$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: SxsO59o9ZmnxC53e03Tk/TAP3ydVe8eWCn4I8ohIoFg= Subject key identifier: D4:42:D7:9C:31:5A:05:A4:99:21:BB:AC:5C:8F:02:E8:61:96:7F:34 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858477230EB290B1AC96E0B60EA00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:eb:29:0b:1a:c9:6e:0b:60:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=a592e633-2027-4270-ac4e-2ec80e9ebf32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:cf:10:d8:d0:a1:4f:c5:ea:d5:c1:c1:bc: 62:99:1c:3a:9e:7c:bc:a4:ae:c4:04:53:d7:56:97: 6a:c6:af:42:21:68:7c:9f:20:82:d2:7c:52:73:74: df:28:e8:ef:86:ee:bc:6d:6d:01:4c:95:f3:ca:a2: c5:c7:15:d2:fa:4c:10:15:86:6c:7b:24:8a:50:93: 0d:1b:59:12:16:29:01:21:93:d7:01:a0:4a:5d:38: ef:4f:0f:f7:a4:59:a3:29:03:d6:22:3e:3e:5b:08: fa:e0:96:89:a3:d0:25:9f:a1:5f:73:f3:8b:db:4e: 78:59:f1:e3:07:ca:ed:73:ed:00:84:11:1f:8d:4c: ef:72:84:50:d0:23:33:0b:6b:7d:1a:67:72:97:57: f0:91:01:18:1b:e9:72:9f:c0:f9:17:e0:7b:9d:a0: 3b:ad:62:52:47:b3:dc:a4:0f:1c:ac:44:2a:f3:6f: 4a:14:7c:02:6b:f7:92:7c:99:3f:d3:56:27:43:3b: ac:19:cc:8b:85:c3:27:ad:29:90:3c:c3:3e:ce:4d: af:3d:7c:09:c6:d0:28:9e:ed:2e:b0:6e:b2:d9:45: 46:88:c6:6a:55:97:81:80:76:ef:6b:3a:7e:07:6d: 67:00:76:ef:90:ea:b1:0e:93:d4:93:b1:1f:7b:79: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:D7:9C:31:5A:05:A4:99:21:BB:AC:5C:8F:02:E8:61:96:7F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:78:ac:ba:a5:a8:11:fa:7e:c6:e8:cc:00:8c:33:65:7c:d4: d5:97:b4:bd:07:41:4a:7d:44:2d:26:9b:c3:26:ca:4b:f3:14: 91:09:e9:24:e9:b0:2c:d4:a5:59:bb:00:87:43:22:03:89:f7: 93:f6:9f:28:d1:fa:58:2b:d5:6f:78:0e:dc:11:5f:11:5a:8a: fb:1a:2b:08:8b:b8:29:f9:71:92:4e:60:d9:e2:58:fb:85:38: 72:b8:91:ad:88:c1:09:a4:8e:cd:9a:56:3a:1a:94:3c:fa:09: ce:1f:a5:c4:4e:45:a6:ca:c6:08:9a:c4:8c:5e:c5:6e:97:19: fa:16:53:93:14:3c:f8:24:d2:07:31:9a:09:23:46:49:0d:48: 66:99:40:68:1d:e2:62:7e:b6:fb:33:23:78:01:e9:7f:a9:da: 70:2b:01:1a:fc:f1:1b:f5:9f:7f:40:54:94:8d:03:6c:5b:60: 4b:10:5e:86:f9:30:63:d8:f3:09:1e:a9:4e:64:c1:67:d7:b2: a2:21:9b:46:30:92:d0:c9:d1:05:78:b8:e5:1e:ad:8f:cb:45: 61:ed:1c:57:dc:a1:9e:d7:07:12:7e:a9:53:86:fb:74:fc:9b: 60:79:0a:8f:71:15:a5:b8:77:81:bd:87:27:44:0d:6f:02:ff: b9:dc:6d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOspCxrJbgtg6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk YTU5MmU2MzMtMjAyNy00MjcwLWFjNGUtMmVjODBlOWViZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLfPENjQoU/F6tXBwbximRw6nny8pK7EBFPX Vpdqxq9CIWh8nyCC0nxSc3TfKOjvhu68bW0BTJXzyqLFxxXS+kwQFYZseySKUJMN G1kSFikBIZPXAaBKXTjvTw/3pFmjKQPWIj4+Wwj64JaJo9Aln6Ffc/OL2054WfHj B8rtc+0AhBEfjUzvcoRQ0CMzC2t9Gmdyl1fwkQEYG+lyn8D5F+B7naA7rWJSR7Pc pA8crEQq829KFHwCa/eSfJk/01YnQzusGcyLhcMnrSmQPMM+zk2vPXwJxtAonu0u sG6y2UVGiMZqVZeBgHbvazp+B21nAHbvkOqxDpPUk7Efe3ljLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRC15wxWgWkmSG7rFyPAuhhln80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANh4rLqlqBH6fsbozACMM2V81NWXtL0HQUp9RC0mm8MmykvzFJEJ6STp sCzUpVm7AIdDIgOJ95P2nyjR+lgr1W94DtwRXxFaivsaKwiLuCn5cZJOYNniWPuF OHK4ka2IwQmkjs2aVjoalDz6Cc4fpcRORabKxgiaxIxexW6XGfoWU5MUPPgk0gcx mgkjRkkNSGaZQGgd4mJ+tvszI3gB6X+p2nArARr88Rv1n39AVJSNA2xbYEsQXob5 MGPY8wkeqU5kwWfXsqIhm0YwktDJ0QV4uOUerY/LRWHtHFfcoZ7XBxJ+qVOG+3T8 m2B5Co9xFaW4d4G9hydEDW8C/7ncbb8= -----END CERTIFICATE-----Generated at Mon Nov 25 01:28:24 2024 by rpki-client on console-ams.rpki-client.org