$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa File: 6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa (raw, json) Hash identifier: HlPN4q2nLPRptVjYYVGFvOYhpVvGgJRuRXUYaVHvNFk= Subject key identifier: 4B:12:D4:EE:FB:60:29:9E:D5:74:B9:21:64:8D:BC:84:33:75:0E:B5 Certificate issuer: /CN=d3f2a064-9e78-4a16-a8db-33eef399665d Certificate serial: 010D0C9F43285847B6E4997FBDB27D307C559300 Authority key identifier: 4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa Signing time: Wed 30 Oct 2024 15:37:40 +0000 ROA not before: Wed 30 Oct 2024 15:37:40 +0000 ROA not after: Tue 28 Jan 2025 16:37:40 +0000 asID: 397753 IP address blocks: 64.49.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:e4:99:7f:bd:b2:7d:30:7c:55:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f2a064-9e78-4a16-a8db-33eef399665d Validity Not Before: Oct 30 15:37:40 2024 GMT Not After : Jan 28 16:37:40 2025 GMT Subject: CN=37aa2298-8c80-48fd-b0a8-5fd7b89effc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:a6:04:bc:ec:ad:e0:30:10:a3:48:4f:58: 30:50:6b:8c:05:9e:1d:13:d5:04:42:e1:be:42:61: 33:82:39:f3:c9:6c:6e:ce:db:73:6e:15:13:1c:6e: 0e:40:4d:74:a4:3b:cf:80:00:16:0a:1a:ed:10:2b: 2c:d4:22:03:60:36:3f:83:15:ed:b4:dd:ee:f1:ed: 08:ce:f3:9c:78:69:9f:93:9d:90:2c:b4:d6:9c:7c: a8:65:f1:43:d7:a0:3c:e7:18:e6:91:73:50:1e:d2: 06:91:b2:3e:ba:5d:2b:99:35:cc:33:af:c9:e5:dd: df:bd:49:19:2b:ff:ff:05:ab:6e:af:ec:dc:19:4a: 1a:51:2c:e5:bd:bb:5b:ec:ad:12:76:b2:fc:76:b4: 8a:81:5d:9c:6d:ec:8d:68:af:b3:4a:b2:74:ff:bf: 99:ed:92:a1:21:a7:f1:51:a7:da:c8:dc:08:5e:2a: 11:d0:ba:9e:41:bc:f3:db:72:c6:77:44:77:3c:1a: dc:1d:b8:67:60:78:95:58:d8:38:53:ea:6b:e9:d5: f4:fe:ea:9d:ac:46:b4:f4:8d:1b:6b:7c:6f:90:02: cd:53:20:b5:a2:e5:7e:b2:fb:09:a8:f3:32:c6:74: 00:12:03:fb:ec:56:15:43:a0:96:b8:8e:05:40:3a: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:D4:EE:FB:60:29:9E:D5:74:B9:21:64:8D:BC:84:33:75:0E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl X509v3 Authority Key Identifier: keyid:4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer sbgp-ipAddrBlock: critical IPv4: 64.49.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bc:16:8b:e4:be:ef:e7:e8:a3:69:53:98:5b:a5:0f:17:0e: 46:41:2e:61:e2:f6:02:7f:94:b6:44:7f:fd:08:b1:90:9f:8a: 33:86:62:14:19:7a:e5:31:50:ab:9c:bf:84:9e:bd:b8:77:59: 84:3a:97:9e:b9:52:df:48:8a:6e:4f:52:53:b9:8d:16:77:25: 66:1f:9d:c9:88:37:a9:c7:a4:4e:1d:ae:fa:ed:ae:fe:ce:4b: 6c:9b:44:f0:17:76:f1:66:37:6a:fb:b6:78:44:07:6a:aa:5c: cb:47:22:65:0b:3b:60:64:be:07:f6:b0:fe:dc:6f:bb:6e:c2: 42:c0:b1:12:75:74:64:c7:6e:3f:7f:04:54:e2:04:eb:78:fb: 99:bb:ab:9e:72:7a:3a:37:33:5e:77:1a:e8:a9:be:9a:8b:38: a5:c2:77:26:3e:e1:ed:4f:b5:b0:80:1e:45:57:a3:c1:95:95: c4:71:88:3d:0f:a8:39:dd:a6:37:f2:3e:40:8b:75:58:7b:16: c1:0b:d3:38:d1:57:0a:af:cb:59:0b:4d:0e:b9:ce:c8:9f:0a: 29:33:76:42:2b:31:76:ea:43:5e:be:17:ad:4a:01:dd:12:5b: 64:bc:13:00:a6:4e:1c:80:11:e3:d3:b3:20:1d:ed:81:25:b5: fa:ed:b0:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe25Jl/vbJ9MHxVkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNmMmEwNjQtOWU3OC00YTE2LWE4ZGItMzNlZWYzOTk2 NjVkMB4XDTI0MTAzMDE1Mzc0MFoXDTI1MDEyODE2Mzc0MFowLzEtMCsGA1UEAxMk MzdhYTIyOTgtOGM4MC00OGZkLWIwYTgtNWZkN2I4OWVmZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG2mBLzsreAwEKNIT1gwUGuMBZ4dE9UEQuG+ QmEzgjnzyWxuzttzbhUTHG4OQE10pDvPgAAWChrtECss1CIDYDY/gxXttN3u8e0I zvOceGmfk52QLLTWnHyoZfFD16A85xjmkXNQHtIGkbI+ul0rmTXMM6/J5d3fvUkZ K///Batur+zcGUoaUSzlvbtb7K0SdrL8drSKgV2cbeyNaK+zSrJ0/7+Z7ZKhIafx UafayNwIXioR0LqeQbzz23LGd0R3PBrcHbhnYHiVWNg4U+pr6dX0/uqdrEa09I0b a3xvkALNUyC1ouV+svsJqPMyxnQAEgP77FYVQ6CWuI4FQDpZewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsS1O77YCme1XS5IWSNvIQzdQ61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Yy YTA2NC05ZTc4LTRhMTYtYThkYi0zM2VlZjM5OTY2NWQvNjY0NGUwOWUtZTZmMC0z NWFlLWI0MGQtZGNjMWE0YWI3MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNmMmEwNjQtOWU3OC00YTE2LWE4 ZGItMzNlZWYzOTk2NjVkL2QzZjJhMDY0LTllNzgtNGExNi1hOGRiLTMzZWVmMzk5 NjY1ZC5jcmwwHwYDVR0jBBgwFoAUTDgchSVZtsF4/+O6nYM7xxD7H1EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2YyYTA2NC05ZTc4LTRhMTYtYThkYi0zM2Vl ZjM5OTY2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq8Fovkvu/n6KNpU5hbpQ8XDkZBLmHi9gJ/lLZEf/0IsZCfijOGYhQZ euUxUKucv4Sevbh3WYQ6l565Ut9Iim5PUlO5jRZ3JWYfncmIN6nHpE4drvrtrv7O S2ybRPAXdvFmN2r7tnhEB2qqXMtHImULO2Bkvgf2sP7cb7tuwkLAsRJ1dGTHbj9/ BFTiBOt4+5m7q55yejo3M153GuipvpqLOKXCdyY+4e1PtbCAHkVXo8GVlcRxiD0P qDndpjfyPkCLdVh7FsEL0zjRVwqvy1kLTQ65zsifCikzdkIrMXbqQ16+F61KAd0S W2S8EwCmThyAEePTsyAd7YEltfrtsNk= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:45 2024 by rpki-client on console-fra.rpki-client.org