$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa File: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (raw, json) Hash identifier: G+TC04Q+pCtmdRFm3ShHeQJ5zEmtC8xaX+s/TdOTjU4= Subject key identifier: A5:70:E8:38:76:B8:7E:49:B4:C4:D2:D9:0C:A7:0A:77:66:E1:23:9A Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F4328584726D07D1CE34D61299103CFC0 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 6327 IP address blocks: 64.59.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:7d:1c:e3:4d:61:29:91:03:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=bcc6bce7-8f31-403c-99a4-6bc1e6d81c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e7:d0:f8:c2:10:b4:d3:25:5d:c0:00:0f:7f: 16:7b:30:40:ea:39:57:12:75:c7:86:87:9c:3d:ad: 42:34:56:7d:f1:60:86:9d:f7:f8:55:78:3d:e1:50: 77:a1:86:0b:91:55:bb:0c:d7:de:69:ef:4c:fd:45: 3e:2d:fe:2a:ca:de:d9:44:21:77:8d:7c:06:5e:c8: ab:d1:6c:8c:56:27:5f:83:02:6a:ed:a5:c5:e0:9e: 82:c8:4b:eb:c0:e5:b0:1e:31:b0:d9:3b:89:ce:59: 8c:74:be:13:ec:e1:2d:51:e0:d1:a0:75:2f:ae:6f: 33:48:71:15:3a:7a:08:c2:d1:16:61:ff:a3:f2:17: e6:30:33:91:2e:f4:8a:04:4d:ff:5b:a3:30:3d:ef: d3:0e:67:ba:f1:a1:c6:de:43:1c:f1:f7:2a:93:29: 7a:52:8c:09:1a:ed:89:b1:79:1c:42:58:2d:f3:a8: 82:36:20:3c:13:08:fd:7c:90:d9:06:58:67:65:19: 71:1c:9d:47:d2:6a:0e:3b:44:66:97:f1:cc:20:a9: 70:3d:f5:00:55:d8:96:b4:d2:f2:16:4c:c7:af:36: 2e:cd:0e:6c:46:55:7c:43:5f:14:70:a9:88:15:d2: 7a:5c:0b:e1:32:dd:9f:6c:48:8d:61:27:cd:e2:bd: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:E8:38:76:B8:7E:49:B4:C4:D2:D9:0C:A7:0A:77:66:E1:23:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: 64.59.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:95:1b:96:68:75:33:87:f9:6c:53:81:35:8c:42:f9:01:ef: 03:21:2d:c4:2e:bd:bd:e5:fa:5f:9c:0a:ef:4c:4a:70:a0:74: 15:b8:a9:c6:5b:6d:3c:bf:f6:ad:b5:a2:59:60:bc:39:24:11: 22:ed:f2:85:60:6b:7d:34:94:64:2d:37:93:f2:aa:47:71:3b: 4c:a3:99:11:82:b9:ba:0e:90:69:3e:cf:4d:52:46:37:de:37: 17:30:e8:3f:93:0d:ba:7d:89:68:59:c4:50:72:7f:d8:8b:74: 1f:e5:99:c1:fc:47:05:0d:b5:30:3e:e5:4c:fd:ad:7e:e0:46: 32:ee:1c:f0:d6:40:dc:84:f0:2e:c3:e9:ba:00:f0:83:51:5d: 84:f3:63:10:61:3f:b8:87:90:a6:26:ce:c0:39:e7:5a:bf:f6: 08:62:d1:6a:c9:ff:b3:dc:e4:13:74:14:0e:46:44:6c:b1:b9: 79:e1:1b:b1:e4:be:1f:6b:e9:95:ae:a5:1a:a9:c2:2d:c9:41: 1a:ba:1b:7f:28:92:12:0c:61:17:c8:c9:e2:34:91:05:93:29: ec:d8:dc:b6:16:e1:63:41:de:61:84:c7:07:b5:5a:db:77:d4: 96:90:9e:15:e5:89:94:79:1c:92:9c:56:7a:4a:e8:f2:ea:eb: 69:9f:a5:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0H0c401hKZEDz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk YmNjNmJjZTctOGYzMS00MDNjLTk5YTQtNmJjMWU2ZDgxYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9efQ+MIQtNMlXcAAD38WezBA6jlXEnXHhoec Pa1CNFZ98WCGnff4VXg94VB3oYYLkVW7DNfeae9M/UU+Lf4qyt7ZRCF3jXwGXsir 0WyMVidfgwJq7aXF4J6CyEvrwOWwHjGw2TuJzlmMdL4T7OEtUeDRoHUvrm8zSHEV OnoIwtEWYf+j8hfmMDORLvSKBE3/W6MwPe/TDme68aHG3kMc8fcqkyl6UowJGu2J sXkcQlgt86iCNiA8Ewj9fJDZBlhnZRlxHJ1H0moOO0Rml/HMIKlwPfUAVdiWtNLy FkzHrzYuzQ5sRlV8Q18UcKmIFdJ6XAvhMt2fbEiNYSfN4r32TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVw6Dh2uH5JtMTS2QynCndm4SOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvNGU3ZDhhOTAtNzhlOS0z MDhhLTg5OGItMTNkNDBjMjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOVG5ZodTOH+WxTgTWMQvkB7wMhLcQuvb3l+l+cCu9MSnCgdBW4qcZb bTy/9q21ollgvDkkESLt8oVga300lGQtN5PyqkdxO0yjmRGCuboOkGk+z01SRjfe Nxcw6D+TDbp9iWhZxFByf9iLdB/lmcH8RwUNtTA+5Uz9rX7gRjLuHPDWQNyE8C7D 6boA8INRXYTzYxBhP7iHkKYmzsA551q/9ghi0WrJ/7Pc5BN0FA5GRGyxuXnhG7Hk vh9r6ZWupRqpwi3JQRq6G38okhIMYRfIyeI0kQWTKezY3LYW4WNB3mGExwe1Wtt3 1JaQnhXliZR5HJKcVnpK6PLq62mfpZQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:43 2024 by rpki-client on console-ams.rpki-client.org