$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa File: 225cf2de-ddc9-3faa-8f31-758be401c844.roa (raw, json) Hash identifier: jh+7cqcrnH7t0FXnOaGV52oXBreqC2iHWb0KiF9zQlk= Subject key identifier: 6A:2F:BE:DF:58:5C:38:B8:CE:6F:2C:09:54:06:5D:D3:60:20:D4:2D Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285847C1DF5A76820AAA322A71BD80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 16384 IP address blocks: 64.25.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:5a:76:82:0a:aa:32:2a:71:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=04a51e78-d402-4f46-9415-d8b706dd9165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:c0:58:aa:2a:86:fd:f5:1a:54:27:3a:02: 86:9b:a8:79:10:c8:4f:7c:78:db:23:87:66:b7:a7: 85:37:8d:4c:65:82:b1:e6:b8:0e:52:45:ac:69:13: 6f:d1:bb:58:25:55:0d:5f:24:01:0c:5a:df:91:1e: a9:6d:6b:c8:1b:4b:d7:f3:14:e8:3b:86:aa:6b:68: 1f:6d:8f:24:67:04:06:2b:f3:0a:75:b4:8e:f8:00: 50:25:b0:82:6c:12:79:c8:32:00:00:a7:5e:83:68: 4e:f1:2d:da:46:3d:8c:96:e9:31:67:ef:73:3f:6b: 30:31:b3:96:33:c2:8a:7d:ff:4e:5e:17:55:a8:5c: 51:4a:6d:54:86:d1:06:b8:15:4d:8a:b1:4f:9e:8f: 8a:39:3f:0d:85:99:44:0b:6d:ae:c3:1b:ef:55:de: 5a:66:82:42:98:ac:22:fb:04:ef:7c:40:f3:83:36: eb:7a:36:a8:98:93:ec:a4:c5:dc:2b:da:d5:5c:6d: 39:1b:2d:f2:08:28:8e:ee:b1:e9:b2:be:75:78:ea: ea:1c:cd:89:c4:69:54:02:fe:43:e3:67:53:e4:c5: 86:9e:18:b1:b0:92:ab:2d:27:1f:6d:2c:46:15:6a: a8:f9:c5:76:16:3d:56:a9:3e:06:5e:2b:8f:c0:88: d8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2F:BE:DF:58:5C:38:B8:CE:6F:2C:09:54:06:5D:D3:60:20:D4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.25.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:51:26:7b:c2:63:23:5d:99:1f:3c:46:5f:dd:94:84:29:cc: 14:19:39:40:86:f6:0d:11:81:da:94:05:f1:aa:bd:80:71:a8: 4f:2e:45:ab:41:cf:d8:3c:79:c4:25:82:b9:b6:e0:6e:aa:2f: 95:a1:bc:bb:18:1d:26:db:87:d1:dc:ba:6f:c9:fb:77:69:22: d5:8f:90:df:f3:58:8d:77:35:5d:28:ea:04:48:42:45:97:fa: 6c:1d:6e:5c:ca:3c:0c:1f:dc:ad:06:0a:b5:38:06:c0:cb:7f: e7:b6:29:28:8e:87:53:6b:33:c5:39:bf:cd:df:39:b0:26:12: 52:5b:f6:bf:40:16:06:b5:d4:3c:4b:05:45:72:e8:fe:41:40: 2a:8e:c5:c6:4d:6f:30:c3:fb:67:46:f9:04:a3:d6:62:4c:6e: 8e:7d:0f:63:98:36:58:bf:58:68:00:a9:a4:bf:09:a8:f7:58: 9c:4a:50:dc:24:bc:c0:32:a3:ae:c7:3f:33:c9:f3:ab:9b:6b: 7f:77:34:63:b6:a2:a6:57:59:c9:fc:ea:2e:50:a9:bd:a3:02: c5:12:13:88:61:52:5d:b6:a4:8e:6f:9b:7c:08:e7:bc:72:01: 00:9f:b4:b2:49:98:46:5d:51:f7:b9:cc:9f:19:2c:f8:ee:29: 49:50:9a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31p2ggqqMipxvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk MDRhNTFlNzgtZDQwMi00ZjQ2LTk0MTUtZDhiNzA2ZGQ5MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshzAWKoqhv31GlQnOgKGm6h5EMhPfHjbI4dm t6eFN41MZYKx5rgOUkWsaRNv0btYJVUNXyQBDFrfkR6pbWvIG0vX8xToO4aqa2gf bY8kZwQGK/MKdbSO+ABQJbCCbBJ5yDIAAKdeg2hO8S3aRj2MlukxZ+9zP2swMbOW M8KKff9OXhdVqFxRSm1UhtEGuBVNirFPno+KOT8NhZlEC22uwxvvVd5aZoJCmKwi +wTvfEDzgzbrejaomJPspMXcK9rVXG05Gy3yCCiO7rHpsr51eOrqHM2JxGlUAv5D 42dT5MWGnhixsJKrLScfbSxGFWqo+cV2Fj1WqT4GXiuPwIjYOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGovvt9YXDi4zm8sCVQGXdNgINQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjI1Y2YyZGUtZGRjOS0z ZmFhLThmMzEtNzU4YmU0MDFjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9RJnvCYyNdmR88Rl/dlIQpzBQZOUCG9g0RgdqUBfGqvYBxqE8uRatB z9g8ecQlgrm24G6qL5WhvLsYHSbbh9Hcum/J+3dpItWPkN/zWI13NV0o6gRIQkWX +mwdblzKPAwf3K0GCrU4BsDLf+e2KSiOh1NrM8U5v83fObAmElJb9r9AFga11DxL BUVy6P5BQCqOxcZNbzDD+2dG+QSj1mJMbo59D2OYNli/WGgAqaS/Caj3WJxKUNwk vMAyo67HPzPJ86uba393NGO2oqZXWcn86i5Qqb2jAsUSE4hhUl22pI5vm3wI57xy AQCftLJJmEZdUfe5zJ8ZLPjuKUlQmtA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:17 2024 by rpki-client on console-ams.rpki-client.org