$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa File: d651495b-6e08-3d81-a928-b517cd0cd4f0.roa (raw, json) Hash identifier: JW6u/Opx+/HUSDWhkfjzU5EpgOqm6bfdhOyjKD4AeSs= Subject key identifier: 52:65:E8:0C:D9:65:63:3A:5D:95:31:F9:78:DA:A3:97:41:A8:01:90 Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F4328584726D07A8F1B9EC4E8E7AC6280 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 27229 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:7a:8f:1b:9e:c4:e8:e7:ac:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=5ce66350-187b-4b6b-8c21-3eeef70165f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:da:ba:89:f7:eb:81:6a:34:5c:28:3c:6a: f5:0f:88:04:1a:07:c3:86:a4:86:d6:46:61:06:ef: 9c:a7:1d:fe:20:36:c2:8c:2b:cb:42:ce:66:a1:2e: 7f:01:a2:41:ae:3d:f9:45:6c:a0:51:8f:20:b3:c7: 66:4d:ed:8d:54:ab:78:6b:07:2b:03:c1:99:cf:3f: e6:79:40:24:a0:45:0a:54:d6:67:e5:a9:30:a7:9c: 9d:0e:d9:b7:2f:a9:89:9b:72:d3:df:88:3e:b3:01: 5a:cf:ce:71:7c:10:80:2f:0b:5e:01:ac:8a:62:a0: ad:01:e6:fe:60:26:7c:00:01:16:6d:6e:1b:6f:a0: e1:a6:07:f7:9e:84:6f:13:50:61:df:b7:c0:91:0c: 1a:2d:f6:52:08:7e:90:06:c1:d5:10:8b:c0:6d:f8: e6:83:80:84:00:e1:a3:8e:47:60:94:b5:4d:3a:5a: 5b:c7:94:3b:12:1f:31:72:66:b2:d7:5d:df:a1:1d: 1e:33:77:e6:81:35:7e:a4:59:14:03:84:9c:3f:24: 50:68:a7:c4:e9:89:6c:7a:49:80:10:61:49:22:10: cc:39:ff:cf:17:51:d8:8b:fe:ac:9b:81:8d:da:8c: db:3d:31:46:4d:0c:58:cf:65:b7:76:25:6c:53:5d: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:65:E8:0C:D9:65:63:3A:5D:95:31:F9:78:DA:A3:97:41:A8:01:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b7:8a:02:fd:9d:be:0c:a8:a9:d9:17:e9:9d:8f:78:76:c5: 33:be:95:94:5d:0d:37:2c:bd:44:08:10:29:0e:1c:48:61:3f: f4:f2:95:4a:51:a0:7b:f8:00:1b:cb:f2:89:52:10:8a:50:d6: c6:5c:6b:ad:51:f2:94:bf:3a:84:8a:d8:2e:dc:95:12:53:db: 59:ef:e7:65:91:2f:c4:98:f0:2e:d7:69:2b:db:b6:75:b3:29: 3c:22:07:ed:18:0b:74:83:a7:b0:b6:4d:6c:5e:ff:59:3b:e3: d1:b5:71:4b:58:0b:b0:a1:41:ca:21:32:86:27:87:e4:5a:e5: 0d:ca:10:f7:f9:ea:81:30:b8:20:8b:26:1e:aa:75:3c:df:d3: cf:15:c5:80:b6:74:dd:83:48:4c:06:51:69:fa:ea:92:42:1a: 43:6b:7c:7e:fb:63:f6:6f:43:16:ef:41:be:15:25:f9:a7:64: dc:f3:24:8a:f6:be:9b:45:42:93:f7:9b:f1:dc:b7:91:78:87: 0c:4c:10:b7:df:0c:67:ec:51:13:83:24:61:ad:b0:d4:20:8a: c4:42:85:fc:58:e9:94:7b:2a:25:f7:48:24:a1:57:9a:0f:3a: 1b:6d:50:87:f4:4c:90:ea:99:af:dc:e1:2b:67:e4:16:17:c5: 85:84:44:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0HqPG57E6OesYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk NWNlNjYzNTAtMTg3Yi00YjZiLThjMjEtM2VlZWY3MDE2NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZjauon364FqNFwoPGr1D4gEGgfDhqSG1kZh Bu+cpx3+IDbCjCvLQs5moS5/AaJBrj35RWygUY8gs8dmTe2NVKt4awcrA8GZzz/m eUAkoEUKVNZn5akwp5ydDtm3L6mJm3LT34g+swFaz85xfBCALwteAayKYqCtAeb+ YCZ8AAEWbW4bb6Dhpgf3noRvE1Bh37fAkQwaLfZSCH6QBsHVEIvAbfjmg4CEAOGj jkdglLVNOlpbx5Q7Eh8xcmay113foR0eM3fmgTV+pFkUA4ScPyRQaKfE6YlsekmA EGFJIhDMOf/PF1HYi/6sm4GN2ozbPTFGTQxYz2W3diVsU11uCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJl6AzZZWM6XZUx+Xjao5dBqAGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvZDY1MTQ5NWItNmUwOC0z ZDgxLWE5MjgtYjUxN2NkMGNkNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm3igL9nb4MqKnZF+mdj3h2xTO+lZRdDTcsvUQIECkOHEhhP/TylUpR oHv4ABvL8olSEIpQ1sZca61R8pS/OoSK2C7clRJT21nv52WRL8SY8C7XaSvbtnWz KTwiB+0YC3SDp7C2TWxe/1k749G1cUtYC7ChQcohMoYnh+Ra5Q3KEPf56oEwuCCL Jh6qdTzf088VxYC2dN2DSEwGUWn66pJCGkNrfH77Y/ZvQxbvQb4VJfmnZNzzJIr2 vptFQpP3m/Hct5F4hwxMELffDGfsURODJGGtsNQgisRChfxY6ZR7KiX3SCShV5oP OhttUIf0TJDqma/c4Stn5BYXxYWERFk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:10 2024 by rpki-client on console-ams.rpki-client.org