$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json) Hash identifier: J2EDSVAo5vpDXMco+DtJ2BuR4PmCWIwtOqdyJC7Ske4= Subject key identifier: 23:50:E8:D1:75:74:5F:2C:7C:40:2B:B1:A0:1D:B2:E6:B4:0F:82:6C Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584720FC9BCAFAB5DC170D7C3650 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa Signing time: Fri 06 Sep 2024 22:54:48 +0000 ROA not before: Fri 06 Sep 2024 22:54:48 +0000 ROA not after: Thu 05 Dec 2024 23:54:48 +0000 asID: 16509 IP address blocks: 64.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:20:fc:9b:ca:fa:b5:dc:17:0d:7c:36:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Sep 6 22:54:48 2024 GMT Not After : Dec 5 23:54:48 2024 GMT Subject: CN=d336ee29-e580-485f-a2e0-d42ada5a9c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:d8:f3:36:ad:10:f1:b5:43:87:62:36:70: 78:96:8a:f4:64:5f:53:e3:45:07:5a:f4:5f:61:3f: 69:9c:eb:3c:b2:4f:99:be:42:19:90:02:b4:62:95: 54:b6:35:3c:07:44:2d:03:ac:19:07:51:8a:ac:5c: b3:2d:3b:48:9c:fe:0a:4f:58:96:8d:20:ce:61:36: 76:ca:71:f6:0d:5d:7d:9a:d9:90:bd:79:74:55:6d: 46:50:3a:fa:fa:fd:3d:a3:3e:77:ee:5d:a6:fc:5e: 1c:0f:70:73:73:5d:c5:77:0e:d1:bb:85:d2:c2:19: 3e:1f:16:9d:f1:31:4b:fc:e3:37:54:b6:6f:b4:56: 26:c7:a8:67:61:9b:c7:bb:08:7b:58:4f:ba:de:3e: 40:e5:15:8a:98:b4:e8:20:4a:a4:98:9f:05:34:62: f1:30:c6:cb:60:34:ba:12:e7:b5:72:7b:2b:8c:41: 97:03:6c:07:e0:93:b8:4d:bc:a8:00:30:a8:0a:58: 59:db:59:25:c1:2b:d6:0a:fb:85:29:b1:da:96:37: bc:cd:f3:70:70:5e:00:56:b2:48:2b:69:23:d3:7a: 1b:2f:4c:b2:cb:58:e8:22:74:b3:e7:21:18:1a:3e: 48:33:a9:e8:f8:be:a7:bd:22:0f:af:3d:f8:68:8c: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:50:E8:D1:75:74:5F:2C:7C:40:2B:B1:A0:1D:B2:E6:B4:0F:82:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:87:d5:bd:11:44:46:03:0c:56:87:b7:98:1a:c7:98:1a:79: 8a:bb:74:d5:39:c8:bc:10:d2:f2:c5:65:26:88:9f:8e:4a:90: e9:7d:8c:5a:ed:37:d4:36:58:8f:5f:a6:08:72:49:14:ac:41: d3:83:30:4b:8c:ac:30:d5:25:3c:44:f1:90:80:27:ca:61:a4: 40:e5:b0:7d:78:6b:3d:da:78:a4:1b:39:fb:00:e9:5d:5a:55: e8:d9:09:bb:10:c3:4d:ba:80:93:ee:4b:0a:bb:8f:f4:6c:a3: 82:bd:e6:cb:27:56:3e:07:97:7e:86:73:84:af:1f:65:60:01: 94:de:bd:74:8e:65:9d:93:0b:42:a2:0b:8c:c6:b1:c2:c2:15: 69:38:4b:47:9f:52:72:11:2e:45:1e:a3:43:19:f0:66:df:e2: 96:52:40:b7:df:7d:8c:94:cd:2d:cf:6a:54:17:f0:16:f5:68: b5:52:f1:e1:c3:88:62:27:71:c2:44:51:c1:8b:10:7e:7c:91: d0:35:44:3c:b1:ec:4c:85:8f:73:84:6e:14:38:91:de:06:7b: e4:39:b3:34:d1:9a:53:7f:a3:c6:3e:da:c9:51:3b:75:c2:56: 5b:a7:36:dc:2f:b0:4d:30:fa:7b:8f:b9:5c:31:6c:a3:cc:cf: 44:d6:d1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcg/JvK+rXcFw18NlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI0MDkwNjIyNTQ0OFoXDTI0MTIwNTIzNTQ0OFowLzEtMCsGA1UEAxMk ZDMzNmVlMjktZTU4MC00ODVmLWEyZTAtZDQyYWRhNWE5YzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jY8zatEPG1Q4diNnB4lor0ZF9T40UHWvRf YT9pnOs8sk+ZvkIZkAK0YpVUtjU8B0QtA6wZB1GKrFyzLTtInP4KT1iWjSDOYTZ2 ynH2DV19mtmQvXl0VW1GUDr6+v09oz537l2m/F4cD3Bzc13Fdw7Ru4XSwhk+Hxad 8TFL/OM3VLZvtFYmx6hnYZvHuwh7WE+63j5A5RWKmLToIEqkmJ8FNGLxMMbLYDS6 Eue1cnsrjEGXA2wH4JO4TbyoADCoClhZ21klwSvWCvuFKbHalje8zfNwcF4AVrJI K2kj03obL0yyy1joInSz5yEYGj5IM6no+L6nvSIPrz34aIzntQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNQ6NF1dF8sfEArsaAdsua0D4JsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGE1YjhiMzgtZDRiNy0z YjQ4LWE4YWMtZWYyOTM4YjExOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSH1b0RREYDDFaHt5gax5gaeYq7dNU5yLwQ0vLFZSaIn45KkOl9jFrt N9Q2WI9fpghySRSsQdODMEuMrDDVJTxE8ZCAJ8phpEDlsH14az3aeKQbOfsA6V1a VejZCbsQw026gJPuSwq7j/Rso4K95ssnVj4Hl36Gc4SvH2VgAZTevXSOZZ2TC0Ki C4zGscLCFWk4S0efUnIRLkUeo0MZ8Gbf4pZSQLfffYyUzS3PalQX8Bb1aLVS8eHD iGInccJEUcGLEH58kdA1RDyx7EyFj3OEbhQ4kd4Ge+Q5szTRmlN/o8Y+2slRO3XC VlunNtwvsE0w+nuPuVwxbKPMz0TW0Xk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org