$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa File: 58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa (raw, json) Hash identifier: D9yXCCt3lWoiXLDMaNwzrvQ0YVaNhMXWTvf+KEVkPeU= Subject key identifier: 5A:3F:FE:AD:C9:09:A5:4D:ED:D5:59:1E:0A:26:25:18:52:71:CD:BA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858473A5B50F7F315350FB45F6180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 11653 IP address blocks: 65.49.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:50:f7:f3:15:35:0f:b4:5f:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=c9d137a3-8322-418a-97a8-f592d2cf238a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:bb:a0:9a:c9:fe:61:df:9b:42:e4:ca:3b: 03:1b:87:19:8a:ad:91:6c:18:bb:cb:3c:c1:91:b8: 81:96:98:fc:fd:c1:97:6f:e8:0c:08:38:ca:6f:9c: a5:a7:a1:a5:35:cc:ef:f8:10:f7:4c:69:17:30:0c: cd:48:95:5e:29:20:07:49:51:59:71:22:d6:60:09: 64:a0:de:10:a5:d8:01:d4:a3:4f:82:32:eb:0c:8f: b6:e5:5d:cc:6c:d0:60:19:2f:15:b3:4b:09:d2:67: 7b:cf:d4:e6:78:b0:0a:b3:e4:05:80:ca:d0:e4:b8: f4:c0:77:4d:77:51:d3:f0:02:d0:d3:35:03:fc:de: 16:4b:55:42:e7:92:b4:8d:11:78:b3:cd:33:f1:13: 14:42:8f:6e:bf:4f:a8:c2:d9:6b:2c:9a:be:25:6e: dd:73:17:4f:c0:e8:40:93:a3:9b:52:f2:60:9b:8b: b7:31:f4:d3:c7:1b:c1:99:77:e5:c2:6a:60:35:25: 66:f0:51:96:a3:19:17:6a:94:eb:b7:4c:8a:f0:4b: 8e:fe:a5:da:d4:57:dc:ef:1e:60:01:1b:db:a3:cc: e2:e5:01:c6:ff:7b:bd:2c:42:04:cc:bc:9a:2f:da: 7b:44:85:97:a9:c3:9f:10:be:73:bd:56:57:8a:0e: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:FE:AD:C9:09:A5:4D:ED:D5:59:1E:0A:26:25:18:52:71:CD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4a:5b:24:22:15:68:71:53:da:e9:8b:88:d5:b7:a5:56:ce: 55:6b:58:96:53:f4:81:6a:9f:4d:10:da:95:61:e7:c3:5f:fe: 5c:e8:f8:b6:2a:95:da:2c:22:d3:08:99:7c:c3:7c:bf:f4:3b: 8c:bd:c7:7a:b8:69:49:0b:1c:e4:10:ea:8f:81:5a:db:0f:e6: 11:d7:21:20:03:af:5f:ef:f8:cd:f5:e0:f0:70:19:03:10:f9: 9f:b1:fd:a8:eb:f1:e2:1a:05:2d:5c:10:d1:9e:05:38:a5:e0: 2a:54:ad:48:d2:79:99:63:00:ec:5b:27:f3:fd:47:66:ad:18: ba:bb:de:b7:1e:5c:92:78:d2:a4:c8:45:69:4d:2a:33:f1:a2: 94:0a:55:6e:a5:20:9b:f3:5a:e9:35:b6:f8:b3:be:c6:19:8e: 00:d5:10:03:22:1c:96:53:d9:26:40:de:b2:8a:5c:f4:e5:dc: e6:b6:52:04:48:a3:ee:40:62:b2:5f:26:e0:0f:d2:bc:93:a1: 01:45:29:76:36:b9:6a:fb:35:91:df:37:a6:1e:66:c2:f1:41: 1f:69:c4:2a:54:89:dd:42:ad:3b:1f:8e:ca:1f:73:fe:5a:a5: 2e:db:01:60:c2:a7:8e:30:71:31:fb:d5:93:10:5b:b6:3a:8b: fe:53:b3:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W1D38xU1D7RfYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk YzlkMTM3YTMtODMyMi00MThhLTk3YTgtZjU5MmQyY2YyMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1O7oJrJ/mHfm0LkyjsDG4cZiq2RbBi7yzzB kbiBlpj8/cGXb+gMCDjKb5ylp6GlNczv+BD3TGkXMAzNSJVeKSAHSVFZcSLWYAlk oN4QpdgB1KNPgjLrDI+25V3MbNBgGS8Vs0sJ0md7z9TmeLAKs+QFgMrQ5Lj0wHdN d1HT8ALQ0zUD/N4WS1VC55K0jRF4s80z8RMUQo9uv0+owtlrLJq+JW7dcxdPwOhA k6ObUvJgm4u3MfTTxxvBmXflwmpgNSVm8FGWoxkXapTrt0yK8EuO/qXa1Ffc7x5g ARvbo8zi5QHG/3u9LEIEzLyaL9p7RIWXqcOfEL5zvVZXig5COwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo//q3JCaVN7dVZHgomJRhScc26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNThlOTY3YTEtYTY5YS0z YzcxLWI4ZmUtNGM1MGNmN2ExNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFKWyQiFWhxU9rpi4jVt6VWzlVrWJZT9IFqn00Q2pVh58Nf/lzo+LYq ldosItMImXzDfL/0O4y9x3q4aUkLHOQQ6o+BWtsP5hHXISADr1/v+M314PBwGQMQ +Z+x/ajr8eIaBS1cENGeBTil4CpUrUjSeZljAOxbJ/P9R2atGLq73rceXJJ40qTI RWlNKjPxopQKVW6lIJvzWuk1tvizvsYZjgDVEAMiHJZT2SZA3rKKXPTl3Oa2UgRI o+5AYrJfJuAP0ryToQFFKXY2uWr7NZHfN6YeZsLxQR9pxCpUid1CrTsfjsofc/5a pS7bAWDCp44wcTH71ZMQW7Y6i/5Ts8s= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:35 2024 by rpki-client on console-fra.rpki-client.org