$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa File: aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa (raw, json) Hash identifier: OsajpwD9xzG0p4SBLgWTBp+Fw7gFrw6wTgZXaOowr5A= Subject key identifier: DB:B0:58:EC:A0:1A:CB:EB:AE:96:74:A4:21:D6:14:F2:62:93:04:CA Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858477CDEE7B44A9D0BE480631E00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa Signing time: Wed 09 Oct 2024 20:49:19 +0000 ROA not before: Wed 09 Oct 2024 20:49:19 +0000 ROA not after: Tue 07 Jan 2025 21:49:19 +0000 asID: 15204 IP address blocks: 64.33.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7c:de:e7:b4:4a:9d:0b:e4:80:63:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 9 20:49:19 2024 GMT Not After : Jan 7 21:49:19 2025 GMT Subject: CN=48524fac-5554-460d-a68e-df37d2bf3685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:6e:23:0f:31:24:86:df:c8:13:60:32:b9: 1c:9c:4a:76:5c:83:0f:61:6b:1d:97:be:a8:1a:27: 93:ed:ed:40:4d:9b:e0:05:95:cb:83:16:04:07:e4: a9:09:81:35:6d:a2:73:1b:47:dd:30:d3:74:35:24: 5f:0d:b7:3e:57:53:5e:18:88:92:92:ed:ff:9f:e8: a0:c2:8d:02:9a:c9:df:3c:53:c2:25:ef:de:b5:df: 71:89:2b:55:47:b9:54:e1:81:07:5d:da:82:4b:73: fe:30:c7:6f:3a:10:0c:8d:24:d8:fc:16:9e:ac:8d: 62:ed:65:97:f8:7b:69:27:b1:16:f1:7e:2d:1d:86: b5:8c:e1:86:3b:83:93:57:d8:2b:a6:4c:47:97:38: 62:13:5c:19:d0:c8:89:c9:71:df:b0:cb:4b:c9:27: 42:b3:96:b1:b1:0f:10:32:c0:98:b4:e5:9f:6a:97: d2:ee:aa:1e:43:83:03:9a:bb:3f:e2:31:11:8c:f0: 1e:cc:62:50:c3:cb:ae:d7:ea:0a:b1:09:72:7b:17: 3b:9a:dc:12:bf:42:f3:c5:6f:f0:bc:fb:3c:ce:cd: fd:e7:4f:ea:df:61:97:8a:19:2a:7e:de:79:43:b3: 38:bf:0f:b8:58:87:0d:d1:23:8e:df:1e:8b:36:c4: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:58:EC:A0:1A:CB:EB:AE:96:74:A4:21:D6:14:F2:62:93:04:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:64:c8:d0:ec:ec:70:04:30:e2:76:1f:16:3b:84:a5:fe:a8: 73:df:04:22:0f:c0:e8:e5:60:95:4d:34:d1:ce:e0:3f:9f:63: c3:a5:9e:02:2d:a1:5e:f6:63:f9:fc:8f:45:ae:78:82:03:cc: cc:bd:c3:7c:f5:72:e4:72:b9:cf:0a:ec:70:f2:5f:de:31:e5: 69:b2:10:07:e7:ab:ca:4f:bd:1f:4d:69:ef:90:d0:5a:87:17: ed:8e:09:41:b7:c8:72:78:87:de:ae:6b:d3:c0:4e:38:df:05: 00:d7:8a:15:c6:ed:6d:e3:b3:90:65:4e:3b:eb:6e:ec:65:ad: 40:ab:6c:ab:19:57:d6:37:37:4e:e8:d5:dd:7c:58:55:7e:a0: 8c:1a:5f:ad:33:e6:1b:4b:f5:68:2c:6b:2d:fd:f6:10:15:a4: 87:e7:03:36:5f:ee:cb:38:a4:5c:f4:8f:c5:47:4e:99:98:8d: 07:6b:83:bb:9e:89:7b:48:8a:5e:e2:0d:68:9f:b4:f6:6d:24: f2:98:91:48:93:42:fc:0c:58:7e:28:1d:58:64:ec:11:06:07: 5e:62:16:39:50:99:98:8d:67:57:4b:9f:bd:3e:bf:4f:71:14: c9:2e:67:f4:f7:37:32:ed:00:d3:1c:c8:56:36:0f:44:6d:66: e3:ab:ff:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd83ue0Sp0L5IBjHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTAwOTIwNDkxOVoXDTI1MDEwNzIxNDkxOVowLzEtMCsGA1UEAxMk NDg1MjRmYWMtNTU1NC00NjBkLWE2OGUtZGYzN2QyYmYzNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbhuIw8xJIbfyBNgMrkcnEp2XIMPYWsdl76o GieT7e1ATZvgBZXLgxYEB+SpCYE1baJzG0fdMNN0NSRfDbc+V1NeGIiSku3/n+ig wo0CmsnfPFPCJe/etd9xiStVR7lU4YEHXdqCS3P+MMdvOhAMjSTY/BaerI1i7WWX +HtpJ7EW8X4tHYa1jOGGO4OTV9grpkxHlzhiE1wZ0MiJyXHfsMtLySdCs5axsQ8Q MsCYtOWfapfS7qoeQ4MDmrs/4jERjPAezGJQw8uu1+oKsQlyexc7mtwSv0LzxW/w vPs8zs3950/q32GXihkqft55Q7M4vw+4WIcN0SOO3x6LNsSxXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuwWOygGsvrrpZ0pCHWFPJikwTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWExZWYxNmEtMzFkOC0z YTY5LWEwNzAtOGE2ZjA4NmI0MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtkyNDs7HAEMOJ2HxY7hKX+qHPfBCIPwOjlYJVNNNHO4D+fY8OlngIt oV72Y/n8j0WueIIDzMy9w3z1cuRyuc8K7HDyX94x5WmyEAfnq8pPvR9Nae+Q0FqH F+2OCUG3yHJ4h96ua9PATjjfBQDXihXG7W3js5BlTjvrbuxlrUCrbKsZV9Y3N07o 1d18WFV+oIwaX60z5htL9Wgsay399hAVpIfnAzZf7ss4pFz0j8VHTpmYjQdrg7ue iXtIil7iDWiftPZtJPKYkUiTQvwMWH4oHVhk7BEGB15iFjlQmZiNZ1dLn70+v09x FMkuZ/T3NzLtANMcyFY2D0RtZuOr/1s= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:35 2024 by rpki-client on console-ams.rpki-client.org