$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa File: 68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa (raw, json) Hash identifier: IwnYVxhaaaKvY6P4GndMbf2zYH5zdTg2GeB4AdjIW0w= Subject key identifier: BE:D5:B8:D7:CA:D1:94:2B:CA:72:39:1C:BD:AB:DB:B0:EE:49:4A:C0 Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Certificate serial: 010D0C9F43285847D8A522C06EB5A4E905D33B08 Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa Signing time: Mon 11 Nov 2024 17:47:17 +0000 ROA not before: Mon 11 Nov 2024 17:47:17 +0000 ROA not after: Sun 09 Feb 2025 17:47:17 +0000 asID: 396032 IP address blocks: 64.38.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d8:a5:22:c0:6e:b5:a4:e9:05:d3:3b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Validity Not Before: Nov 11 17:47:17 2024 GMT Not After : Feb 9 17:47:17 2025 GMT Subject: CN=171cee0b-7dc2-4346-b22f-cfc75a921285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:4e:40:bc:f5:90:41:01:a6:08:b6:17:ed: d5:ac:40:95:ad:7a:0c:fe:b1:eb:ea:03:17:b2:63: 2b:ae:45:a1:58:97:98:e3:50:1f:85:13:3e:70:8e: c4:ad:59:f1:e5:19:d6:a4:13:87:14:75:c4:12:40: cd:c1:c1:99:03:7d:03:c2:06:e2:25:fa:9c:f8:39: 14:94:2e:18:85:5c:55:9d:6d:3b:82:81:f2:9d:27: 2e:b3:3d:59:cf:e4:89:44:92:88:6f:ca:3e:f0:a4: c2:95:ac:64:ce:5e:95:c7:38:16:ad:43:60:10:4e: e8:99:6b:b1:71:fa:37:bf:59:88:d6:72:9a:db:2e: fe:a8:dd:ad:9e:c1:6d:d8:54:24:2a:37:30:39:62: 10:2e:61:83:71:05:5b:c9:f8:e3:7c:64:2d:4f:93: 02:82:15:a0:32:75:da:90:69:03:e3:20:b6:d0:6f: e8:f7:85:2a:8c:d7:5b:be:d5:96:ce:f5:1c:83:89: 5d:e7:79:e4:ec:74:78:43:9b:0b:74:b1:ca:e2:56: 05:7e:6a:79:20:05:34:42:c4:66:3d:3b:ef:c8:40: 77:3b:7e:bd:6c:a7:63:90:14:ae:67:d7:ed:56:4a: 83:77:ab:94:b8:3a:38:ab:66:23:82:b0:a4:ec:56: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D5:B8:D7:CA:D1:94:2B:CA:72:39:1C:BD:AB:DB:B0:EE:49:4A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl X509v3 Authority Key Identifier: keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer sbgp-ipAddrBlock: critical IPv4: 64.38.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8f:82:cd:c4:a0:fe:ff:03:00:df:eb:f4:57:d1:54:54:07: f6:18:ce:8b:27:21:63:bd:0e:e1:77:98:c1:4c:e9:d3:a6:28: 7d:ee:e9:b0:ba:cb:39:7f:d1:a5:c2:6f:5d:66:c8:2d:5b:fe: 27:67:7d:ec:98:7d:d2:c2:9e:ea:61:62:d9:41:95:be:f4:8a: 07:b5:d8:fc:d8:4a:47:53:3c:26:2c:4e:1f:2f:f0:3c:da:52: 38:e7:c9:38:66:81:7a:a7:40:1d:be:9c:2b:bb:af:02:94:89: ab:88:ec:b5:2b:4a:67:00:15:31:cd:00:dc:c1:83:11:91:60: 8b:2c:64:ea:85:11:bb:59:d3:cd:cb:74:99:d2:d8:f0:7d:3d: e8:5f:50:fe:bf:d1:ba:c9:7f:36:ec:0f:bd:3c:c7:66:21:c7: d9:f1:68:87:00:e6:9c:35:0f:9b:1c:ca:06:6c:11:1d:38:2c: 01:ea:75:6a:d8:c2:f0:45:2b:0d:33:0d:9e:4b:08:99:d5:4b: 9b:25:9b:11:5e:52:c8:96:92:43:c8:4d:82:cc:52:32:d9:67: 62:c6:b7:b8:60:ae:f3:40:6e:71:b8:51:8a:7d:5a:dc:0f:2f: ed:bc:9b:22:0b:8c:ac:9d:ad:c8:66:ac:0a:3f:76:42:ea:1a: 6c:06:ad:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYpSLAbrWk6QXTOwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz YzE2MB4XDTI0MTExMTE3NDcxN1oXDTI1MDIwOTE3NDcxN1owLzEtMCsGA1UEAxMk MTcxY2VlMGItN2RjMi00MzQ2LWIyMmYtY2ZjNzVhOTIxMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPlOQLz1kEEBpgi2F+3VrECVrXoM/rHr6gMX smMrrkWhWJeY41AfhRM+cI7ErVnx5RnWpBOHFHXEEkDNwcGZA30DwgbiJfqc+DkU lC4YhVxVnW07goHynScusz1Zz+SJRJKIb8o+8KTClaxkzl6VxzgWrUNgEE7omWux cfo3v1mI1nKa2y7+qN2tnsFt2FQkKjcwOWIQLmGDcQVbyfjjfGQtT5MCghWgMnXa kGkD4yC20G/o94UqjNdbvtWWzvUcg4ld53nk7HR4Q5sLdLHK4lYFfmp5IAU0QsRm PTvvyEB3O369bKdjkBSuZ9ftVkqDd6uUuDo4q2YjgrCk7FYz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7VuNfK0ZQrynI5HL2r27DuSUrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvNjhkYzY4YWUtYjZjNC0z NzAxLWEyYWQtNjIwOThiMWYxMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3 MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2 ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+Pgs3EoP7/AwDf6/RX0VRUB/YYzosnIWO9DuF3mMFM6dOmKH3u6bC6 yzl/0aXCb11myC1b/idnfeyYfdLCnuphYtlBlb70ige12PzYSkdTPCYsTh8v8Dza UjjnyThmgXqnQB2+nCu7rwKUiauI7LUrSmcAFTHNANzBgxGRYIssZOqFEbtZ083L dJnS2PB9PehfUP6/0brJfzbsD708x2Yhx9nxaIcA5pw1D5scygZsER04LAHqdWrY wvBFKw0zDZ5LCJnVS5slmxFeUsiWkkPITYLMUjLZZ2LGt7hgrvNAbnG4UYp9WtwP L+28myILjKydrchmrAo/dkLqGmwGrfE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org