$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa File: 2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa (raw, json) Hash identifier: op6hsBRh7ytypNWziq4bRr6Dfw0peOWgJJZQMLc0ulc= Subject key identifier: AD:B6:95:81:3B:42:0C:D7:C0:7A:51:8C:85:A3:DC:85:69:E4:20:92 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285847C05C1766CD0AD6D588A0FDA8 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa Signing time: Sun 03 Nov 2024 01:00:36 +0000 ROA not before: Sun 03 Nov 2024 01:00:36 +0000 ROA not after: Sat 01 Feb 2025 02:00:36 +0000 asID: 7029 IP address blocks: 64.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:5c:17:66:cd:0a:d6:d5:88:a0:fd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Nov 3 01:00:36 2024 GMT Not After : Feb 1 02:00:36 2025 GMT Subject: CN=0db6e5ef-5900-4ea2-a571-921b42ec592a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e9:04:a8:01:f5:6a:8e:00:d7:8b:9e:84:ce: 40:27:91:01:6c:26:d1:50:14:76:c4:f5:b4:12:de: 90:7d:d7:11:9d:fa:5c:e9:a0:b5:31:d9:1f:02:12: 50:d8:06:54:3e:49:85:b9:42:a5:95:af:93:71:a1: e3:f6:ec:83:48:cc:df:54:e4:d8:c1:01:ed:6d:9a: 9b:2d:e6:bc:dd:ef:56:d0:6c:8a:40:99:68:d4:de: 52:cd:b5:6c:d6:19:26:40:4a:04:72:06:23:ef:ca: b0:1e:ba:07:ae:07:e3:8f:57:1e:3c:68:12:8c:5c: d0:a8:48:dd:13:88:c1:01:34:67:c8:7f:b5:33:16: 60:b5:09:79:36:4a:2d:12:ea:de:f0:f1:6e:02:a2: 15:e4:55:b7:f4:9a:a4:86:92:13:5c:12:4a:50:f2: 96:83:23:3e:f7:01:7a:62:81:38:cd:1d:17:c9:13: b6:58:fc:fa:29:b9:a1:9e:ad:13:24:05:e9:91:ed: 65:05:23:b9:b9:6e:f4:0b:98:90:e4:be:a7:9b:01: b0:d0:51:5a:c2:d4:f2:c8:7d:9b:21:78:e0:3b:89: 11:f3:2a:6c:28:e0:fb:c8:aa:22:eb:83:81:2f:d1: 8f:15:61:17:3c:23:af:70:5f:cb:74:19:e4:a3:09: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B6:95:81:3B:42:0C:D7:C0:7A:51:8C:85:A3:DC:85:69:E4:20:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/2162ae57-7e28-34cb-a6d1-4c7ebd7c65b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f6:b5:1c:08:b9:27:78:6f:64:9d:1d:1e:2d:c4:20:84:45: 85:06:07:04:c7:cf:cc:93:0f:b9:93:67:2a:c5:1c:ca:ed:f8: fb:b6:16:83:10:17:09:72:8c:be:98:88:ae:cf:76:ed:e8:96: 23:25:c7:20:04:f9:b3:19:40:3f:ee:e7:20:68:13:92:a8:68: 33:31:7b:59:a8:48:de:40:eb:8b:a0:75:68:6b:e3:90:f6:ea: 41:93:99:3b:5d:fa:ec:9f:97:48:6a:4c:9c:72:0d:31:f7:29: 8e:8f:14:7f:90:ee:c5:7f:a9:ec:fa:87:0e:14:4c:a2:ca:3b: f8:d7:96:40:14:20:28:7b:14:73:b3:ed:22:48:4a:28:ca:c5: 42:05:75:a2:d8:d2:9a:e2:a9:10:f3:a9:57:32:3e:64:60:d3: 58:1c:ee:c8:c4:37:92:d1:a1:3a:3d:b8:cf:92:ed:ce:e8:98: 39:fe:cf:c4:cf:05:a6:9b:f8:92:19:6e:92:e5:e2:82:e3:76: 83:4e:74:19:25:14:8b:c7:be:34:5e:be:d4:69:ca:5d:0d:64: 3b:cb:5d:d7:38:ed:ef:41:6f:03:b4:ed:71:c2:36:8d:3b:f1: 83:97:26:aa:d9:e0:f2:5f:94:71:23:9e:8f:79:2d:0b:a9:93: 69:e5:26:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfAXBdmzQrW1Yig/agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MTEwMzAxMDAzNloXDTI1MDIwMTAyMDAzNlowLzEtMCsGA1UEAxMk MGRiNmU1ZWYtNTkwMC00ZWEyLWE1NzEtOTIxYjQyZWM1OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgekEqAH1ao4A14uehM5AJ5EBbCbRUBR2xPW0 Et6QfdcRnfpc6aC1MdkfAhJQ2AZUPkmFuUKlla+TcaHj9uyDSMzfVOTYwQHtbZqb Lea83e9W0GyKQJlo1N5SzbVs1hkmQEoEcgYj78qwHroHrgfjj1cePGgSjFzQqEjd E4jBATRnyH+1MxZgtQl5NkotEure8PFuAqIV5FW39JqkhpITXBJKUPKWgyM+9wF6 YoE4zR0XyRO2WPz6Kbmhnq0TJAXpke1lBSO5uW70C5iQ5L6nmwGw0FFawtTyyH2b IXjgO4kR8ypsKOD7yKoi64OBL9GPFWEXPCOvcF/LdBnkowl+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK22lYE7QgzXwHpRjIWj3IVp5CCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMjE2MmFlNTctN2UyOC0z NGNiLWE2ZDEtNGM3ZWJkN2M2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL2tRwIuSd4b2SdHR4txCCERYUGBwTHz8yTD7mTZyrFHMrt+Pu2FoMQ FwlyjL6YiK7Pdu3oliMlxyAE+bMZQD/u5yBoE5KoaDMxe1moSN5A64ugdWhr45D2 6kGTmTtd+uyfl0hqTJxyDTH3KY6PFH+Q7sV/qez6hw4UTKLKO/jXlkAUICh7FHOz 7SJISijKxUIFdaLY0priqRDzqVcyPmRg01gc7sjEN5LRoTo9uM+S7c7omDn+z8TP Baab+JIZbpLl4oLjdoNOdBklFIvHvjRevtRpyl0NZDvLXdc47e9BbwO07XHCNo07 8YOXJqrZ4PJflHEjno95LQupk2nlJjg= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:10 2024 by rpki-client on console-fra.rpki-client.org