$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa File: a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa (raw, json) Hash identifier: leO4zIm/YalUvhx401YssYiA1s1nhyY72vBvRhQvGFE= Subject key identifier: 59:57:D7:AC:A4:33:26:4E:73:0C:CA:1D:0E:21:2C:C6:5D:01:27:9D Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858478E1BD0054FAC60792C153850 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 11232 IP address blocks: 24.124.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d0:05:4f:ac:60:79:2c:15:38:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=ad0ac0be-68f8-462d-87a4-765de40811ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:e4:dd:cb:67:ab:92:b0:d1:03:1c:1b:32: 65:7d:f2:71:ee:ae:0f:0a:22:2a:87:68:2e:5c:21: fc:05:d5:61:18:ad:b3:3c:ff:e1:f0:5c:74:69:6b: 3e:81:b3:e1:29:0f:9f:1f:ca:04:99:5b:62:a7:41: 85:e2:70:e2:92:b2:02:c2:d3:e7:31:64:53:11:8b: e8:3d:83:c8:60:8a:54:6b:8e:68:ac:60:b5:5d:4d: 6e:09:88:27:fa:aa:e5:47:8b:58:cd:98:d8:23:19: eb:59:d2:95:10:4b:a0:28:4f:b2:42:8a:07:67:cb: 29:06:3b:d3:75:0e:be:eb:50:a5:7e:c6:4b:01:fb: 64:5e:dd:89:c5:2d:62:38:5c:41:17:76:fe:b0:f3: 81:8a:e5:db:c4:ba:97:4d:77:21:2a:2f:5c:b3:fd: c2:f6:dc:38:43:2a:31:9c:88:21:ba:1c:df:95:da: 4e:6b:9b:e4:d4:6c:39:21:78:1d:71:bf:58:05:4f: 49:f4:33:64:07:07:ff:d3:83:ea:c2:1e:6e:a8:6f: 34:f7:b2:df:7a:67:67:b1:9c:45:3d:85:14:7a:14: 49:b8:32:eb:db:34:e2:a9:86:b6:b8:28:e3:49:35: df:c4:c9:80:2d:07:f8:a8:f0:7e:28:86:03:0b:4c: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:57:D7:AC:A4:33:26:4E:73:0C:CA:1D:0E:21:2C:C6:5D:01:27:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3b62f02-34bf-3f70-aa2d-97d2fa3a388b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f7:f3:31:92:a0:10:a2:29:14:ed:60:cb:bf:5b:fc:e7:c1: 3b:c6:83:d1:dc:7d:7c:33:ef:5e:a6:55:a1:16:87:36:77:5b: a5:14:70:d9:bf:90:6a:fd:01:71:1b:8f:85:ab:3f:64:f3:f2: e9:d9:63:58:1e:66:75:85:c4:98:6e:b1:27:7a:e7:78:bc:0f: 2b:2a:bd:b6:26:be:f8:c9:d7:e2:82:d8:c8:92:56:7b:5b:8a: e5:bb:44:de:6e:4b:0f:33:35:ff:4e:f4:7e:62:5c:f6:b8:9e: 52:39:b9:64:43:f5:23:48:ff:b7:eb:2b:bb:1e:02:e9:ab:d2: da:2d:d1:83:f7:b3:c2:3e:90:c9:c9:bb:15:a4:e9:ef:99:71: a0:75:7a:20:60:30:0f:c9:28:5f:cd:9b:6e:ce:00:77:1d:63: 9f:42:36:cd:13:e8:9c:4d:c4:77:c0:ff:d1:fb:ed:c1:49:6b: 93:31:dd:48:f6:bc:18:ae:49:c4:51:9b:10:9c:d8:ea:e2:d4: 21:02:3a:e1:79:fe:35:64:52:55:a7:2a:9c:b0:54:fd:68:18: b1:44:f2:67:9c:50:56:d1:e2:19:01:61:e0:be:15:8f:a0:36: d0:20:b1:d2:7e:28:40:cf:2c:a3:75:3c:3a:c6:be:ea:83:01: 8c:2d:38:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9AFT6xgeSwVOFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk YWQwYWMwYmUtNjhmOC00NjJkLTg3YTQtNzY1ZGU0MDgxMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyrk3ctnq5Kw0QMcGzJlffJx7q4PCiIqh2gu XCH8BdVhGK2zPP/h8Fx0aWs+gbPhKQ+fH8oEmVtip0GF4nDikrICwtPnMWRTEYvo PYPIYIpUa45orGC1XU1uCYgn+qrlR4tYzZjYIxnrWdKVEEugKE+yQooHZ8spBjvT dQ6+61ClfsZLAftkXt2JxS1iOFxBF3b+sPOBiuXbxLqXTXchKi9cs/3C9tw4Qyox nIghuhzfldpOa5vk1Gw5IXgdcb9YBU9J9DNkBwf/04Pqwh5uqG8097LfemdnsZxF PYUUehRJuDLr2zTiqYa2uCjjSTXfxMmALQf4qPB+KIYDC0y66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlX16ykMyZOcwzKHQ4hLMZdASedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTNiNjJmMDItMzRiZi0z ZjcwLWFhMmQtOTdkMmZhM2EzODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz38zGSoBCiKRTtYMu/W/znwTvGg9HcfXwz716mVaEWhzZ3W6UUcNm/ kGr9AXEbj4WrP2Tz8unZY1geZnWFxJhusSd653i8DysqvbYmvvjJ1+KC2MiSVntb iuW7RN5uSw8zNf9O9H5iXPa4nlI5uWRD9SNI/7frK7seAumr0tot0YP3s8I+kMnJ uxWk6e+ZcaB1eiBgMA/JKF/Nm27OAHcdY59CNs0T6JxNxHfA/9H77cFJa5Mx3Uj2 vBiuScRRmxCc2Ori1CECOuF5/jVkUlWnKpywVP1oGLFE8mecUFbR4hkBYeC+FY+g NtAgsdJ+KEDPLKN1PDrGvuqDAYwtOAU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:46 2024 by rpki-client on console-ams.rpki-client.org