$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa File: 42972859-eb24-3402-bd6b-51e9207a7162.roa (raw, json) Hash identifier: tsXB6gjYFUFMfJ0EOxhqRrqXcs75o54BKJGYSZ4uv1Q= Subject key identifier: 22:B2:4E:C8:AB:03:15:88:95:03:60:F1:7B:A2:A4:DF:80:96:D9:AD Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F43285847DF2F53A2333322A096E32A00 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 11067 IP address blocks: 67.219.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:53:a2:33:33:22:a0:96:e3:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=11bc07a6-c83c-4dbc-8902-4f9ed7b71fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:29:22:36:3d:1d:64:bb:df:66:20:04:d8: cd:8b:18:87:16:7a:d6:bd:a0:84:26:5c:6f:5f:33: b2:a2:52:89:e2:e1:f1:ba:06:36:7c:bc:42:5b:fc: 42:d6:2d:90:92:2e:64:f6:4e:a7:c3:75:8b:43:6c: a2:05:56:df:2b:d1:56:79:27:ed:d0:51:fb:f9:82: 6f:cd:4e:da:03:03:b1:76:49:bd:99:f9:51:9e:9f: e4:bf:8f:f7:c2:be:3a:4d:f5:a2:38:cb:ba:52:97: 62:9a:d9:75:68:c5:ae:00:53:41:8a:06:7c:b3:f2: f8:ac:ee:c8:90:99:3c:25:3a:a3:9b:72:ea:a0:fc: a0:fb:67:fc:33:4a:fa:8d:35:a0:c8:8a:30:d2:17: 52:de:e8:b0:3d:ca:40:fc:a0:72:3d:d6:23:49:8e: f6:e4:7b:32:d2:9e:3b:9d:45:c5:f7:f4:f4:e4:57: 32:5c:89:23:e6:13:a9:a8:d7:14:a7:01:db:66:18: 91:3b:86:1a:34:82:d2:7f:b6:9d:97:f7:d8:8f:8b: a5:39:41:e3:8e:a8:08:ac:a5:ec:e8:57:1c:a8:20: 40:ed:23:92:bf:f2:0d:a0:1a:94:fc:55:c2:ed:66: 72:1c:90:1c:1a:79:fa:8e:a7:38:db:1d:5c:0e:ec: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:4E:C8:AB:03:15:88:95:03:60:F1:7B:A2:A4:DF:80:96:D9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: 67.219.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:19:e7:da:fc:39:9c:14:d3:c0:ca:9e:bd:5a:0e:09:75:c9: dc:e5:e7:9d:14:2e:be:09:88:f5:8a:95:4a:c2:9b:bf:83:26: dc:27:dd:78:03:da:47:48:92:18:d0:fe:43:71:96:2f:3b:6f: 96:3a:a8:0d:d5:51:8a:b6:bb:fd:8d:f2:44:3b:70:04:06:f4: 08:89:b9:c5:68:6b:67:54:cf:56:42:0f:ee:e0:e5:f9:9f:38: 18:64:14:ff:ca:4f:fe:d2:c8:6b:4c:61:0c:08:21:38:af:3b: e8:46:be:d4:48:1f:d4:26:1b:05:67:3f:4a:cc:d6:f2:f0:b1: 99:e5:bc:2c:d3:d1:c8:13:0d:01:fe:45:ed:69:ca:fe:75:60: 26:fa:32:c2:96:23:5c:ac:cb:69:be:1b:43:f5:60:87:09:4f: 18:60:ed:5a:09:50:94:e7:c6:fc:dc:25:81:d0:58:c9:cc:90: 6c:38:2f:c0:d0:0f:14:63:31:10:0e:03:d6:ed:e0:71:7d:d2: 92:05:e8:90:fc:1b:63:d1:28:c8:cb:06:b2:21:b2:94:09:79: eb:dd:94:4c:12:9a:f7:b5:9e:b9:81:7b:25:5c:07:fb:38:82: a9:7b:74:b2:69:62:0e:dc:0e:cd:24:24:f6:35:4e:32:26:44: 4e:92:f9:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1OiMzMioJbjKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk MTFiYzA3YTYtYzgzYy00ZGJjLTg5MDItNGY5ZWQ3YjcxZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2cpIjY9HWS732YgBNjNixiHFnrWvaCEJlxv XzOyolKJ4uHxugY2fLxCW/xC1i2Qki5k9k6nw3WLQ2yiBVbfK9FWeSft0FH7+YJv zU7aAwOxdkm9mflRnp/kv4/3wr46TfWiOMu6Updimtl1aMWuAFNBigZ8s/L4rO7I kJk8JTqjm3LqoPyg+2f8M0r6jTWgyIow0hdS3uiwPcpA/KByPdYjSY725Hsy0p47 nUXF9/T05FcyXIkj5hOpqNcUpwHbZhiRO4YaNILSf7adl/fYj4ulOUHjjqgIrKXs 6FccqCBA7SOSv/INoBqU/FXC7WZyHJAcGnn6jqc42x1cDuyJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKyTsirAxWIlQNg8XuipN+AltmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvNDI5NzI4NTktZWIyNC0z NDAyLWJkNmItNTFlOTIwN2E3MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUZ59r8OZwU08DKnr1aDgl1ydzl550ULr4JiPWKlUrCm7+DJtwn3XgD 2kdIkhjQ/kNxli87b5Y6qA3VUYq2u/2N8kQ7cAQG9AiJucVoa2dUz1ZCD+7g5fmf OBhkFP/KT/7SyGtMYQwIITivO+hGvtRIH9QmGwVnP0rM1vLwsZnlvCzT0cgTDQH+ Re1pyv51YCb6MsKWI1ysy2m+G0P1YIcJTxhg7VoJUJTnxvzcJYHQWMnMkGw4L8DQ DxRjMRAOA9bt4HF90pIF6JD8G2PRKMjLBrIhspQJeevdlEwSmve1nrmBeyVcB/s4 gql7dLJpYg7cDs0kJPY1TjImRE6S+V4= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:09 2024 by rpki-client on console-ams.rpki-client.org