$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/77e52de2-efc9-354b-bc05-e882afc70338.roa File: 77e52de2-efc9-354b-bc05-e882afc70338.roa (raw, json) Hash identifier: YiclZC5vm8hglw/Lz5Zj8lX7yZl7bLKyC2wVgmR8l/I= Subject key identifier: 1E:BF:52:D6:73:07:E3:E4:93:9B:C7:0F:1D:C1:AF:01:E3:07:BB:F6 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F432858469F60300D2F88192551D81380 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/77e52de2-efc9-354b-bc05-e882afc70338.roa Signing time: Mon 22 Jul 2024 12:40:21 +0000 ROA not before: Mon 22 Jul 2024 12:40:21 +0000 ROA not after: Sun 20 Oct 2024 12:40:21 +0000 asID: 270209 IP address blocks: 64.130.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:9f:60:30:0d:2f:88:19:25:51:d8:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Jul 22 12:40:21 2024 GMT Not After : Oct 20 12:40:21 2024 GMT Subject: CN=5f8fe0af-9b14-4d79-84e2-87802028136e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:a0:b6:76:79:17:5e:3d:df:27:fe:1f:33: 6d:c4:04:12:f7:f6:07:76:77:da:dd:d0:4d:89:8d: 46:d0:3f:2e:5b:a2:db:d0:35:8c:46:f3:e9:dd:29: 8f:88:04:20:02:02:65:5e:70:42:41:e6:b8:67:81: 45:b3:16:27:ef:80:c7:fe:67:1b:be:09:a5:07:23: 1a:1a:9a:c9:e2:59:67:be:fb:29:21:30:fc:06:ad: 6b:92:66:08:6b:ca:16:4f:82:d0:6a:4b:0f:5e:6c: 0c:e7:10:56:3e:6a:2c:41:d7:d2:3f:67:02:e1:b7: bd:28:1e:c4:24:fe:f4:6a:be:2b:d1:a3:47:2a:5b: e9:44:a5:94:05:51:b0:48:34:cc:e7:76:32:e8:79: c4:45:1f:eb:29:55:a4:1a:29:b3:75:f0:27:35:96: 9f:06:dd:4f:75:72:6c:c1:28:06:24:1b:cc:59:52: 81:0d:37:54:56:7e:b4:3d:89:48:9a:73:e5:bb:29: 18:6f:e9:3c:7d:7f:8c:65:0f:2f:67:35:26:d6:7a: 9b:03:94:c8:b5:7d:87:0c:30:c1:e8:26:f9:df:4a: b6:d2:6b:ed:9f:79:85:b1:16:28:db:2d:1c:eb:e4: 68:21:cd:76:96:bd:0e:9a:a0:22:f2:b8:96:86:93: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BF:52:D6:73:07:E3:E4:93:9B:C7:0F:1D:C1:AF:01:E3:07:BB:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/77e52de2-efc9-354b-bc05-e882afc70338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 64.130.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a9:7f:e8:7b:b6:53:a9:47:3d:52:26:ce:16:06:7f:09:bc: 97:97:37:14:99:38:92:a3:a7:29:cf:59:a1:3b:38:18:e4:de: 36:5e:f3:56:d7:a1:78:de:5e:58:f7:cf:64:df:fa:c7:f2:9c: 44:a0:fa:40:08:2f:2c:33:32:22:dc:aa:33:11:2a:12:41:f5: bb:d4:ab:06:95:68:f5:ce:81:7a:29:5e:71:52:ba:53:41:49: 69:91:87:47:3f:4e:10:c2:5a:69:b9:cc:3e:78:69:f9:19:f5: c9:e7:04:ce:af:11:58:d5:22:79:78:73:77:c0:45:d6:4b:4d: e8:02:0d:94:bd:75:ee:5c:f4:1b:a1:f1:6d:7e:9e:91:2d:67: b8:53:b2:f4:42:9d:61:a8:57:37:8c:45:39:1d:af:b0:b6:18: cb:f1:4a:30:65:1e:dc:76:70:ee:77:f1:94:fd:cb:53:f0:0d: 31:d6:85:e7:6e:d3:58:c2:02:c5:eb:6e:06:d7:76:bc:3e:69: c4:6e:f2:27:8c:f9:a6:42:40:0b:e9:ef:8d:04:1f:6e:07:f7: 1f:bc:29:77:69:d2:79:d9:a4:27:03:48:59:01:0d:0f:ba:e3: da:39:8a:37:b2:c1:6e:df:d4:c6:8d:d3:b3:3c:e2:c9:56:7a: ad:74:77:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEafYDANL4gZJVHYE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI0MDcyMjEyNDAyMVoXDTI0MTAyMDEyNDAyMVowLzEtMCsGA1UEAxMk NWY4ZmUwYWYtOWIxNC00ZDc5LTg0ZTItODc4MDIwMjgxMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVGgtnZ5F1493yf+HzNtxAQS9/YHdnfa3dBN iY1G0D8uW6Lb0DWMRvPp3SmPiAQgAgJlXnBCQea4Z4FFsxYn74DH/mcbvgmlByMa GprJ4llnvvspITD8Bq1rkmYIa8oWT4LQaksPXmwM5xBWPmosQdfSP2cC4be9KB7E JP70ar4r0aNHKlvpRKWUBVGwSDTM53Yy6HnERR/rKVWkGimzdfAnNZafBt1PdXJs wSgGJBvMWVKBDTdUVn60PYlImnPluykYb+k8fX+MZQ8vZzUm1nqbA5TItX2HDDDB 6Cb530q20mvtn3mFsRYo2y0c6+RoIc12lr0OmqAi8riWhpMzuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6/UtZzB+Pkk5vHDx3BrwHjB7v2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNzdlNTJkZTItZWZjOS0z NTRiLWJjMDUtZTg4MmFmYzcwMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQIIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKpf+h7tlOpRz1SJs4WBn8JvJeXNxSZOJKjpynPWaE7OBjk3jZe81bX oXjeXlj3z2Tf+sfynESg+kAILywzMiLcqjMRKhJB9bvUqwaVaPXOgXopXnFSulNB SWmRh0c/ThDCWmm5zD54afkZ9cnnBM6vEVjVInl4c3fARdZLTegCDZS9de5c9Buh 8W1+npEtZ7hTsvRCnWGoVzeMRTkdr7C2GMvxSjBlHtx2cO538ZT9y1PwDTHWhedu 01jCAsXrbgbXdrw+acRu8ieM+aZCQAvp740EH24H9x+8KXdp0nnZpCcDSFkBDQ+6 49o5ijeywW7f1MaN07M84slWeq10d9c= -----END CERTIFICATE-----Generated at Thu Sep 19 19:59:03 2024 by rpki-client on console-ams.rpki-client.org