$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: 10h6BGGTnzVqUwUWpAtCktcMNld5FodbLYbxO+Tosls= Subject key identifier: 26:72:A2:36:5F:38:BE:70:2D:D7:8F:C6:2C:FC:1E:E6:8C:F0:85:1E Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584742BB482C3B721BE40E642100 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:48:2c:3b:72:1b:e4:0e:64:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=4d243842-46a8-4eae-a775-0141ab76f65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:c4:69:b2:df:b7:2f:36:ec:2d:d0:7a:ca: ff:9c:2d:42:93:03:98:0f:14:81:5e:8f:45:94:7e: 75:93:1a:b0:5d:72:f0:2d:5b:e7:96:3f:e8:3d:ac: 08:e5:df:87:70:9b:88:6b:59:4c:20:59:04:67:10: e2:cb:0f:fb:c7:0f:59:26:78:df:81:d1:98:cb:c0: ae:d7:a0:89:4b:0c:a5:bd:a6:9d:f0:07:44:25:f0: 7b:51:0e:a8:bc:72:33:c7:24:25:f6:2b:4b:93:5f: 5a:45:de:dd:89:a4:81:7f:47:ae:b2:67:11:97:7f: f1:10:12:29:99:f4:c0:e8:4a:1f:b0:be:45:87:9c: f2:c0:ae:10:52:f0:a9:3a:3a:12:1e:26:ee:55:43: 57:2d:7b:d5:06:97:1d:92:1e:e1:0f:55:4f:ac:00: 42:4c:ca:9c:7a:38:ab:f3:80:26:57:b5:53:83:4e: 63:0c:98:a8:04:95:c4:7d:8a:34:cb:41:75:7d:af: a0:76:bc:b4:af:ca:35:c7:f5:9d:e3:e9:cc:01:5d: ea:d5:26:0a:af:eb:c2:c6:3a:6f:67:bf:c3:34:2e: f8:d8:61:68:a2:80:de:8f:1f:e2:0e:84:f3:10:3f: 65:33:8e:12:05:e9:4b:f8:80:f0:e8:47:8d:89:92: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:72:A2:36:5F:38:BE:70:2D:D7:8F:C6:2C:FC:1E:E6:8C:F0:85:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b7:08:4a:da:fa:eb:17:83:2b:d8:b4:67:a9:a2:7c:4d:a0: 75:6e:c8:eb:a0:bc:88:0f:48:ab:ae:ef:30:1f:b4:a5:e1:d7: d7:6b:19:7d:55:14:d8:ab:cd:ff:6c:83:16:c6:86:af:5f:65: e6:6d:65:67:11:35:09:49:25:5f:30:b1:01:45:1e:2a:b9:49: 27:bf:fc:dd:67:cb:bd:73:fa:a3:58:bd:78:99:39:b6:2a:1a: 5b:31:54:db:8a:d7:6e:b2:0e:cc:2c:f6:40:1b:97:a2:1f:54: 2b:3e:75:62:50:be:99:89:08:ba:ef:f1:7e:06:74:25:7f:18: 1e:4a:f9:b6:8b:a1:ef:31:92:72:ff:72:da:0b:26:f1:8b:f2: 84:aa:5e:1b:74:53:de:80:1a:c0:8d:54:b1:3c:89:2f:03:16: 87:04:1c:5e:67:ba:17:b1:c4:d5:6f:5d:21:e6:e7:5c:34:d7: 2c:ef:36:d1:86:46:ee:32:09:c4:d1:ff:f1:28:18:f5:14:76: 84:a3:6f:cd:bb:53:ef:ab:20:5c:c6:d9:d9:b3:7b:c2:6b:12: c0:38:40:44:c4:38:07:6b:07:57:81:1e:2d:b2:2b:f9:c2:22: 04:ea:cf:b8:9c:67:97:5e:93:10:3f:cf:b0:b4:d8:5b:3b:1f: 53:1c:32:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0gsO3Ib5A5kIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk NGQyNDM4NDItNDZhOC00ZWFlLWE3NzUtMDE0MWFiNzZmNjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwLEabLfty827C3Qesr/nC1CkwOYDxSBXo9F lH51kxqwXXLwLVvnlj/oPawI5d+HcJuIa1lMIFkEZxDiyw/7xw9ZJnjfgdGYy8Cu 16CJSwylvaad8AdEJfB7UQ6ovHIzxyQl9itLk19aRd7diaSBf0eusmcRl3/xEBIp mfTA6EofsL5Fh5zywK4QUvCpOjoSHibuVUNXLXvVBpcdkh7hD1VPrABCTMqcejir 84AmV7VTg05jDJioBJXEfYo0y0F1fa+gdry0r8o1x/Wd4+nMAV3q1SYKr+vCxjpv Z7/DNC742GFoooDejx/iDoTzED9lM44SBelL+IDw6EeNiZJTMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZyojZfOL5wLdePxiz8HuaM8IUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq3CEra+usXgyvYtGeponxNoHVuyOugvIgPSKuu7zAftKXh19drGX1V FNirzf9sgxbGhq9fZeZtZWcRNQlJJV8wsQFFHiq5SSe//N1ny71z+qNYvXiZObYq GlsxVNuK126yDsws9kAbl6IfVCs+dWJQvpmJCLrv8X4GdCV/GB5K+baLoe8xknL/ ctoLJvGL8oSqXht0U96AGsCNVLE8iS8DFocEHF5nuhexxNVvXSHm51w01yzvNtGG Ru4yCcTR//EoGPUUdoSjb827U++rIFzG2dmze8JrEsA4QETEOAdrB1eBHi2yK/nC IgTqz7icZ5dekxA/z7C02Fs7H1McMi8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org