$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d80da20-7a96-3f74-bf24-b020ca452dd7.roa File: 5d80da20-7a96-3f74-bf24-b020ca452dd7.roa (raw, json) Hash identifier: xxaEaKMc1JjcKEwxNi3S9J5cvcAuMa6gHj+aPZYSrKs= Subject key identifier: 95:C1:6A:42:F1:D9:D7:1D:FE:E6:F0:81:A7:D5:2C:7C:C0:27:83:C9 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285847B3CC122B9676311017D09B24 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d80da20-7a96-3f74-bf24-b020ca452dd7.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 17984 IP address blocks: 63.222.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:12:2b:96:76:31:10:17:d0:9b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=cdd81463-f964-4763-871a-e7c83322c0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:39:6d:f2:38:3e:b8:46:7e:68:41:92:0e: ae:7d:f9:97:dd:9e:e9:c0:8b:b0:af:5f:b1:bb:bf: e1:45:cd:a7:62:1d:f1:2c:e8:27:e6:6d:ad:07:a5: 9d:68:d3:fc:10:de:ff:d4:b6:bf:79:3f:ef:d2:8d: 36:1d:8a:13:7f:b1:68:ab:aa:d3:79:2e:1a:95:88: e4:30:f1:f1:f8:fe:0c:a9:f7:03:95:61:e5:ed:00: 9e:b2:5c:5a:ae:45:28:17:6c:13:f0:e1:3b:f8:15: 72:66:35:f2:7e:87:7b:8d:b8:d2:b4:66:69:fc:02: 4f:38:0a:cc:f4:cc:a9:62:38:c0:f4:fe:72:7d:89: f4:0b:97:fd:1a:c3:8d:eb:40:4c:33:8c:b8:30:6b: d5:ae:bd:4f:ce:ec:9f:9e:19:8d:1c:0a:17:e5:f8: ac:18:76:82:fb:53:a1:b9:28:b3:5c:ad:80:9c:4d: be:b2:b5:8b:de:86:f3:c6:45:99:aa:a2:b7:34:d1: 52:48:c0:b9:28:26:84:34:a9:65:f4:e8:06:8c:fe: d9:23:94:df:bb:70:78:5c:bb:a8:fe:a5:ed:e3:62: ec:8a:b5:bd:0f:60:61:d7:95:22:50:56:c7:e9:f7: 36:46:4d:75:bf:25:e2:fb:c3:e8:f7:39:ca:59:c5: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:6A:42:F1:D9:D7:1D:FE:E6:F0:81:A7:D5:2C:7C:C0:27:83:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d80da20-7a96-3f74-bf24-b020ca452dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:de:8a:42:f0:12:bf:28:99:9b:26:e6:9a:0f:f2:48:d5:10: 33:1d:76:ea:64:ff:a8:a8:2c:3e:41:36:e5:04:b8:a2:dd:e7: 8b:62:50:09:e4:7d:7a:a8:dc:9f:73:77:4e:51:8b:0d:25:fa: 25:cf:61:61:58:1d:b3:68:b8:ab:0a:f8:12:13:e4:57:d9:9c: 20:15:37:87:54:ae:82:62:78:40:36:4d:18:bc:01:c8:50:c6: f6:5f:6e:7a:a4:19:89:87:60:05:09:b3:45:60:df:d0:ad:5b: b2:50:79:a6:4a:b9:5d:c1:2b:8e:b4:4b:9d:8e:fc:30:0c:1e: 60:dd:63:4b:6c:37:38:73:1b:23:35:99:c3:51:5e:7b:f1:f9: c9:0e:f4:e7:2e:ff:48:52:71:72:73:5f:6e:bd:50:6d:a2:5f: dd:30:76:5b:90:ea:34:18:0e:91:d4:f3:34:39:d4:9e:db:cb: 1a:7a:0b:61:50:44:de:e2:2a:72:53:6b:53:ab:df:8b:84:42: a7:0e:3f:ad:43:c8:22:98:f1:dd:5b:52:41:76:47:e9:9a:fd: 59:31:08:c3:39:45:f7:ec:77:d4:0c:0f:90:56:08:e0:1f:8b: 43:a4:a5:70:48:06:54:fd:b8:cd:23:45:d1:31:9d:7d:4d:a2: 23:02:46:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBIrlnYxEBfQmyQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk Y2RkODE0NjMtZjk2NC00NzYzLTg3MWEtZTdjODMzMjJjMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLo5bfI4PrhGfmhBkg6uffmX3Z7pwIuwr1+x u7/hRc2nYh3xLOgn5m2tB6WdaNP8EN7/1La/eT/v0o02HYoTf7Foq6rTeS4alYjk MPHx+P4MqfcDlWHl7QCeslxarkUoF2wT8OE7+BVyZjXyfod7jbjStGZp/AJPOArM 9MypYjjA9P5yfYn0C5f9GsON60BMM4y4MGvVrr1PzuyfnhmNHAoX5fisGHaC+1Oh uSizXK2AnE2+srWL3obzxkWZqqK3NNFSSMC5KCaENKll9OgGjP7ZI5Tfu3B4XLuo /qXt42LsirW9D2Bh15UiUFbH6fc2Rk11vyXi+8Po9znKWcXZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXBakLx2dcd/ubwgafVLHzAJ4PJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNWQ4MGRhMjAtN2E5Ni0z Zjc0LWJmMjQtYjAyMGNhNDUyZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP96wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABveikLwEr8omZsm5poP8kjVEDMddupk/6ioLD5BNuUEuKLd54tiUAnk fXqo3J9zd05Riw0l+iXPYWFYHbNouKsK+BIT5FfZnCAVN4dUroJieEA2TRi8AchQ xvZfbnqkGYmHYAUJs0Vg39CtW7JQeaZKuV3BK460S52O/DAMHmDdY0tsNzhzGyM1 mcNRXnvx+ckO9Ocu/0hScXJzX269UG2iX90wdluQ6jQYDpHU8zQ51J7byxp6C2FQ RN7iKnJTa1Or34uEQqcOP61DyCKY8d1bUkF2R+ma/VkxCMM5Rffsd9QMD5BWCOAf i0OkpXBIBlT9uM0jRdExnX1NoiMCRhM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org