$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa File: 602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa (raw, json) Hash identifier: NEoQzaBccvlH/PIa8VppIMHWq619+26uBe+JaK72nkc= Subject key identifier: 8F:94:BF:02:89:46:61:48:F1:34:E5:02:1A:0F:5A:33:64:37:AC:24 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858471D9B823E352C308448B31E00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa Signing time: Thu 05 Sep 2024 17:51:43 +0000 ROA not before: Thu 05 Sep 2024 17:51:43 +0000 ROA not after: Wed 04 Dec 2024 18:51:43 +0000 asID: 16739 IP address blocks: 67.217.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1d:9b:82:3e:35:2c:30:84:48:b3:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 17:51:43 2024 GMT Not After : Dec 4 18:51:43 2024 GMT Subject: CN=77a30d67-1d72-4acc-9f76-2fa5d72f1b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:da:31:c1:cc:e8:27:cc:6c:b7:33:ab:ab: 94:fb:00:a3:1b:8a:1e:94:b5:22:6a:85:77:15:d7: 3c:59:f6:b7:39:81:54:35:26:8e:7f:5e:16:03:52: bd:0e:5a:5d:06:ee:10:8a:99:3a:86:a8:34:5b:34: a1:64:e7:2e:58:de:68:38:0f:8d:7d:86:0e:94:58: 84:17:19:c1:22:6d:7f:69:81:74:9c:63:e4:fa:bb: 9e:ef:99:9b:7b:d5:e0:34:6d:ba:b2:f6:f8:c4:ba: 06:2c:b3:8b:80:5c:43:1f:2b:e6:8e:5a:af:e7:94: 11:f2:19:a5:7a:8d:be:7a:58:9c:3a:11:a4:67:3c: c6:06:be:09:6a:d2:ad:d0:82:39:fb:95:ee:1e:f7: 20:32:5f:64:b2:2d:c1:82:88:d8:23:b3:0f:24:fd: d4:ab:59:af:8c:5e:80:f9:50:29:51:a6:c9:45:f6: e7:79:1a:ad:12:f0:ba:0a:b2:fd:8b:50:63:e7:83: 0e:5a:61:3f:c1:5e:e4:cf:a2:63:71:1f:4f:78:ca: b1:16:61:b0:eb:1d:8d:37:0c:f3:33:1a:23:5a:4c: 65:af:c6:36:4e:1e:9c:d6:a4:46:76:bc:37:e5:56: 60:6d:34:23:44:39:21:06:fc:10:7a:6f:ca:ea:85: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:BF:02:89:46:61:48:F1:34:E5:02:1A:0F:5A:33:64:37:AC:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:96:f6:1f:fa:47:fb:6c:a5:b6:92:ce:13:58:c8:a2:b0:84: 8f:38:93:ce:5a:a4:d6:66:de:2c:4c:f6:09:4e:71:7c:9a:cd: 77:75:e1:48:a4:bf:3b:a7:48:39:1d:a9:87:b5:00:6a:37:c0: 9f:05:71:42:a9:53:84:83:5d:0e:2b:a8:c6:b9:a8:9d:4a:48: 0c:23:ed:da:39:c8:92:2e:b8:19:94:64:bd:77:e8:f5:3c:d1: 68:35:79:50:22:7d:a4:63:cc:40:25:b5:b9:06:21:86:e3:d6: 44:6a:89:38:8f:82:0a:95:ed:94:d1:c5:cc:d6:c9:73:5b:e3: 42:d8:fd:e4:29:7c:39:ae:c6:57:01:e9:b8:ae:62:26:2a:9d: 8b:82:a2:59:d9:83:5b:26:74:24:6d:30:f2:9b:df:88:f7:ae: f4:59:60:3c:8c:98:e9:c5:02:5c:08:5e:27:d4:22:16:4f:fc: 5e:b0:3b:97:85:1a:f4:7d:2f:16:6e:f1:cb:0c:41:d1:82:41: a5:c3:c9:ec:3b:b8:f2:f4:d1:83:8d:ba:6b:c9:7a:b8:18:df: 4d:a8:95:39:83:a8:bb:ae:66:b7:54:8d:47:94:44:91:54:b0: 3d:32:d3:21:9b:6d:b4:34:67:fe:3a:86:6b:c4:33:10:97:70: b2:59:6b:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcdm4I+NSwwhEizHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MDkwNTE3NTE0M1oXDTI0MTIwNDE4NTE0M1owLzEtMCsGA1UEAxMk NzdhMzBkNjctMWQ3Mi00YWNjLTlmNzYtMmZhNWQ3MmYxYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFzaMcHM6CfMbLczq6uU+wCjG4oelLUiaoV3 Fdc8Wfa3OYFUNSaOf14WA1K9DlpdBu4Qipk6hqg0WzShZOcuWN5oOA+NfYYOlFiE FxnBIm1/aYF0nGPk+rue75mbe9XgNG26svb4xLoGLLOLgFxDHyvmjlqv55QR8hml eo2+elicOhGkZzzGBr4JatKt0II5+5XuHvcgMl9ksi3BgojYI7MPJP3Uq1mvjF6A +VApUabJRfbneRqtEvC6CrL9i1Bj54MOWmE/wV7kz6JjcR9PeMqxFmGw6x2NNwzz MxojWkxlr8Y2Th6c1qRGdrw35VZgbTQjRDkhBvwQem/K6oXc7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+UvwKJRmFI8TTlAhoPWjNkN6wkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNjAyZjA3ZTEtMDIxYi0z NDdkLWI1NWYtMWEzYzZhMGFmZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6W9h/6R/tspbaSzhNYyKKwhI84k85apNZm3ixM9glOcXyazXd14Uik vzunSDkdqYe1AGo3wJ8FcUKpU4SDXQ4rqMa5qJ1KSAwj7do5yJIuuBmUZL136PU8 0Wg1eVAifaRjzEAltbkGIYbj1kRqiTiPggqV7ZTRxczWyXNb40LY/eQpfDmuxlcB 6biuYiYqnYuColnZg1smdCRtMPKb34j3rvRZYDyMmOnFAlwIXifUIhZP/F6wO5eF GvR9LxZu8csMQdGCQaXDyew7uPL00YONumvJergY302olTmDqLuuZrdUjUeURJFU sD0y0yGbbbQ0Z/46hmvEMxCXcLJZa2s= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org