$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d2b96f72-16f1-39b0-adb0-ade6c5a38a19.roa File: d2b96f72-16f1-39b0-adb0-ade6c5a38a19.roa (raw, json) Hash identifier: QtLZYPVsOADNkWU/xmgapmIQZk2ELg0j1fyuhbDKh3s= Subject key identifier: BA:A3:65:06:EF:0C:0B:2C:6F:F9:9D:36:AB:25:FD:AE:39:65:BD:78 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858478E1BD7AFB7082259E5B1AA30 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d2b96f72-16f1-39b0-adb0-ade6c5a38a19.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 11232 IP address blocks: 24.124.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:d7:af:b7:08:22:59:e5:b1:aa:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=b0398dfb-e9fd-47aa-aee7-1429eada18d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:e1:34:f2:e1:7f:d0:e0:f7:16:6d:d6:96: 7f:ce:c8:2a:f5:3c:31:4f:88:03:71:9e:46:5b:7b: 69:8f:df:1c:65:6a:f4:3d:cf:b0:65:56:0d:1f:b8: 65:1c:af:69:f5:8a:51:42:d6:cf:51:ba:cc:a1:3f: c7:1c:c9:6e:d7:b4:75:1a:b1:e5:bb:64:e3:82:e7: f1:cf:4c:77:ab:2b:69:34:b8:56:5d:86:29:87:ba: f5:64:24:39:97:98:37:0e:79:0c:b2:6a:d9:cf:d7: 01:a1:4d:d6:4a:0f:7b:f5:c0:3c:d6:51:28:f7:d6: 30:f6:c2:0f:ed:d0:30:1c:55:b1:ff:78:4b:ef:1e: 2c:60:35:e0:7b:a3:90:a3:d8:a0:83:9b:ad:30:76: bd:dc:c8:a4:f7:71:af:1d:ab:95:cf:a5:a3:e6:17: 5e:37:14:8c:22:f6:13:14:6c:68:d5:4c:0a:58:37: 26:12:a5:80:92:73:ab:7d:65:28:bd:90:af:0b:9a: 2f:65:26:b4:d9:c8:f2:aa:64:1e:29:28:9f:f2:24: 8c:d9:6e:75:73:d9:f6:3d:91:81:60:02:f6:dd:59: 86:db:45:2b:73:05:cd:51:b0:37:dc:8e:75:62:0f: 8b:d7:24:c4:3b:5e:55:8d:c0:cd:67:33:4e:02:a4: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A3:65:06:EF:0C:0B:2C:6F:F9:9D:36:AB:25:FD:AE:39:65:BD:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d2b96f72-16f1-39b0-adb0-ade6c5a38a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7b:48:01:36:26:d9:61:78:7d:e0:b2:81:bd:22:59:b3:99: 7e:23:75:26:b5:b3:6b:b4:ed:0f:50:66:50:06:0c:8c:71:51: c1:1c:87:b3:33:4b:4c:a6:3a:25:94:2d:3c:f7:3f:26:92:13: 9c:34:0e:3c:02:c5:af:9e:49:af:e0:0d:28:6d:4e:12:67:ca: 71:de:3f:34:e1:66:36:16:93:a0:97:65:ac:d9:ab:cd:42:52: 39:29:cf:aa:b3:d0:47:10:c2:ad:50:f2:9b:bb:f0:14:ac:cf: 26:81:13:b4:cf:57:12:f5:4d:b1:6b:a8:63:49:5c:07:7e:e9: bc:bf:f0:b1:5b:37:f4:70:5b:b6:44:50:25:41:55:9a:9a:34: 78:dd:8d:28:87:8d:8f:c0:81:ee:ab:21:65:ce:34:0f:6b:54: 8a:40:3d:ee:57:a7:39:0c:69:56:c6:bc:bc:1d:3d:a1:f9:5d: 01:77:26:17:47:f9:50:42:6c:04:ee:71:c7:83:07:3f:65:b1: b4:39:15:15:10:3a:b7:e2:6c:3d:c2:2a:57:26:4e:4e:e1:c4: a0:58:ac:ae:da:62:1f:9c:6a:ff:59:76:f6:48:b2:56:7d:4c: 2d:b6:87:8e:d4:50:2f:c4:86:d1:99:1e:71:12:c7:c0:28:c7: ff:ce:c2:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG9evtwgiWeWxqjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk YjAzOThkZmItZTlmZC00N2FhLWFlZTctMTQyOWVhZGExOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8vhNPLhf9Dg9xZt1pZ/zsgq9TwxT4gDcZ5G W3tpj98cZWr0Pc+wZVYNH7hlHK9p9YpRQtbPUbrMoT/HHMlu17R1GrHlu2Tjgufx z0x3qytpNLhWXYYph7r1ZCQ5l5g3DnkMsmrZz9cBoU3WSg979cA81lEo99Yw9sIP 7dAwHFWx/3hL7x4sYDXge6OQo9igg5utMHa93Mik93GvHauVz6Wj5hdeNxSMIvYT FGxo1UwKWDcmEqWAknOrfWUovZCvC5ovZSa02cjyqmQeKSif8iSM2W51c9n2PZGB YAL23VmG20UrcwXNUbA33I51Yg+L1yTEO15VjcDNZzNOAqRqlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqjZQbvDAssb/mdNqsl/a45Zb14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDJiOTZmNzItMTZmMS0z OWIwLWFkYjAtYWRlNmM1YTM4YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHxnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ7SAE2JtlheH3gsoG9IlmzmX4jdSa1s2u07Q9QZlAGDIxxUcEch7Mz S0ymOiWULTz3PyaSE5w0DjwCxa+eSa/gDShtThJnynHePzThZjYWk6CXZazZq81C Ujkpz6qz0EcQwq1Q8pu78BSszyaBE7TPVxL1TbFrqGNJXAd+6by/8LFbN/RwW7ZE UCVBVZqaNHjdjSiHjY/Age6rIWXONA9rVIpAPe5XpzkMaVbGvLwdPaH5XQF3JhdH +VBCbATucceDBz9lsbQ5FRUQOrfibD3CKlcmTk7hxKBYrK7aYh+cav9ZdvZIslZ9 TC22h47UUC/EhtGZHnESx8Aox//Ownc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:46 2024 by rpki-client on console-ams.rpki-client.org