$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa File: a8d50708-183d-32fa-8e34-b0e93ebefc17.roa (raw, json) Hash identifier: V5UBzHDblrH9HcqdcKfTmOrwaty5NZhUgSoUkdvlKRE= Subject key identifier: EB:43:97:13:53:6C:A4:E7:F3:17:C4:54:46:0F:3C:10:F5:8C:BE:3B Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F432858474850C04E5AA53A73DD5C0D00 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 394111 IP address blocks: 64.147.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:c0:4e:5a:a5:3a:73:dd:5c:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=3c5dc5c9-9280-4202-b85d-f0f5544caac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:a3:8f:34:c9:27:65:da:b3:bd:c7:66:c6: b5:d4:6f:3e:0d:28:bb:e7:5f:8f:0e:9d:57:2f:a0: 00:b4:95:9e:38:b6:3e:80:db:c2:f7:4d:fc:da:7c: 6a:7d:00:dd:e6:09:4d:68:e1:2a:5c:e9:17:5c:55: 0e:6a:4d:91:06:5d:b0:6f:b4:75:34:03:75:aa:b8: 97:44:94:4c:23:08:8d:b8:8b:53:ad:dd:b8:70:49: cf:24:b1:7e:f7:5c:da:d1:93:e2:17:3c:e5:02:fb: 45:bd:dc:cf:75:2e:9c:fd:c3:3b:bc:aa:cd:fe:49: 20:1d:1c:36:38:f0:ed:83:87:d6:39:51:e4:6b:0f: 6f:48:dc:48:13:3c:3c:15:44:77:27:3e:61:a9:5b: 13:dc:61:01:73:4a:6c:ea:cc:ba:e5:97:12:73:a8: 53:3f:42:75:5f:45:d0:58:32:c7:57:42:b6:eb:ef: 2c:80:6a:7c:ff:68:0e:ce:a0:72:31:e4:5d:6b:b1: d7:38:9d:bb:ee:cc:82:1e:67:29:05:5a:6c:01:ee: 74:e2:55:db:9f:7c:b9:2e:62:69:36:f0:f1:0c:b6: 22:a0:e6:c7:8e:b3:0b:c6:c5:77:7a:89:e3:d8:ad: 5c:c7:a3:8d:86:6c:18:87:04:86:27:54:01:94:64: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:97:13:53:6C:A4:E7:F3:17:C4:54:46:0F:3C:10:F5:8C:BE:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e9:e8:e1:ed:04:39:72:b7:1f:3b:c3:98:9d:19:ad:e5:10: e3:7a:ae:4f:43:f0:1e:98:74:04:29:b5:bd:d2:ee:6d:c6:32: 50:c8:6d:6f:39:2b:ab:24:54:6d:12:8c:2b:4a:d2:2f:0f:df: 03:da:e2:c8:ee:e3:69:3c:08:eb:82:fd:ee:d1:f6:15:d5:d3: 02:b2:04:23:b3:ee:4a:18:b1:48:a4:d8:83:19:2f:27:77:b6: ec:a2:06:0f:1f:4c:ea:73:3b:8f:61:f4:24:5d:41:7c:65:15: db:d1:c6:3f:be:08:cc:68:ea:a8:23:cd:83:d1:0c:61:d6:55: 30:d8:de:3b:6d:a1:08:1a:9b:c6:cb:b3:ca:22:98:64:ed:0e: 04:68:d1:80:34:10:b6:61:b3:75:fe:69:b2:53:74:35:a0:70: bc:eb:04:cf:98:74:c4:29:b6:bd:5a:02:4b:da:b9:0c:df:57: 1c:17:a6:d3:94:92:bd:6e:1a:6b:3b:f8:2a:23:f3:16:17:97: 0e:24:01:2a:7c:98:e3:b1:8a:6a:60:45:92:2e:47:df:1e:99: 70:b9:79:a6:f3:e5:53:48:7f:53:be:e5:d8:d6:3d:e5:48:07: 3c:78:85:7f:4b:cd:0e:e2:8c:2f:14:66:f4:df:8e:89:6b:16: c0:cb:a3:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUMBOWqU6c91cDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk M2M1ZGM1YzktOTI4MC00MjAyLWI4NWQtZjBmNTU0NGNhYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRWjjzTJJ2Xas73HZsa11G8+DSi751+PDp1X L6AAtJWeOLY+gNvC90382nxqfQDd5glNaOEqXOkXXFUOak2RBl2wb7R1NAN1qriX RJRMIwiNuItTrd24cEnPJLF+91za0ZPiFzzlAvtFvdzPdS6c/cM7vKrN/kkgHRw2 OPDtg4fWOVHkaw9vSNxIEzw8FUR3Jz5hqVsT3GEBc0ps6sy65ZcSc6hTP0J1X0XQ WDLHV0K26+8sgGp8/2gOzqByMeRda7HXOJ277syCHmcpBVpsAe504lXbn3y5LmJp NvDxDLYioObHjrMLxsV3eonj2K1cx6ONhmwYhwSGJ1QBlGQ3QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtDlxNTbKTn8xfEVEYPPBD1jL47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYThkNTA3MDgtMTgzZC0z MmZhLThlMzQtYjBlOTNlYmVmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLp6OHtBDlytx87w5idGa3lEON6rk9D8B6YdAQptb3S7m3GMlDIbW85 K6skVG0SjCtK0i8P3wPa4sju42k8COuC/e7R9hXV0wKyBCOz7koYsUik2IMZLyd3 tuyiBg8fTOpzO49h9CRdQXxlFdvRxj++CMxo6qgjzYPRDGHWVTDY3jttoQgam8bL s8oimGTtDgRo0YA0ELZhs3X+abJTdDWgcLzrBM+YdMQptr1aAkvauQzfVxwXptOU kr1uGms7+Coj8xYXlw4kASp8mOOximpgRZIuR98emXC5eabz5VNIf1O+5djWPeVI Bzx4hX9LzQ7ijC8UZvTfjolrFsDLo4Y= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:11 2024 by rpki-client on console-ams.rpki-client.org