$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json) Hash identifier: jmlIOCnUepd3JUZZgTZaC0Ch/bP8KQEh0pDVE57YB3I= Subject key identifier: CE:40:91:3B:12:B1:A1:8D:15:DC:72:44:0C:B6:34:1D:13:A2:CD:77 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F432858474420BA8A1AFC1C87A827E191 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa Signing time: Thu 19 Sep 2024 13:00:42 +0000 ROA not before: Thu 19 Sep 2024 13:00:42 +0000 ROA not after: Wed 18 Dec 2024 14:00:42 +0000 asID: 396998 IP address blocks: 64.68.193.0/24 maxlen: 24 2620:49:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:20:ba:8a:1a:fc:1c:87:a8:27:e1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Sep 19 13:00:42 2024 GMT Not After : Dec 18 14:00:42 2024 GMT Subject: CN=9eb7786a-ccae-4e40-89a5-e52c4fe95e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:d9:95:6b:5d:cf:9a:ef:d7:66:d1:3d:19: a7:c7:dd:55:32:15:20:c3:5f:77:98:78:cd:dc:02: 55:23:8e:39:7e:ce:95:ce:a3:93:d9:c4:db:65:4f: 1c:8f:a5:1e:97:df:24:3a:7e:72:b9:3b:95:5e:a8: d8:b9:14:1a:ce:57:9a:73:44:93:16:c1:7d:61:c2: c8:5d:6c:fd:7a:2a:63:57:47:3c:ef:08:bc:70:42: 0c:1e:aa:01:ed:0e:00:5e:76:1e:f0:76:8f:ae:99: a4:8a:e1:fc:e7:cf:0d:59:bb:55:63:ca:15:bc:e4: f8:ca:12:96:3e:ad:f7:c8:c6:44:3c:62:11:ac:ff: d9:ee:4d:67:f3:58:fa:a7:15:f2:54:78:17:b7:83: 63:22:c1:4c:85:98:a4:33:9b:58:98:1f:6f:55:b6: 13:55:ac:43:f5:5e:7d:0c:7d:7e:97:b4:9e:94:41: e2:8c:dc:86:bd:88:f9:94:79:2b:ea:57:97:b2:1f: 30:7a:06:7d:bd:cd:b4:1e:4f:f7:75:12:77:db:a2: df:87:87:a7:ab:11:70:b3:8e:1d:eb:37:aa:9f:4b: 8f:1a:1c:ad:bc:63:cd:c2:c5:1e:9d:c3:fd:c7:99: 5d:32:48:cd:8a:fc:da:38:5e:d0:6b:5a:cb:7a:17: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:40:91:3B:12:B1:A1:8D:15:DC:72:44:0C:B6:34:1D:13:A2:CD:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.193.0/24 IPv6: 2620:49:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:af:5f:4a:18:7b:11:66:8c:5c:ae:d7:7c:88:22:46:44:2e: bc:89:e9:12:8f:75:19:9f:ad:7c:2d:00:f4:e4:fb:a5:64:d2: 2e:f1:75:3d:2f:26:c3:4f:d3:6b:93:c2:12:73:04:4d:da:f5: 6f:9f:ea:f1:56:8f:a2:db:7c:ef:6f:16:60:d7:8f:2f:5d:aa: dc:01:e4:15:17:da:f2:ad:45:94:04:83:e3:2f:01:30:3d:3b: db:19:09:09:b7:c9:48:02:0c:da:f2:c6:2d:c8:0d:99:d8:53: cb:5f:c1:15:96:f8:3e:4e:bc:1d:72:d0:e4:40:47:ee:45:39: 0f:e9:b6:4a:db:b9:03:65:27:95:c3:21:1a:c8:3f:17:7e:de: 52:e5:68:f8:6e:2e:fb:84:76:15:9c:70:15:22:da:d9:87:fb: 33:59:aa:1d:37:f8:a1:c6:b3:7e:22:31:27:57:bb:48:a0:8a: b6:44:23:02:d0:f0:06:ce:bc:4f:6b:3b:7d:b9:de:75:8d:27: f2:b0:28:c3:33:15:9e:4e:74:08:47:77:c4:25:89:e0:4f:46: c5:c1:89:68:38:00:1f:4d:62:02:55:63:da:81:64:5c:84:34: 19:73:e7:18:03:44:5a:b9:55:d3:56:f5:d3:74:63:bd:49:78: 0d:96:02:02 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEdEILqKGvwch6gn4ZEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk OWViNzc4NmEtY2NhZS00ZTQwLTg5YTUtZTUyYzRmZTk1ZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTTZlWtdz5rv12bRPRmnx91VMhUgw193mHjN 3AJVI445fs6VzqOT2cTbZU8cj6Uel98kOn5yuTuVXqjYuRQazleac0STFsF9YcLI XWz9eipjV0c87wi8cEIMHqoB7Q4AXnYe8HaPrpmkiuH8588NWbtVY8oVvOT4yhKW Pq33yMZEPGIRrP/Z7k1n81j6pxXyVHgXt4NjIsFMhZikM5tYmB9vVbYTVaxD9V59 DH1+l7SelEHijNyGvYj5lHkr6leXsh8wegZ9vc20Hk/3dRJ326Lfh4enqxFws44d 6zeqn0uPGhytvGPNwsUencP9x5ldMkjNivzaOF7Qa1rLehdzPQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM5AkTsSsaGNFdxyRAy2NB0Tos13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdK9fShh7EWaMXK7XfIgiRkQuvInpEo91 GZ+tfC0A9OT7pWTSLvF1PS8mw0/Ta5PCEnMETdr1b5/q8VaPott8728WYNePL12q 3AHkFRfa8q1FlASD4y8BMD072xkJCbfJSAIM2vLGLcgNmdhTy1/BFZb4Pk68HXLQ 5EBH7kU5D+m2Stu5A2UnlcMhGsg/F37eUuVo+G4u+4R2FZxwFSLa2Yf7M1mqHTf4 ocazfiIxJ1e7SKCKtkQjAtDwBs68T2s7fbnedY0n8rAowzMVnk50CEd3xCWJ4E9G xcGJaDgAH01iAlVj2oFkXIQ0GXPnGANEWrlV01b103RjvUl4DZYCAg== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:05 2024 by rpki-client on console-ams.rpki-client.org