$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa File: f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa (raw, json) Hash identifier: K02OP7guF0iUn1bGiJenNqoo3wpdHP1pLCZ8Wsl3Yo4= Subject key identifier: BA:AC:1B:19:3B:EE:99:B1:73:70:EC:8F:08:96:05:85:59:C3:A6:95 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858478E1BCE68CA3A9D15FB887840 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 11232 IP address blocks: 24.220.229.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:ce:68:ca:3a:9d:15:fb:88:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=023049e6-c8b9-4747-9183-22134789cec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:2a:ad:31:ea:37:b8:2f:a5:a9:aa:00:95: 06:bd:3d:2b:70:a3:07:60:a9:68:28:1c:4c:d3:f2: 6f:95:54:95:a3:53:f7:ea:8b:80:18:9a:de:e4:73: fc:7d:25:f0:cc:55:bc:14:71:51:65:2d:90:7d:07: 32:64:e8:26:81:df:0b:f5:35:03:b4:51:db:1e:96: 6c:6f:40:4f:e2:9b:77:4d:cd:c1:d5:bc:fd:10:d2: ad:c5:a0:cd:32:e8:82:24:b6:38:e8:47:e7:90:14: 11:52:f7:ec:1b:e1:11:1a:4c:04:d5:df:51:4b:af: cb:ef:90:85:69:ec:1d:f4:d2:df:09:b7:21:34:a1: 0c:28:8c:19:01:00:e6:c1:c0:48:7f:3b:fe:16:a4: 44:37:a2:ac:4a:54:57:d8:97:8c:fb:a4:81:46:69: 6a:28:1c:d0:b9:13:2c:18:7b:20:7b:76:38:7a:7d: 42:38:f5:0f:20:00:b5:48:42:af:0e:ad:80:27:6d: b0:6f:b5:b0:37:ba:f4:ae:50:fd:03:9e:93:33:5e: e4:80:ab:10:ae:70:4e:d8:ab:7e:ed:2e:78:0b:70: 65:58:a5:e2:f6:05:e7:02:26:91:44:5a:23:d2:50: 77:f7:72:f7:ae:b2:95:d4:16:a6:33:2a:01:41:1f: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AC:1B:19:3B:EE:99:B1:73:70:EC:8F:08:96:05:85:59:C3:A6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.220.229.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bb:de:9e:29:37:d6:1c:19:f9:be:24:86:ea:09:b2:fe:b4: 3e:85:bc:97:6b:5f:73:74:c2:15:56:60:e3:dc:96:63:4d:32: b8:01:96:4e:5b:be:e8:c6:94:24:5c:1a:81:90:23:6b:49:51: ed:f5:f8:c5:86:5b:7d:96:5a:6d:e8:e2:d9:95:82:ca:20:c8: 65:20:ff:81:55:a8:57:ec:e3:01:8d:57:e1:3c:4b:95:08:e5: 5e:60:16:2c:b2:48:35:19:70:36:b3:dc:d9:a6:ad:44:3e:6c: 27:8d:e9:2e:cf:ba:82:03:d8:02:47:e8:95:42:6d:82:4c:e5: b0:ea:f3:84:78:30:4a:2a:a0:6d:f4:12:71:24:09:e5:5a:d0: 81:26:d8:dd:55:5f:61:48:65:fd:ca:be:59:74:42:f2:5c:09: a9:32:31:1c:4f:ad:9e:06:c4:82:d4:bc:e3:30:80:ad:ff:71: 12:b3:51:a6:03:27:6c:0d:07:78:40:78:8c:27:de:46:05:9d: 21:1d:e1:f1:da:95:60:62:a3:e8:fe:22:26:2e:5d:13:73:7a: 08:38:56:2e:a9:e8:e9:f9:b0:0e:85:b4:c8:fa:2e:60:d5:7a: 3c:b8:d6:f9:3f:34:ca:ed:2b:64:6b:10:34:ea:0c:14:c2:97: 80:ff:c5:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeOG85oyjqdFfuIeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk MDIzMDQ5ZTYtYzhiOS00NzQ3LTkxODMtMjIxMzQ3ODljZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAcqrTHqN7gvpamqAJUGvT0rcKMHYKloKBxM 0/JvlVSVo1P36ouAGJre5HP8fSXwzFW8FHFRZS2QfQcyZOgmgd8L9TUDtFHbHpZs b0BP4pt3Tc3B1bz9ENKtxaDNMuiCJLY46EfnkBQRUvfsG+ERGkwE1d9RS6/L75CF aewd9NLfCbchNKEMKIwZAQDmwcBIfzv+FqREN6KsSlRX2JeM+6SBRmlqKBzQuRMs GHsge3Y4en1COPUPIAC1SEKvDq2AJ22wb7WwN7r0rlD9A56TM17kgKsQrnBO2Kt+ 7S54C3BlWKXi9gXnAiaRRFoj0lB393L3rrKV1BamMyoBQR9zyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLqsGxk77pmxc3DsjwiWBYVZw6aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjNiMTMzYTAtY2M3Ny0z YjZiLTk2ZTQtOWUxODZkMDJhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEGNzloDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOu96eKTfWHBn5viSG6gmy/rQ+hbyXa19zdMIVVmDj3JZjTTK4AZZO W77oxpQkXBqBkCNrSVHt9fjFhlt9llpt6OLZlYLKIMhlIP+BVahX7OMBjVfhPEuV COVeYBYsskg1GXA2s9zZpq1EPmwnjekuz7qCA9gCR+iVQm2CTOWw6vOEeDBKKqBt 9BJxJAnlWtCBJtjdVV9hSGX9yr5ZdELyXAmpMjEcT62eBsSC1LzjMICt/3ESs1Gm AydsDQd4QHiMJ95GBZ0hHeHx2pVgYqPo/iImLl0Tc3oIOFYuqejp+bAOhbTI+i5g 1Xo8uNb5PzTK7StkaxA06gwUwpeA/8XQ -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:04 2024 by rpki-client on console-fra.rpki-client.org