$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa File: a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa (raw, json) Hash identifier: yX3Aw0G1Yhh8Hr2x3obBh5UP+0DKCH5VykiK9hvOKJA= Subject key identifier: DC:69:94:5A:54:75:5F:57:29:1C:1F:A7:17:94:F7:F6:43:8C:2E:52 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DC649DDA6178210750B10700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 852 IP address blocks: 64.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:9d:da:61:78:21:07:50:b1:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=c8ace0fd-8682-4464-a572-bbf4bb419d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:41:dd:46:53:44:74:b0:55:38:02:6a:dc:e6: 17:96:fc:5d:96:d0:01:79:51:de:4c:8d:47:02:d0: bd:f6:89:17:56:94:3d:13:51:73:90:0c:54:bb:89: 9b:1d:87:6c:dd:ec:7e:c8:b3:df:12:c6:e7:9c:58: 12:44:85:3c:6b:25:d4:30:24:40:de:b8:11:a8:8f: df:06:87:d8:be:39:dd:0a:37:93:d6:ae:93:12:3f: c9:72:8f:b3:4b:b4:3b:65:e7:dc:d1:88:bb:73:17: 9c:af:d0:62:1a:e0:16:95:d6:06:9c:3b:f3:d0:a0: ae:1c:bb:2e:81:48:91:78:2d:91:fa:08:b2:48:d3: b0:6c:2d:70:11:a8:96:22:94:ba:0e:c0:8d:ed:31: 40:14:33:c1:ba:61:f2:3a:9a:48:7d:3c:3e:9a:12: 48:17:50:b0:46:dd:a0:e7:c3:cf:b4:94:9c:6e:f7: e2:f3:12:56:76:fa:11:83:81:7d:d1:30:e2:b0:3c: 71:fc:82:c6:97:81:84:ab:23:8a:18:29:6d:1d:20: 18:f6:2b:99:63:15:51:62:d9:13:18:6a:04:d3:c1: 15:fa:59:fa:48:8a:24:e1:fb:1c:cd:be:e4:c1:6e: 13:7e:de:d4:7b:cb:2b:f9:ae:d2:1f:7f:5f:94:2b: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:94:5A:54:75:5F:57:29:1C:1F:A7:17:94:F7:F6:43:8C:2E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e7:f7:28:18:f1:48:f6:de:30:d6:5c:23:e1:84:7c:da:f8: d6:1f:57:b4:96:ce:e0:dd:7b:6d:d7:6a:c1:08:5a:f4:60:32: 0d:a1:e8:e8:12:6c:0a:a1:49:5b:2d:b3:6b:09:6a:e3:47:28: 93:89:0a:f0:86:f1:ab:e1:9d:74:c4:96:4c:4a:26:4c:8a:e4: 82:de:d5:8f:4f:c5:a7:2e:91:2b:d7:bc:10:0e:46:85:17:ce: 1e:ed:6e:44:fa:82:42:66:2c:3f:ff:b4:d5:2b:43:f0:b3:2d: 4f:91:0c:c6:73:64:8f:65:c1:24:e8:25:3f:50:a4:01:78:da: 53:f4:41:92:3b:7c:e2:ea:67:0b:1f:0a:25:a3:e1:d2:c7:7b: 53:c2:51:a4:b6:ed:e7:b4:bf:4f:57:39:7d:a8:0c:fb:e5:a1: 8b:f0:2e:e3:8d:c1:69:ce:45:cc:69:c8:3b:89:ad:79:85:2f: 1e:38:d4:3d:3b:df:de:14:4e:14:79:be:6a:46:4c:f2:41:6c: 3c:50:93:7c:6a:45:61:fc:7e:13:7c:0d:3d:fb:77:5b:03:be: e6:14:28:52:cd:60:78:98:1f:cd:54:e8:6d:e4:c7:1c:66:4f: 59:f6:d5:db:e3:f0:2c:67:7b:1a:2f:59:72:5e:db:f2:d8:60: f3:18:8a:9e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfcZJ3aYXghB1CxBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk YzhhY2UwZmQtODY4Mi00NDY0LWE1NzItYmJmNGJiNDE5ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EHdRlNEdLBVOAJq3OYXlvxdltABeVHeTI1H AtC99okXVpQ9E1FzkAxUu4mbHYds3ex+yLPfEsbnnFgSRIU8ayXUMCRA3rgRqI/f BofYvjndCjeT1q6TEj/Jco+zS7Q7Zefc0Yi7cxecr9BiGuAWldYGnDvz0KCuHLsu gUiReC2R+giySNOwbC1wEaiWIpS6DsCN7TFAFDPBumHyOppIfTw+mhJIF1CwRt2g 58PPtJScbvfi8xJWdvoRg4F90TDisDxx/ILGl4GEqyOKGCltHSAY9iuZYxVRYtkT GGoE08EV+ln6SIok4fsczb7kwW4Tft7Ue8sr+a7SH39flCvVDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNxplFpUdV9XKRwfpxeU9/ZDjC5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTAxMGI5NjctYzNlZS0z OWFkLTkwZTgtZWZhM2NiYzNiYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQHIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASOf3KBjxSPbeMNZcI+GEfNr41h9XtJbO4N17bddqwQha9GAyDaHo6BJs CqFJWy2zawlq40cok4kK8Ibxq+GddMSWTEomTIrkgt7Vj0/Fpy6RK9e8EA5GhRfO Hu1uRPqCQmYsP/+01StD8LMtT5EMxnNkj2XBJOglP1CkAXjaU/RBkjt84upnCx8K JaPh0sd7U8JRpLbt57S/T1c5fagM++Whi/Au443Bac5FzGnIO4mteYUvHjjUPTvf 3hROFHm+akZM8kFsPFCTfGpFYfx+E3wNPft3WwO+5hQoUs1geJgfzVTobeTHHGZP WfbV2+PwLGd7Gi9Zcl7b8thg8xiKng== -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:49 2024 by rpki-client on console-fra.rpki-client.org