$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa File: d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa (raw, json) Hash identifier: bcWRU5gY5YF7PPEWriowpLWeum0iR2JK2aYqp63PwDg= Subject key identifier: 61:D4:17:3C:A9:69:1F:59:07:E5:2D:53:F9:0C:8D:6D:6E:34:40:2C Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285847A8A14C35692044114F5033E0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 32181 IP address blocks: 64.224.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:4c:35:69:20:44:11:4f:50:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=2a0120c8-55c7-4983-b815-a4dc51c2a774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:70:82:2c:8a:eb:3d:6b:05:4b:bc:e9:7c: 3f:00:36:87:22:6c:70:85:7f:6a:b6:24:d4:87:a1: cf:5d:ed:07:d1:0e:88:05:b9:65:0e:77:a6:3b:82: c0:06:66:f1:50:01:f0:66:d5:77:b2:35:eb:7a:15: c5:b5:d3:9a:db:3f:f4:91:4a:86:90:8a:61:ab:83: 5c:b0:4d:2e:9e:3f:e5:87:45:ed:d6:51:13:28:33: 69:17:08:95:d9:ec:d5:a1:67:3b:05:40:92:b0:d8: 6c:18:62:b5:97:28:a9:0f:83:cf:6a:7d:4c:70:cb: 55:56:c8:87:50:3c:65:52:12:06:08:36:ba:b8:37: 90:7f:23:15:08:b5:2e:36:10:aa:48:1c:0e:de:0a: e3:1d:90:19:c7:0d:e8:2b:a9:e4:b1:24:81:19:fc: 2a:d4:83:b4:4a:4d:b0:45:a5:f8:b3:14:75:84:ee: 81:4e:e3:e1:2e:a5:c6:79:5f:83:7a:60:73:4e:01: 16:00:0b:0c:88:90:cc:70:a7:c2:af:27:a5:7c:ef: d3:c7:dd:37:1a:59:1c:38:59:d6:76:68:a5:a7:34: e6:b3:74:3e:64:81:23:83:47:d6:c4:e7:e3:d3:4d: c5:de:75:d8:f3:d3:30:57:a6:e0:15:9a:35:21:47: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D4:17:3C:A9:69:1F:59:07:E5:2D:53:F9:0C:8D:6D:6E:34:40:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a1:9e:86:24:d8:15:49:49:dc:aa:1b:46:11:0f:89:51:2d: dd:29:45:f3:19:a3:0c:55:6b:12:2f:d9:f4:04:4d:41:f9:22: a3:f6:ad:e8:21:42:41:a5:d3:ac:f6:1f:81:a9:a7:d7:b2:ed: 74:a1:c1:b5:99:61:b1:3d:d5:95:7a:0e:54:b6:71:ec:0f:44: 03:96:22:26:a7:3f:85:99:d4:ea:91:8a:03:25:89:29:ee:f9: 25:fb:5a:a1:bb:cb:3f:cd:37:94:c2:bc:76:29:10:91:89:21: 95:5d:54:9a:b6:ee:55:ba:86:12:b4:e0:68:a9:96:5a:fc:63: 65:cc:1d:3a:40:d9:55:64:ae:12:5c:22:ed:0e:ba:7b:99:62: c9:4d:d5:c8:59:38:6e:b4:b1:72:5c:c1:74:10:c8:76:bd:08: 93:4d:1e:9a:ab:48:10:df:c9:5f:be:85:a6:77:2d:ec:af:0b: 1d:7a:7d:c8:46:4e:4e:4c:27:ad:93:86:db:a7:ce:39:2d:3d: 5f:47:f3:55:b6:63:4a:b2:8e:8c:1f:46:5a:91:1c:a7:39:79: 8d:cf:a7:86:af:28:30:dc:66:41:dd:6c:fb:56:3a:08:db:36: d1:34:d8:3f:1b:8b:64:9c:3f:12:e1:3b:c3:b9:d4:84:0b:f7: 7a:11:a4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooUw1aSBEEU9QM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk MmEwMTIwYzgtNTVjNy00OTgzLWI4MTUtYTRkYzUxYzJhNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG1wgiyK6z1rBUu86Xw/ADaHImxwhX9qtiTU h6HPXe0H0Q6IBbllDnemO4LABmbxUAHwZtV3sjXrehXFtdOa2z/0kUqGkIphq4Nc sE0unj/lh0Xt1lETKDNpFwiV2ezVoWc7BUCSsNhsGGK1lyipD4PPan1McMtVVsiH UDxlUhIGCDa6uDeQfyMVCLUuNhCqSBwO3grjHZAZxw3oK6nksSSBGfwq1IO0Sk2w RaX4sxR1hO6BTuPhLqXGeV+DemBzTgEWAAsMiJDMcKfCryelfO/Tx903GlkcOFnW dmilpzTms3Q+ZIEjg0fWxOfj003F3nXY89MwV6bgFZo1IUd71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHUFzypaR9ZB+UtU/kMjW1uNEAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZDZiZDQ5NzEtYzQ1Mi0z NDgyLWFiZDEtZWE3YjViMmE3MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGhnoYk2BVJSdyqG0YRD4lRLd0pRfMZowxVaxIv2fQETUH5IqP2regh QkGl06z2H4Gpp9ey7XShwbWZYbE91ZV6DlS2cewPRAOWIianP4WZ1OqRigMliSnu +SX7WqG7yz/NN5TCvHYpEJGJIZVdVJq27lW6hhK04Gipllr8Y2XMHTpA2VVkrhJc Iu0OunuZYslN1chZOG60sXJcwXQQyHa9CJNNHpqrSBDfyV++haZ3LeyvCx16fchG Tk5MJ62ThtunzjktPV9H81W2Y0qyjowfRlqRHKc5eY3Pp4avKDDcZkHdbPtWOgjb NtE02D8bi2ScPxLhO8O51IQL93oRpHs= -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org