$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa File: c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa (raw, json) Hash identifier: IgyGJdWTJilKCqZVzmzKEccsM9aNhYlWt26U+vsSJgo= Subject key identifier: B7:B7:F6:F5:6E:73:60:55:42:49:BB:72:F0:D3:49:E7:8D:C0:0F:4E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285847B10169A921A0140888351280 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 31898 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:69:a9:21:a0:14:08:88:35:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=d1b4bb8b-8db9-4713-a2f9-2f666ee0cb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:da:97:e7:56:0a:62:e9:7f:5b:a2:0f:06: b9:d9:98:5f:d6:0e:6d:5b:54:25:ec:67:5d:13:2c: a5:fd:d9:07:77:45:4f:40:1b:b7:18:0f:1b:a0:dc: 1b:23:c9:fb:c6:0d:51:89:ef:7a:74:b4:c9:dc:59: 85:57:68:41:6a:7e:47:3b:42:06:94:cf:fa:e2:2d: 59:dd:1c:b0:f3:32:5c:92:6e:5c:10:00:1f:96:d8: 73:fc:a1:f4:ac:21:a6:4a:d5:56:9a:66:59:ea:68: d4:c9:ae:26:12:9f:2a:1d:52:02:e2:1c:00:91:ed: c0:09:90:c3:90:93:a6:e0:8b:9d:35:7f:a5:a2:07: 97:3c:0a:47:4e:0a:1b:98:d4:e6:35:22:db:a2:58: 9c:8d:3e:22:40:0a:5a:46:0b:9c:39:fd:cc:44:52: 81:ac:5e:a9:a3:7e:e6:92:ae:28:85:84:d2:e1:1c: 60:7c:cb:0f:fd:8f:4d:8d:47:2d:69:6b:ae:f7:49: 5b:10:58:ab:1d:89:8f:b2:33:9c:e5:ba:97:87:a5: ff:95:45:15:01:16:36:54:29:59:be:b0:28:6e:97: 66:68:59:44:29:13:75:a2:e2:30:d7:87:77:2d:de: d8:95:3f:0a:a5:3d:48:6d:71:a3:a8:57:13:e5:f5: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B7:F6:F5:6E:73:60:55:42:49:BB:72:F0:D3:49:E7:8D:C0:0F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f4:1c:b9:3c:b5:0e:2f:50:7c:43:5e:1a:2d:7a:35:4f:22: ce:ea:f5:a0:ce:04:e9:be:84:72:be:8f:8b:4f:0f:d1:54:e4: 7f:bd:0d:cf:03:96:d7:d3:e3:3d:05:79:4b:92:9d:27:3c:10: fb:13:5e:4c:83:cc:0a:de:bd:5b:1e:4e:f8:0e:59:54:0c:4f: 49:4b:a5:3a:1c:e0:5e:c2:25:d3:bf:10:b3:f6:fe:ff:d9:c9: b0:74:16:7b:02:cd:6a:e3:5d:a9:c4:57:58:1f:a9:54:a1:45: 62:4a:4f:7b:e7:96:1a:d6:97:79:e5:22:4f:dc:be:b8:40:b3: b6:48:62:81:88:e3:ec:dd:2d:b3:d8:c4:d5:54:de:78:3b:5f: 14:ae:16:6a:28:fe:35:f9:63:d2:0b:cf:8f:8d:b1:eb:9c:49: a5:9d:08:b1:00:82:56:ec:0a:9d:e3:9a:e7:21:b0:cf:6d:7f: c8:86:e3:8a:cb:da:cd:f8:4e:99:1e:c8:0e:f0:f1:15:b2:19: 1b:7b:a1:41:82:d9:14:6f:6e:92:ee:1e:f4:a1:cc:85:55:f9: 62:52:35:c7:86:4e:7c:44:96:fc:c7:d3:6d:03:b7:53:2e:ce: 62:6c:55:71:f7:00:41:0f:7b:27:eb:64:41:9a:68:b4:27:4d: 83:5b:00:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWmpIaAUCIg1EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk ZDFiNGJiOGItOGRiOS00NzEzLWEyZjktMmY2NjZlZTBjYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/al+dWCmLpf1uiDwa52Zhf1g5tW1Ql7Gdd Eyyl/dkHd0VPQBu3GA8boNwbI8n7xg1Rie96dLTJ3FmFV2hBan5HO0IGlM/64i1Z 3Ryw8zJckm5cEAAflthz/KH0rCGmStVWmmZZ6mjUya4mEp8qHVIC4hwAke3ACZDD kJOm4IudNX+logeXPApHTgobmNTmNSLbolicjT4iQApaRgucOf3MRFKBrF6po37m kq4ohYTS4RxgfMsP/Y9NjUctaWuu90lbEFirHYmPsjOc5bqXh6X/lUUVARY2VClZ vrAobpdmaFlEKRN1ouIw14d3Ld7YlT8KpT1IbXGjqFcT5fUrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe39vVuc2BVQkm7cvDTSeeNwA9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYzdkNWE4NmYtNGE2YS0z MGNmLWEzYmEtOWNkNWQ5YjVhMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA70HLk8tQ4vUHxDXhotejVPIs7q9aDOBOm+hHK+j4tPD9FU5H+9Dc8D ltfT4z0FeUuSnSc8EPsTXkyDzArevVseTvgOWVQMT0lLpToc4F7CJdO/ELP2/v/Z ybB0FnsCzWrjXanEV1gfqVShRWJKT3vnlhrWl3nlIk/cvrhAs7ZIYoGI4+zdLbPY xNVU3ng7XxSuFmoo/jX5Y9ILz4+NseucSaWdCLEAglbsCp3jmuchsM9tf8iG44rL 2s34TpkeyA7w8RWyGRt7oUGC2RRvbpLuHvShzIVV+WJSNceGTnxElvzH020Dt1Mu zmJsVXH3AEEPeyfrZEGaaLQnTYNbAGc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org