$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa File: e42d91f9-9804-3d76-af94-8d44f01a2d24.roa (raw, json) Hash identifier: k43CSiW9B7XpYsdHVo1lzHhp3MPuZsO/7xGVznxouy0= Subject key identifier: BF:82:25:23:70:9A:46:22:AC:CF:8E:14:D0:77:A7:D2:0D:8B:14:30 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285847E8F4FC0431C606CA075B5C40 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 36492 IP address blocks: 64.9.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:fc:04:31:c6:06:ca:07:5b:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=28ba6bd4-995f-456e-b7f7-a9971bc068e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e5:9e:a6:da:43:ba:52:7d:03:7e:88:e6:37: 6d:f2:79:98:ac:7d:3a:31:81:aa:48:2c:cf:30:68: b7:b7:01:85:75:02:b8:d7:5a:6b:b4:5e:86:7f:02: 12:54:9c:a0:83:7e:84:a7:4b:ae:d6:08:d0:5f:89: 1f:fa:8e:35:40:48:f2:c5:13:df:11:08:a9:32:7d: 74:dc:69:ea:03:89:cc:92:e4:9e:79:e6:89:b9:ae: 47:0e:70:e2:a1:f8:c5:c6:98:b8:85:5e:26:e8:3c: 70:ba:81:19:7b:b4:e9:84:3c:1f:16:a4:e1:b7:0a: f5:46:40:86:d9:6c:8f:e6:bb:0c:62:be:d1:ec:be: 33:ab:ad:79:db:51:55:0f:88:0d:f6:b9:d2:f0:bc: 37:26:10:32:40:8c:b6:6a:8f:48:fb:82:d2:6a:89: 2d:93:42:b0:16:62:50:89:62:5e:33:42:eb:bf:d4: 29:99:db:7d:e5:f2:6e:5b:39:89:ec:6e:e9:0b:04: c0:9d:d8:d8:cc:bd:54:80:e4:93:3d:fb:f9:fa:aa: 66:a3:f5:ed:c4:44:23:74:67:93:cc:02:c2:76:e2: cf:8a:06:28:4f:d3:33:03:f9:7f:0f:4a:e1:fc:7e: 1b:00:76:ad:78:72:51:51:78:cd:55:47:14:0d:e3: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:82:25:23:70:9A:46:22:AC:CF:8E:14:D0:77:A7:D2:0D:8B:14:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a5:c9:8e:ca:14:89:89:3a:4f:dc:cc:48:27:7e:ab:d2:ac: 25:41:f6:37:b4:ed:38:5a:2f:b9:a1:c7:d8:fa:af:f3:b1:b4: e0:c5:cb:d3:92:80:8b:47:8d:b1:65:14:9b:b7:64:a1:4f:83: aa:21:ce:8e:a4:e7:1a:49:6f:1c:b4:98:16:7b:bc:2c:84:1b: ac:89:f3:4e:aa:7a:63:3c:b3:d7:94:86:39:c0:b4:60:bf:6e: 2b:eb:0a:ea:4b:d1:70:5a:6f:41:d4:9b:57:d1:5e:cb:3b:72: 60:38:5b:a3:26:c8:c5:39:8d:91:f6:23:f3:da:5b:28:5e:99: f7:49:b6:32:65:74:15:29:70:cd:58:96:ba:16:e2:9a:63:b8: 20:0b:9a:3a:00:84:06:9b:4e:91:57:86:6b:f4:d0:c7:52:00: 64:ea:b0:cc:18:0b:b6:65:f0:cd:4a:40:5e:b0:f1:05:a5:47: ad:8a:30:f9:c5:87:d0:ab:20:ed:1b:bc:40:ef:19:8e:a5:c2: 05:7b:b9:dd:4a:d1:9e:27:21:60:69:16:55:7f:ef:2d:1c:f8: 6f:f2:af:ad:05:96:99:37:e7:96:d2:17:12:83:0f:f0:f3:f2: 85:3d:b6:22:3f:b9:b0:d0:15:ad:0a:f4:40:a4:fc:71:51:40: 37:09:4b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9PwEMcYGygdbXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk MjhiYTZiZDQtOTk1Zi00NTZlLWI3ZjctYTk5NzFiYzA2OGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOWeptpDulJ9A36I5jdt8nmYrH06MYGqSCzP MGi3twGFdQK411prtF6GfwISVJygg36Ep0uu1gjQX4kf+o41QEjyxRPfEQipMn10 3GnqA4nMkuSeeeaJua5HDnDiofjFxpi4hV4m6DxwuoEZe7TphDwfFqThtwr1RkCG 2WyP5rsMYr7R7L4zq61521FVD4gN9rnS8Lw3JhAyQIy2ao9I+4LSaoktk0KwFmJQ iWJeM0Lrv9Qpmdt95fJuWzmJ7G7pCwTAndjYzL1UgOSTPfv5+qpmo/XtxEQjdGeT zALCduLPigYoT9MzA/l/D0rh/H4bAHateHJRUXjNVUcUDeNHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+CJSNwmkYirM+OFNB3p9INixQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZTQyZDkxZjktOTgwNC0z ZDc2LWFmOTQtOGQ0NGYwMWEyZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFalyY7KFImJOk/czEgnfqvSrCVB9je07ThaL7mhx9j6r/OxtODFy9OS gItHjbFlFJu3ZKFPg6ohzo6k5xpJbxy0mBZ7vCyEG6yJ806qemM8s9eUhjnAtGC/ bivrCupL0XBab0HUm1fRXss7cmA4W6MmyMU5jZH2I/PaWyhemfdJtjJldBUpcM1Y lroW4ppjuCALmjoAhAabTpFXhmv00MdSAGTqsMwYC7Zl8M1KQF6w8QWlR62KMPnF h9CrIO0bvEDvGY6lwgV7ud1K0Z4nIWBpFlV/7y0c+G/yr60Flpk355bSFxKDD/Dz 8oU9tiI/ubDQFa0K9ECk/HFRQDcJS+k= -----END CERTIFICATE-----Generated at Sun Nov 24 15:28:55 2024 by rpki-client on console-fra.rpki-client.org