjM3YGE1a+x8cuoW8JzyCSn1D2qTx92w3aKJek jxycNg2M8/GOU07o29P0MDIG1RTIoukdWhTP0k4VkI1u7kyJb9gnOtyR+y5ejwTp b0OaxHgEmCvpg8FFWLHw4v0a1gnXzEyXd9lvNVTKZDGlThRFMbbkCILzxIKXBvAs L9I+oPTFsXlxkNGM4EPGhP+c9/+8rPUaJOrO/5/1HnWDhQnJPgEHEUF6XS9FrnY5 HDw0rVEcVXiJct8JLfhAqnS6DsEKyqsHrxPKJbkM/98F5mTS7QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFH/Ibyg61xQubIt4QPzklmDqPqyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NjRl NmNjZS0wMDlkLTRhYjUtODlkMy05NmUwYzEyNTAwYjMvMjViY2YwZTEtZjMzYi0z NjU4LTg5ZWYtZjA3Yjk5NTExMjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzY0ZTZjY2UtMDA5ZC00YWI1LTg5 ZDMtOTZlMGMxMjUwMGIzLzc2NGU2Y2NlLTAwOWQtNGFiNS04OWQzLTk2ZTBjMTI1 MDBiMy5jcmwwHwYDVR0jBBgwFoAUGIstRREYHBtD9GAI0w7fAPh1R+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NjRlNmNjZS0wMDlkLTRhYjUtODlkMy05NmUw YzEyNTAwYjMuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCSnn0AwQA wJtFMA0EAgACMAcDBQAmBhbAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGuB5d5VnMJPtPNKq7D1bBBLchgP xzAr5c1c3i6+zFuu9NakVo6Y1rv7qtC39jrAHHDgMzIRr/O9V5az5VfXSjULjOhz l77lZkD10MG9K0LauQOwddQkTZT7DDh46ZyhwnB1cmo+CczSVAyF+7YZ3ci70rde Y42HwqviwUrB4iI/YYseC8dTZ4GRGADhGNZ7OJq3XlLCZNQfOkcZX/inRt53twhp g1eQ0CAarht0MNlq+mmTzRgi2i403BoMlivfXL5WBvXU9/Lb9UrjrygYWudjv0D1 uapp9ZtI+2bAhq8zrU0XLyPwkWQmlfeC/flpyj+UCWZH5MQEfKbdDvdI6NU= -----END CERTIFICATE-----Generated at Mon Nov 25 15:59:23 2024 by rpki-client on console-fra.rpki-client.org