$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa File: 63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa (raw, json) Hash identifier: egBD/VAJ9Or2De0jGIV7mhtQNCVzepHM1o+qlBJUDyk= Subject key identifier: A3:E8:72:C3:33:7A:3A:38:BA:C5:3A:BA:7C:69:85:0E:87:7E:3B:4F Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584784566A34CF937122E23D48A0 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 26548 IP address blocks: 167.253.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:6a:34:cf:93:71:22:e2:3d:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=08908f68-591b-4e06-b4c1-d7db21b93e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:9d:85:e6:a4:e3:14:06:c2:c7:6a:b8:6e: 7b:89:d6:33:d3:89:56:a7:ab:bc:68:f9:ff:cd:4b: 90:9f:13:c4:30:0a:9b:32:1b:da:11:60:d8:3b:fd: 2d:9c:2d:26:48:96:a3:6c:70:4d:57:86:68:40:bc: 85:5e:27:f9:b9:8e:d4:08:68:52:8d:74:b7:c2:28: 3a:01:a0:db:b7:9f:e9:90:a0:5d:ea:7a:95:1d:cb: f5:7b:e0:e4:8e:98:23:c4:71:2a:14:86:d7:59:ab: 04:02:c5:3b:5b:e2:57:93:b3:7f:56:66:d9:43:7f: 93:e8:12:48:f6:79:3e:8a:f7:29:24:93:25:00:35: fc:2e:48:95:c8:1f:5b:6e:d2:5c:21:2c:2f:5c:46: cf:dd:be:9b:d1:dc:ca:2a:8b:a8:36:6e:97:49:69: ef:cd:2a:3a:fc:2d:70:a5:9c:0f:96:69:02:ce:65: f9:72:68:b8:3a:e4:f7:26:f9:93:a6:34:9a:b7:3f: 7f:18:02:ed:22:c3:39:63:5e:01:bf:2c:2c:b2:3f: aa:e7:3e:43:3b:ff:ce:e2:db:bc:ae:59:44:87:9f: 23:69:1f:cc:cd:5a:e1:66:18:f9:0d:b5:8b:79:1b: c9:9e:8e:05:2b:87:f0:c2:99:f9:fb:83:f5:d8:40: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E8:72:C3:33:7A:3A:38:BA:C5:3A:BA:7C:69:85:0E:87:7E:3B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5b:24:cd:83:50:5d:a2:36:e1:9a:99:48:71:e1:42:37:cf: 2d:e7:a7:7d:11:7a:5e:6d:29:52:d1:18:20:cf:b7:c2:43:b7: ef:81:4b:31:07:0f:bd:ff:45:b7:ab:24:b0:90:3b:61:6c:e0: 9c:fc:ac:1b:42:59:45:fb:70:e3:2d:15:93:98:10:0a:d2:b5: 13:6d:66:13:52:9b:88:33:0a:3f:9b:e0:8f:68:2b:1a:65:41: 5e:08:e3:4b:23:cf:36:6b:9e:30:b5:8e:de:08:44:55:05:c2: 89:90:2e:a0:c2:72:97:f5:f3:7d:9e:2e:ec:8e:f5:68:31:75: 92:22:4e:d7:44:be:8b:2e:c2:a7:84:7c:65:58:26:c4:80:8f: ac:76:e1:41:bc:98:55:1a:0f:f7:dc:9b:cc:86:08:9b:c0:0e: 7c:14:06:e9:16:a9:5e:30:c6:da:70:a9:e1:aa:0a:19:ee:9b: eb:be:e9:ce:16:bd:dc:80:9c:54:ab:c0:84:41:67:97:80:e9: 20:ef:b0:ae:ad:f2:18:77:8d:78:ea:ce:e4:4e:ee:53:8f:bc: 44:08:a2:34:0e:c3:d0:76:af:5d:49:64:02:06:5d:ea:07:21: 2c:6d:b9:f8:07:c5:db:75:86:02:9f:07:73:0d:33:e6:fa:9d: 5b:db:21:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVmo0z5NxIuI9SKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk MDg5MDhmNjgtNTkxYi00ZTA2LWI0YzEtZDdkYjIxYjkzZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Wdheak4xQGwsdquG57idYz04lWp6u8aPn/ zUuQnxPEMAqbMhvaEWDYO/0tnC0mSJajbHBNV4ZoQLyFXif5uY7UCGhSjXS3wig6 AaDbt5/pkKBd6nqVHcv1e+DkjpgjxHEqFIbXWasEAsU7W+JXk7N/VmbZQ3+T6BJI 9nk+ivcpJJMlADX8LkiVyB9bbtJcISwvXEbP3b6b0dzKKouoNm6XSWnvzSo6/C1w pZwPlmkCzmX5cmi4OuT3JvmTpjSatz9/GALtIsM5Y14Bvywssj+q5z5DO//O4tu8 rllEh58jaR/MzVrhZhj5DbWLeRvJno4FK4fwwpn5+4P12EB8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPocsMzejo4usU6unxphQ6HfjtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvNjNhNzkzNTQtYjdhNi0z ZjlhLTlhYmItOGQ4YjgyZDE0YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdbJM2DUF2iNuGamUhx4UI3zy3np30Rel5tKVLRGCDPt8JDt++BSzEH D73/RberJLCQO2Fs4Jz8rBtCWUX7cOMtFZOYEArStRNtZhNSm4gzCj+b4I9oKxpl QV4I40sjzzZrnjC1jt4IRFUFwomQLqDCcpf1832eLuyO9WgxdZIiTtdEvosuwqeE fGVYJsSAj6x24UG8mFUaD/fcm8yGCJvADnwUBukWqV4wxtpwqeGqChnum+u+6c4W vdyAnFSrwIRBZ5eA6SDvsK6t8hh3jXjqzuRO7lOPvEQIojQOw9B2r11JZAIGXeoH ISxtufgHxdt1hgKfB3MNM+b6nVvbIbA= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:07 2024 by rpki-client on console-ams.rpki-client.org