$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/93f77b3e-e8bf-30f5-b407-7273f3c46488.roa File: 93f77b3e-e8bf-30f5-b407-7273f3c46488.roa (raw, json) Hash identifier: 33P7G2KvJD/In8Fj0bEH9Pe+bEeuAJkypGS3HpYMsWA= Subject key identifier: 17:6E:18:78:FC:20:A0:DB:2C:84:D3:C5:00:22:F8:FD:D5:B1:D7:A9 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F43285847792BA5C94983918C80C1B440 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/93f77b3e-e8bf-30f5-b407-7273f3c46488.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 11127 IP address blocks: 64.49.145.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:a5:c9:49:83:91:8c:80:c1:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=95f00ab6-7067-4aa5-b4a4-0080e1c0fe8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:12:06:9d:51:e6:e2:3b:94:da:27:92:a4: 0c:8c:9c:9e:ea:c1:d9:48:0c:b4:df:1d:f2:27:bd: a3:cb:6c:d2:f0:db:1d:53:ec:93:17:e8:63:c4:e1: 0f:9f:81:77:7b:16:c6:0d:dc:8b:f2:8d:75:d3:03: cf:93:5d:9f:a0:61:d0:42:0f:f1:80:1d:ca:78:68: 88:74:25:99:df:88:eb:c8:85:60:a1:11:cd:6b:8b: cb:cd:23:13:9d:f4:ad:f2:6a:55:8f:28:e3:2f:e4: b6:21:23:97:19:73:d7:7e:ee:7e:e5:87:af:88:b4: bc:28:77:fb:7f:2a:7b:1f:f4:ef:bd:34:36:08:e0: ff:d4:36:e9:2c:c3:8f:c1:df:73:a3:ec:81:54:30: c4:bf:fa:74:72:c9:da:61:e1:35:24:cb:42:ae:35: b9:c2:cc:61:da:e7:5d:20:8a:4a:ee:49:83:a3:7d: ad:95:55:56:eb:5c:21:b2:60:8b:0e:a5:8d:af:94: 6b:1c:ac:64:e5:3b:ed:0f:2c:86:06:5a:34:47:ed: 92:25:a8:eb:bb:38:bf:e5:d7:49:d4:3f:79:5b:84: e8:b7:ad:29:62:d5:93:5d:2a:74:02:ea:8f:9b:5f: 3d:7d:d7:1d:15:77:19:6a:bc:fa:1d:f8:3c:e8:fe: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6E:18:78:FC:20:A0:DB:2C:84:D3:C5:00:22:F8:FD:D5:B1:D7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/93f77b3e-e8bf-30f5-b407-7273f3c46488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f0:b3:97:a7:10:5f:a8:e0:fa:f9:d4:d1:f0:3e:0a:6e:c6: 6a:73:58:1e:62:74:42:db:39:c2:24:62:d1:36:6a:fe:8f:9e: 1e:84:6e:7e:55:b7:fc:4f:f3:90:84:05:1e:ae:29:c4:df:57: 56:2d:07:33:05:ee:02:c2:58:45:e3:a1:b5:39:97:b7:ed:7a: e8:fa:6e:0d:41:56:e1:32:8a:99:e4:14:2b:e6:c9:85:4d:41: 8f:cb:c0:b8:07:ec:6c:bf:2c:ed:b5:0a:e1:6b:44:08:8e:39: d9:5c:f4:bf:f8:a1:22:42:b1:0c:11:84:e5:87:a9:88:87:2c: f7:7e:18:d5:1e:16:96:23:9b:a7:cf:97:05:4a:c6:07:5a:5e: 65:9c:53:dd:82:8f:49:bf:5f:a2:d0:41:9d:91:e6:15:01:9f: 65:93:3e:43:57:35:ca:88:cb:50:29:9a:44:06:f9:0e:53:68: 00:d6:55:8b:c2:23:dc:3a:aa:1e:06:6c:c5:26:83:08:1c:5f: af:f7:cf:e2:54:48:ab:da:f2:01:2f:49:6d:ba:cc:4e:b9:9e: 5f:47:53:4e:94:cf:6c:a6:f9:a9:40:19:6f:7b:56:03:6a:5b: 49:97:7a:a0:f9:37:9a:21:44:25:f4:4d:21:2a:1e:64:6a:62: cc:6e:aa:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K6XJSYORjIDBtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk OTVmMDBhYjYtNzA2Ny00YWE1LWI0YTQtMDA4MGUxYzBmZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWYSBp1R5uI7lNonkqQMjJye6sHZSAy03x3y J72jy2zS8NsdU+yTF+hjxOEPn4F3exbGDdyL8o110wPPk12foGHQQg/xgB3KeGiI dCWZ34jryIVgoRHNa4vLzSMTnfSt8mpVjyjjL+S2ISOXGXPXfu5+5YeviLS8KHf7 fyp7H/TvvTQ2COD/1DbpLMOPwd9zo+yBVDDEv/p0csnaYeE1JMtCrjW5wsxh2udd IIpK7kmDo32tlVVW61whsmCLDqWNr5RrHKxk5TvtDyyGBlo0R+2SJajruzi/5ddJ 1D95W4Tot60pYtWTXSp0AuqPm189fdcdFXcZarz6Hfg86P7W7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBduGHj8IKDbLITTxQAi+P3VsdepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvOTNmNzdiM2UtZThiZi0z MGY1LWI0MDctNzI3M2YzYzQ2NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrws5enEF+o4Pr51NHwPgpuxmpzWB5idELbOcIkYtE2av6Pnh6Ebn5V t/xP85CEBR6uKcTfV1YtBzMF7gLCWEXjobU5l7fteuj6bg1BVuEyipnkFCvmyYVN QY/LwLgH7Gy/LO21CuFrRAiOOdlc9L/4oSJCsQwRhOWHqYiHLPd+GNUeFpYjm6fP lwVKxgdaXmWcU92Cj0m/X6LQQZ2R5hUBn2WTPkNXNcqIy1ApmkQG+Q5TaADWVYvC I9w6qh4GbMUmgwgcX6/3z+JUSKva8gEvSW26zE65nl9HU06Uz2ym+alAGW97VgNq W0mXeqD5N5ohRCX0TSEqHmRqYsxuquc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org