$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e02e059-ac19-39d4-a070-3dfb9a49f69a.roa File: 7e02e059-ac19-39d4-a070-3dfb9a49f69a.roa (raw, json) Hash identifier: KOhoyD942gkmg/7BK2u9Ec5MSsAFDvS75EDU2Wz7qk4= Subject key identifier: 75:08:50:6E:70:2F:EE:B6:21:70:8D:27:5F:25:D5:32:42:E5:62:38 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D6CF3A83A1E284E469B5B0BC Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e02e059-ac19-39d4-a070-3dfb9a49f69a.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 64.114.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:3a:83:a1:e2:84:e4:69:b5:b0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=1e1edb31-d1d9-4144-9dc6-6a53efbefaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:62:33:d2:af:d9:eb:0a:d0:cf:38:0f:c2: 12:74:ea:c7:4c:8b:cb:1a:ca:48:f8:18:d0:ea:a7: c2:e4:8b:d5:99:33:b7:38:f6:2c:f1:33:16:c1:70: 06:dd:46:6a:22:73:01:c5:08:b1:1b:f7:07:b7:a8: 38:fb:a6:dd:53:40:15:7a:45:7d:cb:8c:ae:17:94: ca:73:51:91:50:e8:52:ee:0a:f8:56:d2:d9:ce:a8: 9f:f2:51:16:07:d2:c6:c8:0a:60:46:54:bc:31:2c: 07:9c:d0:12:b1:12:17:46:4a:0e:96:7e:02:2a:8e: f8:96:b9:2f:2d:19:2f:00:5b:a0:79:7a:da:0e:d8: 15:d1:de:be:99:85:7e:67:27:1c:13:db:b5:01:91: 9f:0a:87:44:65:73:4d:38:50:f5:a2:0b:0d:6a:b1: 94:81:26:b7:d2:3d:00:a8:18:7e:53:ed:d3:82:bb: 5d:f8:16:24:e4:53:15:f4:08:8d:26:51:bf:2d:35: 19:a6:41:33:b2:9a:57:66:b5:83:a7:b3:b3:39:4f: 56:41:89:b6:98:97:a5:d0:15:11:45:10:31:4c:8b: fb:b3:08:ab:d6:0d:ab:64:22:e9:c0:96:31:0e:5d: d3:0a:36:f0:ed:df:c0:c2:b6:4f:94:05:38:e6:54: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:08:50:6E:70:2F:EE:B6:21:70:8D:27:5F:25:D5:32:42:E5:62:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e02e059-ac19-39d4-a070-3dfb9a49f69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a9:05:90:24:8e:d4:58:c9:b6:6b:ae:43:2c:6e:bf:74:b7: 46:75:f2:63:cf:3d:78:32:f2:df:47:99:bb:4f:2d:60:45:9f: 09:f8:33:5d:48:ad:29:2e:56:54:75:95:93:be:d5:9b:bd:9a: 87:dc:06:1e:73:59:f8:e7:7d:39:17:a7:83:32:5d:6d:3a:fc: a4:ba:7d:19:43:6b:cd:77:2d:1f:95:5b:23:5d:24:2f:2f:8c: f0:30:06:ff:c5:c6:e3:b4:40:d1:d8:5f:a1:2e:4b:ba:e0:b3: 6a:c6:b6:24:7f:84:18:7b:29:5e:58:33:e6:03:6e:da:e9:ce: 58:92:51:2c:25:73:ff:18:ab:cd:dd:36:a2:9c:bf:aa:0e:28: 24:1e:15:ce:33:f6:5c:a6:5e:27:ec:0b:03:ff:83:33:3d:14: 65:39:e3:19:08:65:27:36:4f:f2:5e:ab:94:30:6b:8f:fa:e6: c0:6e:46:3e:ca:61:a2:5a:ee:88:6f:68:e6:4f:8d:c8:d1:05: 13:33:bc:5b:cd:00:00:73:fc:06:cc:19:74:22:6e:91:5e:26: be:5b:31:86:1a:d6:e7:c5:97:64:cd:ba:e2:8c:5e:4a:37:1b: 33:42:a0:e1:d5:a9:9f:7a:c5:1c:6e:c2:f1:0f:93:48:f5:5d: d5:5b:20:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWzzqDoeKE5Gm1sLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk MWUxZWRiMzEtZDFkOS00MTQ0LTlkYzYtNmE1M2VmYmVmYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArypiM9Kv2esK0M84D8ISdOrHTIvLGspI+BjQ 6qfC5IvVmTO3OPYs8TMWwXAG3UZqInMBxQixG/cHt6g4+6bdU0AVekV9y4yuF5TK c1GRUOhS7gr4VtLZzqif8lEWB9LGyApgRlS8MSwHnNASsRIXRkoOln4CKo74lrkv LRkvAFugeXraDtgV0d6+mYV+ZyccE9u1AZGfCodEZXNNOFD1ogsNarGUgSa30j0A qBh+U+3Tgrtd+BYk5FMV9AiNJlG/LTUZpkEzsppXZrWDp7OzOU9WQYm2mJel0BUR RRAxTIv7swir1g2rZCLpwJYxDl3TCjbw7d/AwrZPlAU45lTkYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUIUG5wL+62IXCNJ18l1TJC5WI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2UwMmUwNTktYWMxOS0z OWQ0LWEwNzAtM2RmYjlhNDlmNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCpBZAkjtRYybZrrkMsbr90t0Z18mPPPXgy8t9HmbtPLWBFnwn4M11I rSkuVlR1lZO+1Zu9mofcBh5zWfjnfTkXp4MyXW06/KS6fRlDa813LR+VWyNdJC8v jPAwBv/FxuO0QNHYX6EuS7rgs2rGtiR/hBh7KV5YM+YDbtrpzliSUSwlc/8Yq83d NqKcv6oOKCQeFc4z9lymXifsCwP/gzM9FGU54xkIZSc2T/Jeq5Qwa4/65sBuRj7K YaJa7ohvaOZPjcjRBRMzvFvNAABz/AbMGXQibpFeJr5bMYYa1ufFl2TNuuKMXko3 GzNCoOHVqZ96xRxuwvEPk0j1XdVbIKE= -----END CERTIFICATE-----Generated at Fri Nov 22 08:04:11 2024 by rpki-client on console-ams.rpki-client.org