$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa File: 99ee8cf6-7047-378e-91c7-a5d27665d772.roa (raw, json) Hash identifier: XGwpmmMaG4Dpl8KkRpnrIVz6R2bIkSw41rAAmF/c4X0= Subject key identifier: 79:1D:80:82:5F:2F:C9:F8:69:9E:89:A9:F0:42:8E:52:E9:33:6B:2A Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285847C05C177A5106A84710BDED20 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa Signing time: Sun 03 Nov 2024 01:00:36 +0000 ROA not before: Sun 03 Nov 2024 01:00:36 +0000 ROA not after: Sat 01 Feb 2025 02:00:36 +0000 asID: 1239 IP address blocks: 64.20.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:5c:17:7a:51:06:a8:47:10:bd:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Nov 3 01:00:36 2024 GMT Not After : Feb 1 02:00:36 2025 GMT Subject: CN=5f81f216-ea78-46ea-bd63-a8f351cca25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0a:92:14:c0:b0:67:b4:fa:d1:77:3c:80:5f: 59:e2:7f:26:7c:8c:41:50:2d:2f:6b:c3:8c:77:98: 15:1f:e3:25:2d:9a:e3:82:e9:c1:df:75:2c:2f:5c: 7c:5b:b1:be:c7:da:ec:20:80:ee:b7:63:59:07:39: d7:6d:e3:6d:3d:a3:ea:0b:aa:77:dc:e4:d3:f8:c7: ba:83:ce:f7:4f:97:44:be:66:b0:da:cd:1b:1c:3c: 91:f5:32:72:11:03:52:bc:a6:37:8a:b5:1a:14:a1: 5c:c5:67:f8:38:e0:b9:a3:ab:5c:4f:b0:99:a1:2a: 39:9f:d4:f0:f0:01:c5:b3:0e:08:3d:43:b0:f4:49: 71:c6:4b:9d:b2:8a:30:0b:37:e1:f4:d3:2e:76:d6: d1:92:3e:96:26:45:ca:d3:05:29:5b:9b:e0:89:0d: dc:64:43:7d:3a:74:af:c1:28:4f:d8:ec:66:59:4c: a5:1b:71:51:33:b6:2e:64:05:ca:48:82:e4:82:ee: e7:e5:74:2a:f1:d0:45:d5:0f:49:79:4c:3b:43:ab: 53:bb:ef:74:d2:b2:ac:ae:bb:85:1d:0a:17:f0:40: 71:93:1f:9e:14:83:5f:46:0d:25:d7:7e:68:ef:33: fa:0d:d8:b1:d4:ea:f4:31:0f:f2:eb:7e:6a:e8:31: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:80:82:5F:2F:C9:F8:69:9E:89:A9:F0:42:8E:52:E9:33:6B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/99ee8cf6-7047-378e-91c7-a5d27665d772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4b:27:4d:3d:a3:b1:89:d3:13:a5:2a:19:49:d2:6c:5a:4f: 3a:6a:60:ff:9d:64:d8:9c:a5:d8:8b:a8:82:b4:74:ad:02:79: f6:a3:a7:9c:c8:14:80:32:e6:fd:ec:17:6f:70:c9:ab:3b:02: be:79:4a:88:ba:d5:35:28:07:9d:dd:24:d1:dc:97:54:1c:41: 23:a8:b7:d1:a6:fb:1a:57:4d:65:9b:ee:1d:18:24:df:b0:2d: 28:d1:70:74:d3:9c:e0:64:f5:cc:ea:44:99:85:d5:09:85:21: 8c:56:01:51:e3:cd:34:b4:82:a6:d2:8a:f0:1f:ed:be:49:d4: 43:f0:b5:4c:ca:08:54:dc:88:65:62:8a:5d:fa:9d:f2:95:07: 3f:08:3a:02:d0:ff:92:a6:40:15:d9:b6:7c:f7:93:ca:3d:fb: ef:34:46:29:2e:92:ef:91:94:f9:65:09:2a:16:a0:ec:d2:ad: 82:5e:94:83:ee:cc:9e:fe:f8:da:56:01:24:87:49:23:a9:41: bb:95:93:f8:06:bb:06:61:ab:6f:26:52:76:88:21:62:a6:1c: 8d:b2:4c:46:26:3c:80:c0:7c:cd:3a:46:bc:bb:49:6d:93:1a: 08:3f:80:da:25:e7:6c:b3:67:3f:16:2a:b0:6c:d2:62:4e:c4: 0d:51:18:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfAXBd6UQaoRxC97SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MTEwMzAxMDAzNloXDTI1MDIwMTAyMDAzNlowLzEtMCsGA1UEAxMk NWY4MWYyMTYtZWE3OC00NmVhLWJkNjMtYThmMzUxY2NhMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAqSFMCwZ7T60Xc8gF9Z4n8mfIxBUC0va8OM d5gVH+MlLZrjgunB33UsL1x8W7G+x9rsIIDut2NZBznXbeNtPaPqC6p33OTT+Me6 g873T5dEvmaw2s0bHDyR9TJyEQNSvKY3irUaFKFcxWf4OOC5o6tcT7CZoSo5n9Tw 8AHFsw4IPUOw9ElxxkudsoowCzfh9NMudtbRkj6WJkXK0wUpW5vgiQ3cZEN9OnSv wShP2OxmWUylG3FRM7YuZAXKSILkgu7n5XQq8dBF1Q9JeUw7Q6tTu+900rKsrruF HQoX8EBxkx+eFINfRg0l135o7zP6Ddix1Or0MQ/y635q6DEJdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkdgIJfL8n4aZ6JqfBCjlLpM2sqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOTllZThjZjYtNzA0Ny0z NzhlLTkxYzctYTVkMjc2NjVkNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdLJ009o7GJ0xOlKhlJ0mxaTzpqYP+dZNicpdiLqIK0dK0Cefajp5zI FIAy5v3sF29wyas7Ar55Soi61TUoB53dJNHcl1QcQSOot9Gm+xpXTWWb7h0YJN+w LSjRcHTTnOBk9czqRJmF1QmFIYxWAVHjzTS0gqbSivAf7b5J1EPwtUzKCFTciGVi il36nfKVBz8IOgLQ/5KmQBXZtnz3k8o9++80Rikuku+RlPllCSoWoOzSrYJelIPu zJ7++NpWASSHSSOpQbuVk/gGuwZhq28mUnaIIWKmHI2yTEYmPIDAfM06Rry7SW2T Ggg/gNol52yzZz8WKrBs0mJOxA1RGPw= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:12 2024 by rpki-client on console-ams.rpki-client.org