$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa File: faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa (raw, json) Hash identifier: N//NQin7AEHdPvvAYTWTubGlMhhVMkOOxHxc5kRJ2UQ= Subject key identifier: 77:61:4C:FE:88:80:0D:FE:1A:E7:61:66:AD:97:1E:64:52:EA:13:DE Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858478E1BCF8708F3A0122073B080 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 11232 IP address blocks: 24.124.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:cf:87:08:f3:a0:12:20:73:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=287ebfac-cf29-4dd0-bf87-0a895c03acbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:79:59:eb:4d:7b:84:f7:31:74:0a:6d:a6: 68:84:89:c3:07:53:13:2e:68:51:a6:6f:96:a4:25: fb:ae:96:bf:5e:10:84:cc:aa:1b:5e:5c:c3:9a:d9: 89:ed:9d:63:27:df:5b:d4:39:b6:2f:e2:ac:ec:9b: 77:e7:7e:eb:f3:03:24:d0:e1:78:1d:b7:c0:6f:5b: 84:b9:e7:b3:2e:e7:60:77:cd:ee:f0:0c:0a:81:ca: fe:cb:e9:9a:77:b8:11:ad:2f:ae:6f:9d:72:c1:d7: d6:37:6e:f6:b5:85:cf:97:a5:b9:83:d6:ff:25:1a: 9d:76:57:0e:17:8c:bd:65:f1:95:85:d9:09:38:33: c0:8b:06:ad:a1:1e:fb:05:d3:3a:30:b3:7d:20:1b: 4c:49:0f:52:e4:7c:74:29:e5:2d:78:43:e7:81:49: 4f:eb:7b:41:ca:45:4c:a0:7b:a8:a6:11:28:20:e1: dd:9f:18:9b:d2:ac:bd:a7:c8:71:5d:b4:23:99:b3: 94:35:09:06:2f:6b:96:a5:bc:2a:ec:92:77:07:91: a4:50:27:2b:6c:75:42:b1:15:8d:47:21:f0:d9:b5: 52:5a:65:ac:7a:8c:5c:e2:e2:1e:61:43:34:08:d0: 29:a2:4d:f7:ee:ce:f8:d6:25:09:17:d3:4e:68:f1: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:61:4C:FE:88:80:0D:FE:1A:E7:61:66:AD:97:1E:64:52:EA:13:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 24.124.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:a1:6d:79:c5:13:aa:4f:cb:22:26:04:a4:31:30:f7:e1:ea: f2:36:89:4a:d2:b1:53:a9:d7:e8:c2:d9:1d:26:4c:e3:6c:de: bc:d4:9c:70:8b:45:07:77:1c:ae:e1:0d:26:66:6b:fc:f8:f7: 90:08:a6:53:6a:12:fe:56:39:63:8c:67:1e:4e:c1:02:cb:ab: ed:c4:18:8f:02:45:3b:31:45:72:96:38:2b:9c:fb:e0:0a:09: 98:cd:cf:b7:87:b5:d3:1b:12:a0:5e:45:c7:01:a7:02:51:6f: 13:d6:89:9f:a1:85:dc:59:69:c1:a9:9a:2e:2e:05:f2:0b:f5: 61:31:9e:31:b5:37:d1:20:6c:bd:21:79:c1:6b:f7:27:74:a4: 01:75:e1:7d:dd:4d:93:0e:59:26:e4:0c:22:3c:c0:cb:9e:76: 89:09:e7:86:7a:24:52:b6:22:b0:14:81:74:ef:d6:64:cf:7a: ff:b9:25:7f:ad:15:ae:44:ad:4c:71:41:51:fe:70:20:04:d7: ea:c2:8c:ed:e0:a8:1c:92:6f:ed:4f:84:70:5d:aa:11:de:7c: ea:87:8a:e2:6c:20:0a:97:c7:9a:de:15:e4:15:3e:9c:de:b8: be:ec:fc:74:9a:4d:ff:ff:85:3a:4a:7a:6b:c2:b3:55:ce:7b: ec:1f:d6:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG8+HCPOgEiBzsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk Mjg3ZWJmYWMtY2YyOS00ZGQwLWJmODctMGE4OTVjMDNhY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdJ5WetNe4T3MXQKbaZohInDB1MTLmhRpm+W pCX7rpa/XhCEzKobXlzDmtmJ7Z1jJ99b1Dm2L+Ks7Jt3537r8wMk0OF4HbfAb1uE ueezLudgd83u8AwKgcr+y+mad7gRrS+ub51ywdfWN272tYXPl6W5g9b/JRqddlcO F4y9ZfGVhdkJODPAiwatoR77BdM6MLN9IBtMSQ9S5Hx0KeUteEPngUlP63tBykVM oHuophEoIOHdnxib0qy9p8hxXbQjmbOUNQkGL2uWpbwq7JJ3B5GkUCcrbHVCsRWN RyHw2bVSWmWseoxc4uIeYUM0CNApok337s741iUJF9NOaPFpLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdhTP6IgA3+GudhZq2XHmRS6hPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZmFhOWM4ZTUtMDA1Zi0z ZDM5LWJjY2QtZDg1ZmEwOWVkZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWhbXnFE6pPyyImBKQxMPfh6vI2iUrSsVOp1+jC2R0mTONs3rzUnHCL RQd3HK7hDSZma/z495AIplNqEv5WOWOMZx5OwQLLq+3EGI8CRTsxRXKWOCuc++AK CZjNz7eHtdMbEqBeRccBpwJRbxPWiZ+hhdxZacGpmi4uBfIL9WExnjG1N9EgbL0h ecFr9yd0pAF14X3dTZMOWSbkDCI8wMuedokJ54Z6JFK2IrAUgXTv1mTPev+5JX+t Fa5ErUxxQVH+cCAE1+rCjO3gqBySb+1PhHBdqhHefOqHiuJsIAqXx5reFeQVPpze uL7s/HSaTf//hTpKemvCs1XOe+wf1m8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:04 2024 by rpki-client on console-fra.rpki-client.org