$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa File: 905a33b2-a747-3537-9cda-de429490b8f0.roa (raw, json) Hash identifier: P5RBscNmQ2qp1HOabxi9AsAMButO6I8BK11DJ3Twreg= Subject key identifier: 56:D4:F8:25:AB:02:5A:F6:0C:96:71:03:36:0F:6E:AF:40:7E:B8:94 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285847E1F0CBD0750F06C6C6F943C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa Signing time: Fri 15 Nov 2024 01:42:00 +0000 ROA not before: Fri 15 Nov 2024 01:42:00 +0000 ROA not after: Thu 13 Feb 2025 01:42:00 +0000 asID: 931 IP address blocks: 64.112.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f0:cb:d0:75:0f:06:c6:c6:f9:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Nov 15 01:42:00 2024 GMT Not After : Feb 13 01:42:00 2025 GMT Subject: CN=d0e24e6e-49f1-4d58-8ad8-4f71dba465df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:93:ce:1f:ba:da:8d:17:d2:00:2c:98:70: df:d0:6a:95:a7:eb:59:6f:63:44:58:6a:a7:e1:c2: 9d:1e:27:51:64:93:38:40:7e:32:b7:23:e1:b1:13: e7:ad:33:73:c7:8e:5e:92:0d:4c:c8:7e:4d:18:0c: 95:55:a9:cd:fd:03:e4:43:5e:2c:57:bd:8e:34:8b: 81:9e:40:19:e1:07:40:fb:af:51:77:6b:3d:09:b9: 79:f6:b7:d7:61:2a:9d:bb:7a:fb:8c:13:13:82:30: c7:65:f7:81:73:43:5b:51:07:e8:80:64:8b:17:06: 2e:6f:29:06:92:9d:60:ce:1f:3f:7f:2a:da:64:54: 75:29:76:af:ab:db:0a:b6:62:fb:1a:bd:2c:0a:41: c0:c8:59:16:64:54:92:7b:32:a9:03:db:b5:af:c8: 24:d7:b3:33:2f:eb:6c:9a:ca:6c:2a:b7:d2:e0:04: 70:0e:c6:d7:0c:97:e8:1d:4e:76:66:fd:36:55:40: 80:1c:68:dd:e6:21:00:40:11:db:0f:91:fa:95:14: 5d:00:52:8f:07:4e:0d:c7:83:9d:2a:3b:76:6c:ed: 5a:b4:fd:a4:98:f8:5f:97:53:4c:6e:9a:d5:2a:b3: 45:5b:01:08:83:59:d8:fa:8e:9d:c4:36:c9:23:a9: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:F8:25:AB:02:5A:F6:0C:96:71:03:36:0F:6E:AF:40:7E:B8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:83:2d:7c:1a:67:fb:eb:d1:14:bf:18:0c:65:60:bc:03:2c: b5:51:f3:58:ce:9a:b1:ff:b0:0e:26:d3:ff:43:18:94:5f:68: a8:1c:a9:e2:e2:32:49:95:d7:40:4a:9a:f9:e9:db:6b:eb:7b: 13:f9:14:3e:c7:4b:dd:c6:3d:0a:93:54:90:67:7a:4c:9b:0e: ce:5b:1a:7c:cb:a3:17:70:9f:a9:02:36:50:4e:e2:1f:98:b7: eb:f7:5c:72:e8:9f:10:20:b9:45:34:2f:64:c2:a3:f7:ac:b3: a9:44:aa:7f:5b:77:1e:82:88:c0:85:a9:39:12:c9:f9:8f:ac: 2c:70:61:87:bb:e8:75:e6:f9:b4:e5:8b:2a:bf:4e:b7:8d:17: f2:22:46:06:d6:54:e3:32:c6:f6:07:58:63:4c:0f:68:f7:a6: d3:b8:e2:10:c3:6a:e4:4a:d7:fe:94:ff:98:05:4b:3c:15:b7: f0:d2:d2:00:d3:d7:95:b7:5e:b6:4f:4e:bd:db:bb:88:38:31: 93:d7:9e:bb:1a:cc:6c:66:7e:b5:54:5f:83:59:c8:54:18:94: b5:e7:14:2a:bc:18:00:c6:6c:0f:4a:0f:63:e4:32:81:78:2d: c3:8d:77:3e:24:11:bf:cd:82:06:c1:2b:46:45:fe:3f:93:d7: ec:55:cf:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh8MvQdQ8Gxsb5Q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI0MTExNTAxNDIwMFoXDTI1MDIxMzAxNDIwMFowLzEtMCsGA1UEAxMk ZDBlMjRlNmUtNDlmMS00ZDU4LThhZDgtNGY3MWRiYTQ2NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7STzh+62o0X0gAsmHDf0GqVp+tZb2NEWGqn 4cKdHidRZJM4QH4ytyPhsRPnrTNzx45ekg1MyH5NGAyVVanN/QPkQ14sV72ONIuB nkAZ4QdA+69Rd2s9Cbl59rfXYSqdu3r7jBMTgjDHZfeBc0NbUQfogGSLFwYubykG kp1gzh8/fyraZFR1KXavq9sKtmL7Gr0sCkHAyFkWZFSSezKpA9u1r8gk17MzL+ts mspsKrfS4ARwDsbXDJfoHU52Zv02VUCAHGjd5iEAQBHbD5H6lRRdAFKPB04Nx4Od Kjt2bO1atP2kmPhfl1NMbprVKrNFWwEIg1nY+o6dxDbJI6lCtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbU+CWrAlr2DJZxAzYPbq9AfriUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOTA1YTMzYjItYTc0Ny0z NTM3LTljZGEtZGU0Mjk0OTBiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCDLXwaZ/vr0RS/GAxlYLwDLLVR81jOmrH/sA4m0/9DGJRfaKgcqeLi MkmV10BKmvnp22vrexP5FD7HS93GPQqTVJBnekybDs5bGnzLoxdwn6kCNlBO4h+Y t+v3XHLonxAguUU0L2TCo/ess6lEqn9bdx6CiMCFqTkSyfmPrCxwYYe76HXm+bTl iyq/TreNF/IiRgbWVOMyxvYHWGNMD2j3ptO44hDDauRK1/6U/5gFSzwVt/DS0gDT 15W3XrZPTr3bu4g4MZPXnrsazGxmfrVUX4NZyFQYlLXnFCq8GADGbA9KD2PkMoF4 LcONdz4kEb/NggbBK0ZF/j+T1+xVz2c= -----END CERTIFICATE-----Generated at Sun Nov 24 15:27:20 2024 by rpki-client on console-fra.rpki-client.org