$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa File: 02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa (raw, json) Hash identifier: bBNuSNPiQdf7EgkugQe0YQfkI3xkE7YURFiDHq9ie1g= Subject key identifier: BE:D2:7A:83:90:E9:5D:96:5D:BF:FB:D3:49:DF:6B:BA:02:85:70:00 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F432858476B36419F89CE088A65E1AB80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 399629 IP address blocks: 64.95.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:41:9f:89:ce:08:8a:65:e1:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=d2ea350e-9409-4d57-b38a-5397a58fe237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:0c:42:8f:49:5c:b9:92:d9:59:59:52:75: 55:e3:89:4f:5c:74:96:be:49:36:96:82:96:63:38: 3e:80:5c:e5:54:df:71:38:ee:7a:b6:ec:94:f8:7b: 92:08:b9:26:98:7b:3a:4c:ef:70:c4:de:7b:83:aa: 3e:c6:f8:f0:6c:3b:1f:88:a3:57:44:47:1d:5b:d3: 53:0b:c0:60:05:e8:63:4d:73:c8:69:fb:0e:48:77: 16:4d:39:b0:15:c9:a2:f7:ca:e7:31:cb:70:8f:d6: 6b:ce:8d:71:18:be:1a:d1:4c:26:2b:83:e5:ed:07: 67:6e:08:c5:20:9e:2a:3f:89:08:8c:03:28:8d:5f: 60:8f:bd:48:09:af:05:c5:92:66:29:62:03:44:6f: 84:a4:3e:d8:dc:9c:67:7c:b6:8c:eb:9e:1e:0d:24: 3c:21:9a:98:a2:e9:80:48:56:c7:30:ef:d3:88:f8: 1e:83:ba:67:49:b9:9a:4c:58:40:b6:94:6f:ee:c7: cd:52:26:3f:2f:b5:29:d7:8b:a6:99:1d:fe:35:05: 12:bc:37:dd:f1:ba:9b:6e:cc:b7:7c:cf:62:ee:08: df:db:d9:ab:f4:e6:a1:8e:f9:3b:a1:e1:9c:b1:5c: a8:be:85:c7:84:49:9b:fe:e8:cb:33:e5:20:cc:68: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:7A:83:90:E9:5D:96:5D:BF:FB:D3:49:DF:6B:BA:02:85:70:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.95.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:71:a3:67:7a:d1:8e:bd:e2:ac:08:0c:f7:52:6b:c5:b7:66: 54:4b:52:1a:2e:c8:fe:53:11:1e:91:23:fc:74:68:52:44:24: f8:12:a3:2e:ab:6d:fa:02:05:af:da:34:dc:2c:6f:1a:6a:c0: 21:ee:5f:a8:82:aa:f1:aa:f8:95:64:72:d7:af:d0:92:d5:74: f4:0d:22:49:b7:be:8c:d5:a1:64:d6:07:36:4e:cb:31:a4:84: 56:6b:c6:37:c6:ee:8d:ea:f9:c0:eb:c1:77:e9:ba:48:6a:3f: 76:5a:00:91:8c:62:c2:9d:33:0c:fc:a7:f2:c9:d7:91:c8:cc: 2b:e2:34:e6:1a:f6:3b:e9:4e:dc:69:41:74:0f:1b:32:6b:ff: b4:23:f0:5b:47:e6:7b:ae:0a:dd:da:78:4d:d1:7e:78:73:7c: 31:e1:1f:c0:24:1d:9b:9e:c4:60:dc:61:70:86:5e:9f:c2:f6: be:80:b4:5b:af:78:e9:7d:31:a3:80:9c:21:a9:65:af:d0:7e: 75:2e:bb:b2:b8:ff:f6:fc:42:02:b8:e1:77:31:de:90:d9:7d: d2:37:49:b5:be:ce:41:d2:2c:e3:64:ec:51:90:35:50:bd:3a: 06:98:7d:27:e9:77:a2:cb:11:31:b4:90:b3:5a:67:e0:ef:68: 4c:3f:62:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNkGfic4IimXhq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDJlYTM1MGUtOTQwOS00ZDU3LWIzOGEtNTM5N2E1OGZlMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC4MQo9JXLmS2VlZUnVV44lPXHSWvkk2loKW Yzg+gFzlVN9xOO56tuyU+HuSCLkmmHs6TO9wxN57g6o+xvjwbDsfiKNXREcdW9NT C8BgBehjTXPIafsOSHcWTTmwFcmi98rnMctwj9Zrzo1xGL4a0UwmK4Pl7QdnbgjF IJ4qP4kIjAMojV9gj71ICa8FxZJmKWIDRG+EpD7Y3JxnfLaM654eDSQ8IZqYoumA SFbHMO/TiPgeg7pnSbmaTFhAtpRv7sfNUiY/L7Up14ummR3+NQUSvDfd8bqbbsy3 fM9i7gjf29mr9Oahjvk7oeGcsVyovoXHhEmb/ujLM+UgzGgNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7SeoOQ6V2WXb/700nfa7oChXAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMDJlNWI1ZTgtZDUyNy0z YmRmLTljOWMtNmRlNjNhMDgyZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF8KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9xo2d60Y694qwIDPdSa8W3ZlRLUhouyP5TER6RI/x0aFJEJPgSoy6r bfoCBa/aNNwsbxpqwCHuX6iCqvGq+JVkctev0JLVdPQNIkm3vozVoWTWBzZOyzGk hFZrxjfG7o3q+cDrwXfpukhqP3ZaAJGMYsKdMwz8p/LJ15HIzCviNOYa9jvpTtxp QXQPGzJr/7Qj8FtH5nuuCt3aeE3RfnhzfDHhH8AkHZuexGDcYXCGXp/C9r6AtFuv eOl9MaOAnCGpZa/QfnUuu7K4//b8QgK44Xcx3pDZfdI3SbW+zkHSLONk7FGQNVC9 OgaYfSfpd6LLETG0kLNaZ+DvaEw/Yqk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:24 2024 by rpki-client on console-ams.rpki-client.org