$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa File: 472a87dc-5a34-3721-9aec-494ce65fdcb4.roa (raw, json) Hash identifier: tzDRA1VnGnBuAxPXdV5ne73aL4ZdqHiCDTkjVFaRb98= Subject key identifier: 8C:26:09:38:CA:73:D8:7B:51:48:79:2B:0B:7C:DA:E4:BB:B1:A0:2D Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F432858473A5B8D7FEAE7FED70FBB8080 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 395035 IP address blocks: 64.239.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:8d:7f:ea:e7:fe:d7:0f:bb:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=32292ff2-35e7-4a33-b017-1416a8e25a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b5:b8:1d:c6:2d:17:7c:28:98:6e:c2:77:ac: b5:81:ab:a7:cb:1a:ae:fe:3e:0c:16:a8:87:47:30: d0:ff:a3:e3:ce:b6:73:17:f6:0f:8b:fd:3a:44:b2: ad:7c:20:d9:97:2a:f3:bd:7b:08:e6:84:60:d8:22: 65:5d:6f:2d:a0:56:8c:21:17:ca:4e:1f:84:64:3c: a9:8d:3d:b5:e2:55:f6:71:c5:1b:aa:b2:77:a3:89: c7:42:4d:a2:c4:3b:46:75:a9:3f:0a:42:f1:4e:7b: 23:45:2c:e7:79:c4:af:56:c4:da:91:1f:2c:6c:ca: f4:8c:ae:e0:75:bd:7b:07:f7:bd:49:8b:45:ca:c9: 1b:e7:b4:50:48:7b:4d:1d:a1:4d:2b:5b:6a:ad:69: 14:4e:fc:0a:86:1e:57:2a:2e:25:74:7d:49:99:db: 4d:92:21:30:11:46:c5:8b:1c:1e:2f:e4:8e:22:8f: 2f:f5:d3:4f:85:bc:d1:e8:cc:9e:d5:70:61:03:70: cd:62:9a:73:5a:63:ac:e7:96:1b:76:a7:68:36:55: ca:9d:b1:db:41:66:be:b1:ec:23:85:71:40:cc:80: b7:a4:74:0d:2b:a2:0a:7b:03:27:2a:21:a0:27:ba: eb:da:ee:c3:bc:16:63:8b:ef:ff:33:c5:c2:d8:13: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:09:38:CA:73:D8:7B:51:48:79:2B:0B:7C:DA:E4:BB:B1:A0:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:14:d7:97:69:1f:6c:4e:00:3a:72:3b:ed:11:35:fb:0a:53: 36:82:8b:48:bc:a7:3f:18:3b:a7:5e:ab:97:e3:52:d5:b2:8e: ed:4a:e1:7e:5d:44:dc:b5:2e:1d:97:80:25:3e:89:4f:ea:89: 5a:9a:36:b8:f0:3a:fb:ef:0b:9f:71:41:bb:51:61:02:50:a9: 83:1e:ce:29:33:ca:c7:2f:c7:34:12:51:49:a4:2d:d9:0a:c0: 15:19:2a:31:82:1d:1a:de:d9:0b:cd:76:83:40:cc:77:38:0c: e5:01:e1:68:a0:41:dc:52:07:55:12:a3:80:6f:d0:60:2d:45: d6:09:5d:c9:c8:59:07:e4:ab:d5:76:d7:e9:ce:fa:db:23:40: e8:d8:52:2f:e5:ef:00:6e:46:c6:92:10:ab:db:70:14:b3:c7: 9e:97:58:b5:34:9a:6f:11:b5:81:20:07:fd:74:f4:d6:cd:ac: 71:c7:ac:52:cc:33:1e:29:1c:3d:8e:78:70:ee:1c:83:98:6e: 20:82:68:4e:62:cd:f4:69:b0:70:a6:8f:62:cc:08:f4:c9:da: be:24:c0:7c:d0:59:a6:54:72:09:19:6d:9b:1b:18:30:7f:56: 3a:99:1b:f9:53:1b:3c:b4:2f:43:c5:93:d1:e7:ed:42:83:72: 41:18:b0:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W41/6uf+1w+7gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk MzIyOTJmZjItMzVlNy00YTMzLWIwMTctMTQxNmE4ZTI1YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbW4HcYtF3womG7Cd6y1gaunyxqu/j4MFqiH RzDQ/6PjzrZzF/YPi/06RLKtfCDZlyrzvXsI5oRg2CJlXW8toFaMIRfKTh+EZDyp jT214lX2ccUbqrJ3o4nHQk2ixDtGdak/CkLxTnsjRSznecSvVsTakR8sbMr0jK7g db17B/e9SYtFyskb57RQSHtNHaFNK1tqrWkUTvwKhh5XKi4ldH1JmdtNkiEwEUbF ixweL+SOIo8v9dNPhbzR6Mye1XBhA3DNYppzWmOs55YbdqdoNlXKnbHbQWa+sewj hXFAzIC3pHQNK6IKewMnKiGgJ7rr2u7DvBZji+//M8XC2BOsCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwmCTjKc9h7UUh5Kwt82uS7saAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvNDcyYTg3ZGMtNWEzNC0z NzIxLTlhZWMtNDk0Y2U2NWZkY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8U15dpH2xOADpyO+0RNfsKUzaCi0i8pz8YO6deq5fjUtWyju1K4X5d RNy1Lh2XgCU+iU/qiVqaNrjwOvvvC59xQbtRYQJQqYMezikzyscvxzQSUUmkLdkK wBUZKjGCHRre2QvNdoNAzHc4DOUB4WigQdxSB1USo4Bv0GAtRdYJXcnIWQfkq9V2 1+nO+tsjQOjYUi/l7wBuRsaSEKvbcBSzx56XWLU0mm8RtYEgB/109NbNrHHHrFLM Mx4pHD2OeHDuHIOYbiCCaE5izfRpsHCmj2LMCPTJ2r4kwHzQWaZUcgkZbZsbGDB/ VjqZG/lTGzy0L0PFk9Hn7UKDckEYsJs= -----END CERTIFICATE-----Generated at Sat Nov 23 18:54:07 2024 by rpki-client on console-fra.rpki-client.org