$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json) Hash identifier: pGid1V+C+uocFqdHIJkaDbMk8U6y4MvATIY2x8r8dMM= Subject key identifier: 5B:94:7E:C7:F9:3C:1F:1F:E1:F8:4F:15:EF:65:3F:E9:09:7D:CB:4B Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F432858479D76BC654FAB9AC8DDB5BF80 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 21902 IP address blocks: 64.110.16.0/21 maxlen: 21 108.163.68.0/22 maxlen: 22 216.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:bc:65:4f:ab:9a:c8:dd:b5:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=11e998ba-ffd8-4d81-9846-a1edb56b6fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b9:f8:de:9f:fc:c9:2e:8c:0e:82:9b:43:2a: 85:d2:8f:b1:2d:39:40:ad:34:61:9b:93:c8:c8:d2: b3:bd:e3:ba:bb:ef:be:99:a4:b2:e4:52:2c:53:aa: f1:fb:00:09:bc:e8:bc:8c:ca:d4:78:4c:cc:82:9b: e2:1d:f7:04:28:06:14:2b:2f:e9:59:6b:e0:c8:f0: 1d:62:48:a6:bb:e4:44:9f:77:8a:d5:fd:41:8e:06: dc:27:8f:e2:09:c5:31:ef:45:85:c4:f3:b0:9f:df: 8f:cc:a9:19:7c:84:a2:ba:53:cb:84:77:fa:cd:2f: 89:90:8e:e9:e4:0f:a6:42:1a:33:88:1e:52:ac:38: f2:ec:3b:c5:9d:68:04:29:de:e1:2d:d3:a7:a4:ff: 7c:6d:19:5c:c7:14:8d:09:73:ae:5c:f2:a7:3f:0e: 0e:96:a1:9c:b6:99:15:9c:d9:13:05:21:5e:c9:9e: 85:7d:26:7d:26:d4:b0:a1:22:15:37:38:64:69:f6: 04:24:e1:fe:a3:8e:c6:89:6c:86:36:84:b0:70:39: e8:8e:2d:73:01:5c:2d:64:62:e5:93:5f:45:0b:3b: e5:8d:f5:df:2d:d8:13:f3:5d:6c:ba:cb:48:5c:87: c7:e9:9d:70:10:a8:ff:a0:85:69:fb:4e:4e:85:6c: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:7E:C7:F9:3C:1F:1F:E1:F8:4F:15:EF:65:3F:E9:09:7D:CB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: 64.110.16.0/21 108.163.68.0/22 216.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c0:8a:e5:ab:e0:b2:cd:3a:09:a4:e2:ab:ce:78:cb:02:a0: dc:24:e1:d8:29:85:78:57:8f:32:74:7b:0e:7a:52:28:ac:b3: 0f:c2:98:13:a4:53:18:79:e8:39:e4:81:ac:6e:e0:d1:11:81: d9:36:4a:5a:d1:23:ae:40:5e:ee:ed:8b:0d:8d:91:e3:ea:5c: 1f:cd:ad:5a:e8:bd:5a:f1:58:2c:95:39:55:07:27:1a:a9:63: e2:56:d9:4a:f1:4b:85:be:0c:e0:4f:34:5b:e3:d4:ce:6c:31: cb:c8:a8:66:58:b7:a6:2b:09:24:45:8f:b7:b2:b3:2f:09:18: 79:83:6f:46:60:75:4a:b3:12:7b:58:c4:29:3f:a6:61:09:ca: 33:77:9e:47:70:64:b8:ad:66:19:8d:aa:c2:be:50:ad:58:c2: a1:aa:cc:9c:9a:76:ac:45:ba:11:b0:71:96:fa:1d:e2:99:dd: b1:84:27:0d:b4:cd:d1:5e:62:85:03:1e:60:5f:21:53:63:0b: a8:ff:84:ba:b8:d9:e6:77:69:4b:29:f8:cc:e8:9c:2d:12:8c: a6:16:83:34:53:c6:04:74:96:6f:b5:7e:7a:fb:0c:f6:63:3d: 5e:ce:c5:1b:0e:e1:a5:38:24:a9:a6:7b:72:8e:08:f5:a6:fb: bf:ca:a9:e1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEeddrxlT6uayN21v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MTFlOTk4YmEtZmZkOC00ZDgxLTk4NDYtYTFlZGI1NmI2ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirn43p/8yS6MDoKbQyqF0o+xLTlArTRhm5PI yNKzveO6u+++maSy5FIsU6rx+wAJvOi8jMrUeEzMgpviHfcEKAYUKy/pWWvgyPAd Ykimu+REn3eK1f1BjgbcJ4/iCcUx70WFxPOwn9+PzKkZfISiulPLhHf6zS+JkI7p 5A+mQhoziB5SrDjy7DvFnWgEKd7hLdOnpP98bRlcxxSNCXOuXPKnPw4OlqGctpkV nNkTBSFeyZ6FfSZ9JtSwoSIVNzhkafYEJOH+o47GiWyGNoSwcDnoji1zAVwtZGLl k19FCzvljfXfLdgT811sustIXIfH6Z1wEKj/oIVp+05OhWwaRwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFuUfsf5PB8f4fhPFe9lP+kJfctLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvNjViMWFkMzYtY2JlOS0z NzcxLTljOTYtZTcwMDc0NGU2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG4QAwQC bKNEAwQE2L2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIfAiuWr4LLNOgmk4qvOeMsCoNwk4dgphXhXjzJ0 ew56Uiissw/CmBOkUxh56Dnkgaxu4NERgdk2SlrRI65AXu7tiw2NkePqXB/NrVro vVrxWCyVOVUHJxqpY+JW2UrxS4W+DOBPNFvj1M5sMcvIqGZYt6YrCSRFj7eysy8J GHmDb0ZgdUqzEntYxCk/pmEJyjN3nkdwZLitZhmNqsK+UK1YwqGqzJyadqxFuhGw cZb6HeKZ3bGEJw20zdFeYoUDHmBfIVNjC6j/hLq42eZ3aUsp+MzonC0SjKYWgzRT xgR0lm+1fnr7DPZjPV7OxRsO4aU4JKmme3KOCPWm+7/KqeE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:21 2024 by rpki-client on console-fra.rpki-client.org