$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa File: aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa (raw, json) Hash identifier: GFpa2DsZnkttMwMK9F2dKpBc8ZWM20g/V0DxZFvy4Vg= Subject key identifier: 54:B0:D9:07:AE:1E:1F:B0:A4:C5:4A:83:6A:51:F5:12:8D:1F:E2:00 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F43285847D6CF466A48285901941C2600 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 834 IP address blocks: 67.43.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:46:6a:48:28:59:01:94:1c:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=caa51077-295d-4b96-8107-4e00efea61cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:05:ca:75:b2:05:0c:7a:ac:3f:af:af:32: 96:3c:ac:24:b8:d0:51:a9:c1:f3:d4:a0:9d:8c:21: 99:19:b5:53:da:3f:fe:87:1c:49:61:9d:76:7f:59: 54:0f:d2:11:e7:b6:3b:8b:17:da:66:4d:92:cc:07: ef:5b:43:79:13:0e:f4:5c:56:e4:e2:b4:96:67:55: 34:1b:97:72:50:ab:62:17:04:c2:52:13:f0:a3:ab: 47:e7:27:56:8f:ac:8e:04:b5:e7:34:74:48:7d:6e: 85:3a:fa:37:a8:a8:2b:3a:1a:87:15:64:0b:0f:43: 45:48:52:db:6d:1a:61:fc:43:41:46:26:b9:d6:6c: 90:b4:6e:db:dc:d3:66:1a:ac:b1:0f:15:b5:9b:e8: a8:df:99:99:b2:93:db:9d:ce:52:09:b8:4e:7f:6b: a2:01:9c:77:0c:3d:56:4c:cb:d4:b9:b3:5a:5b:e2: 94:cf:2a:53:02:65:47:cb:05:49:ac:3e:8d:e1:e6: ed:0b:15:ce:76:71:e1:a5:14:2f:a1:4e:64:b3:a9: 36:5e:1d:7c:b1:d3:da:cd:57:df:4a:c3:b5:e3:46: b0:e2:26:f7:7c:af:7e:7b:ec:22:c4:94:1e:40:0b: eb:c8:3f:1e:79:37:20:18:21:31:b1:42:d5:c4:15: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B0:D9:07:AE:1E:1F:B0:A4:C5:4A:83:6A:51:F5:12:8D:1F:E2:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c3:7c:a2:52:88:ad:31:f3:1f:67:0c:b2:78:38:4c:04:bf: ff:7e:de:10:de:56:60:31:fc:81:fa:a8:f8:71:1b:0d:e8:fb: b8:e4:e1:18:4a:83:0b:8d:ab:ae:11:77:71:de:2c:ad:8a:f5: 90:60:6a:a6:c2:e0:e9:9e:d7:22:c3:dc:91:c2:dc:25:bd:01: 76:7e:6e:3b:c8:53:1b:f6:f9:79:56:bb:de:eb:23:92:42:e4: 18:be:55:9c:7a:15:e3:24:63:8b:d7:c8:ce:98:c8:8d:aa:91: 97:2c:22:21:cb:10:36:88:a1:01:3c:c8:49:cd:4b:57:c4:07: bd:08:c9:e4:7e:0e:2d:30:68:cc:d1:d2:7a:c8:e0:3f:02:bb: 12:8f:13:4c:c5:2d:48:2b:5c:9e:fc:41:2d:7c:97:31:2e:02: a7:b4:66:45:5e:6c:33:4c:5f:3a:73:5a:d9:fd:1e:25:85:af: fe:85:26:89:89:d4:d8:4c:e7:92:b2:22:83:be:e2:5c:e0:e2: a5:5a:75:5b:b0:e1:e2:20:15:53:7c:c6:e5:2d:95:90:8b:10: af:6a:a2:3e:33:8f:91:5b:75:43:77:3d:36:6e:f2:a4:68:1a: d7:5f:92:6d:f5:58:70:03:c2:02:6d:3b:79:81:e8:05:e0:b9: ac:da:5c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0ZqSChZAZQcJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk Y2FhNTEwNzctMjk1ZC00Yjk2LTgxMDctNGUwMGVmZWE2MWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8oFynWyBQx6rD+vrzKWPKwkuNBRqcHz1KCd jCGZGbVT2j/+hxxJYZ12f1lUD9IR57Y7ixfaZk2SzAfvW0N5Ew70XFbk4rSWZ1U0 G5dyUKtiFwTCUhPwo6tH5ydWj6yOBLXnNHRIfW6FOvo3qKgrOhqHFWQLD0NFSFLb bRph/ENBRia51myQtG7b3NNmGqyxDxW1m+io35mZspPbnc5SCbhOf2uiAZx3DD1W TMvUubNaW+KUzypTAmVHywVJrD6N4ebtCxXOdnHhpRQvoU5ks6k2Xh18sdPazVff SsO140aw4ib3fK9+e+wixJQeQAvryD8eeTcgGCExsULVxBVAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSw2QeuHh+wpMVKg2pR9RKNH+IAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYWVmZmQ3YjctZDQ1OS0z MDI0LThkOWQtOTY5Y2MyZTY2NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQyspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7DfKJSiK0x8x9nDLJ4OEwEv/9+3hDeVmAx/IH6qPhxGw3o+7jk4RhK gwuNq64Rd3HeLK2K9ZBgaqbC4Ome1yLD3JHC3CW9AXZ+bjvIUxv2+XlWu97rI5JC 5Bi+VZx6FeMkY4vXyM6YyI2qkZcsIiHLEDaIoQE8yEnNS1fEB70IyeR+Di0waMzR 0nrI4D8CuxKPE0zFLUgrXJ78QS18lzEuAqe0ZkVebDNMXzpzWtn9HiWFr/6FJomJ 1NhM55KyIoO+4lzg4qVadVuw4eIgFVN8xuUtlZCLEK9qoj4zj5FbdUN3PTZu8qRo Gtdfkm31WHADwgJtO3mB6AXguazaXIw= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org