$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa File: 1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa (raw, json) Hash identifier: 4zCIUUTukGWkrrsRNr11MCTvQLsLL7m3rKYxzb6D/Fw= Subject key identifier: BD:33:01:D0:47:E9:59:E6:76:E1:1F:6F:24:FC:F2:EB:07:A7:88:0A Certificate issuer: /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61 Certificate serial: 010D0C9F4328584787213570AD37FA3E90A34670 Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 6954 IP address blocks: 69.4.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:35:70:ad:37:fa:3e:90:a3:46:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=decce236-6bdf-4907-b4c3-72147c658a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:b8:78:86:c6:9f:21:d0:94:57:a5:0b:ce: 75:fe:50:48:2f:d2:16:6c:9f:81:e7:95:6e:48:b1: 27:61:24:77:28:5a:e8:80:25:b9:d5:4e:26:76:aa: c7:ce:80:7d:88:92:ad:0d:a6:21:61:49:30:47:32: b9:32:97:71:cb:d3:ce:c5:8d:e0:d0:f1:db:0e:c8: 1e:c1:5e:b9:c7:66:7d:bf:d2:e8:c3:f3:11:db:50: 47:f7:d4:b0:a4:94:6c:d2:73:aa:1e:94:2d:bc:21: ba:0e:fd:86:48:1c:94:b4:0b:49:cb:f5:ca:b7:3b: bc:1d:9a:bb:8c:6b:66:9e:82:61:bc:58:45:ae:9d: c7:ed:5a:fe:7f:d9:5c:33:c5:3d:3d:9b:96:d0:a4: ad:88:04:82:4b:46:ea:4a:d7:cc:cd:da:7f:9f:a5: 1b:14:ab:d4:bb:80:ca:28:a2:9d:c0:a7:1c:49:6b: ae:f5:40:01:b0:0f:30:f4:7a:39:c5:fc:d8:b4:bd: 54:2b:81:d3:ec:2b:78:56:d9:a4:36:04:52:77:17: 65:c2:18:ec:17:65:60:06:be:67:06:38:c4:57:50: 2a:af:83:f9:06:d6:92:ad:f1:ad:04:ce:a5:59:fb: e1:bd:59:8c:f8:e7:34:48:5f:f8:25:2b:1d:47:e8: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:33:01:D0:47:E9:59:E6:76:E1:1F:6F:24:FC:F2:EB:07:A7:88:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl X509v3 Authority Key Identifier: keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer sbgp-ipAddrBlock: critical IPv4: 69.4.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:21:f2:7e:ac:04:27:f9:82:6e:78:e9:0f:49:3c:36:e5:21: 80:65:a1:aa:ac:3b:47:3e:86:fe:2f:1f:99:8e:87:e6:60:b7: 0a:c5:d4:a7:6c:16:5a:0a:cd:9e:1b:b6:f9:82:71:ee:98:3a: 31:4a:e7:ff:24:ea:cb:f3:3c:a0:4a:93:4b:35:c3:9a:2b:c3: 7e:a7:5b:29:64:fc:32:d2:4a:6b:61:00:34:9b:bd:21:3e:f5: e8:07:12:c6:38:a8:2e:37:69:d7:65:7a:52:25:f8:0c:c7:bf: ec:0b:3c:d4:5b:68:94:25:e3:fb:fd:35:d6:37:ac:db:86:70: d1:b1:ab:b8:a6:4e:78:6b:e9:29:cb:1c:26:74:9e:4a:61:c3: ec:3b:bf:32:29:0c:a7:d0:ea:55:df:d8:3a:87:99:06:b9:fd: 23:7c:15:55:54:e6:0d:8b:d7:30:3f:e0:ad:e8:88:56:9f:b9: ca:9d:fb:76:84:98:d6:c2:0b:f2:ed:90:95:fb:1e:48:18:24: c0:b9:5f:2c:bf:ee:32:61:e9:47:87:8e:51:51:69:ee:ac:02: 74:a8:34:22:4f:49:b8:f4:7e:44:56:85:e5:d3:ea:97:ea:4e: 2d:8a:49:1e:ba:07:d2:0f:d6:1b:06:8c:3d:d3:fe:3b:02:0b: 75:8a:5c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHITVwrTf6PpCjRnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY5ZjUwMjEtZDc4MC00NzU5LWFjMGYtMTg2NWFiOGQ1 YTYxMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk ZGVjY2UyMzYtNmJkZi00OTA3LWI0YzMtNzIxNDdjNjU4YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g+4eIbGnyHQlFelC851/lBIL9IWbJ+B55Vu SLEnYSR3KFrogCW51U4mdqrHzoB9iJKtDaYhYUkwRzK5Mpdxy9POxY3g0PHbDsge wV65x2Z9v9Low/MR21BH99SwpJRs0nOqHpQtvCG6Dv2GSByUtAtJy/XKtzu8HZq7 jGtmnoJhvFhFrp3H7Vr+f9lcM8U9PZuW0KStiASCS0bqStfMzdp/n6UbFKvUu4DK KKKdwKccSWuu9UABsA8w9Ho5xfzYtL1UK4HT7Ct4VtmkNgRSdxdlwhjsF2VgBr5n BjjEV1Aqr4P5BtaSrfGtBM6lWfvhvVmM+Oc0SF/4JSsdR+gpGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0zAdBH6VnmduEfbyT88usHp4gKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Zjlm NTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1YWI4ZDVhNjEvMWIwMzgxNDktMGZjMy0z ZDNiLTk3ZjItMzkwNWZiMWJiMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWY5ZjUwMjEtZDc4MC00NzU5LWFj MGYtMTg2NWFiOGQ1YTYxLzlmOWY1MDIxLWQ3ODAtNDc1OS1hYzBmLTE4NjVhYjhk NWE2MS5jcmwwHwYDVR0jBBgwFoAUp/VgwYDsJYqP+aKoTe3Ru9XHB18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZjlmNTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1 YWI4ZDVhNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRQQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8h8n6sBCf5gm546Q9JPDblIYBloaqsO0c+hv4vH5mOh+ZgtwrF1Kds FloKzZ4btvmCce6YOjFK5/8k6svzPKBKk0s1w5orw36nWylk/DLSSmthADSbvSE+ 9egHEsY4qC43addlelIl+AzHv+wLPNRbaJQl4/v9NdY3rNuGcNGxq7imTnhr6SnL HCZ0nkphw+w7vzIpDKfQ6lXf2DqHmQa5/SN8FVVU5g2L1zA/4K3oiFafucqd+3aE mNbCC/LtkJX7HkgYJMC5Xyy/7jJh6UeHjlFRae6sAnSoNCJPSbj0fkRWheXT6pfq Ti2KSR66B9IP1hsGjD3T/jsCC3WKXIA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org