$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa File: 02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa (raw, json) Hash identifier: jsvzwzRW8NAZ7Inh1epU1MbmfrfLZ/buu+iZG3Sa1Fw= Subject key identifier: 32:50:B4:92:C4:DF:F1:D0:F9:74:D3:C6:08:8C:B0:7F:F5:DB:34:B3 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F43285847A73BDC4B475264CDA4802A80 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 46450 IP address blocks: 216.158.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:dc:4b:47:52:64:cd:a4:80:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=f82e97c6-2ecb-4552-bdfd-08009a4223c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8d:40:9b:56:cd:1f:ca:62:c9:5c:39:71:e3: 72:db:4a:60:43:18:e2:6b:55:d0:0b:d4:60:ae:a4: 98:7e:79:83:10:68:a3:1a:61:f2:ad:05:ea:e6:95: 7c:89:4a:09:c8:7b:6c:83:98:17:d1:43:af:6a:dd: 25:77:5b:3b:59:87:4b:d2:19:04:be:ea:56:84:80: 5b:af:64:2b:cf:c9:93:77:34:4a:10:78:44:6f:18: 37:10:2b:15:4f:39:1c:33:95:b0:01:bb:1d:ba:1f: 6e:11:78:24:95:af:9b:3d:b5:71:52:f7:0c:5d:86: c2:7b:5a:7a:74:8b:a1:46:0c:ac:12:c9:d3:ce:3c: 5d:3b:2e:3d:51:7e:eb:5d:71:e4:ca:df:0b:1f:63: 50:96:a1:0f:30:1b:f7:9b:c1:77:14:80:1a:c9:63: 08:87:dd:00:0d:23:33:79:b1:2c:d6:13:41:1d:33: b0:81:ef:ea:85:b8:1e:99:04:ef:cd:34:57:3d:4f: 40:d2:c7:70:27:2f:59:58:31:a9:87:da:86:e3:50: 19:77:64:64:79:f2:ce:43:22:7b:c4:33:f1:a9:07: 2e:89:de:3d:f7:d7:2d:fd:6f:36:4a:06:ef:f3:8a: 96:21:fa:c0:ac:ee:bb:fa:10:8b:a8:cf:77:7e:3f: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:50:B4:92:C4:DF:F1:D0:F9:74:D3:C6:08:8C:B0:7F:F5:DB:34:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 216.158.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:79:18:99:d2:18:f8:0f:36:43:0e:2e:80:70:42:43:e8:b0: 53:a4:cb:e1:8b:94:0c:ee:19:b7:88:db:81:0f:44:6f:ff:c1: de:e5:51:d4:18:60:4e:bd:74:77:4a:84:2a:1b:c1:83:ad:14: 2b:32:ec:bf:15:ab:99:5a:d1:72:c5:91:df:12:73:e5:d0:e7: c0:35:a6:27:59:54:26:bf:8e:0d:f4:fc:4b:f6:8c:f2:d2:79: f9:be:68:69:fd:9d:7b:51:68:b5:48:3f:59:c5:07:b3:9b:07: ee:48:67:9f:be:23:88:9b:b1:7a:29:45:ab:b9:93:8f:37:3a: cb:52:ad:e9:7e:46:a8:13:3a:a9:41:86:76:10:f3:eb:66:e3: 80:e3:7f:87:b3:98:b1:ec:18:74:59:1c:fc:66:f7:25:51:92: e5:fb:b9:70:d5:a7:28:d6:2f:f0:79:57:b6:30:4a:03:d3:36: 48:1c:56:50:83:83:44:44:5c:5f:c7:9d:65:da:9a:94:87:55: f4:4b:ee:a8:a9:c2:6b:c5:e8:5b:0d:63:4e:84:d8:82:d7:dc: f5:d4:12:77:f0:94:cd:a5:08:5d:70:63:7d:1f:4e:00:50:84: 14:09:54:2e:ea:3a:19:26:de:a7:c2:fe:d2:8b:eb:10:60:8a: 16:3c:03:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO9xLR1JkzaSAKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZjgyZTk3YzYtMmVjYi00NTUyLWJkZmQtMDgwMDlhNDIyM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I1Am1bNH8piyVw5ceNy20pgQxjia1XQC9Rg rqSYfnmDEGijGmHyrQXq5pV8iUoJyHtsg5gX0UOvat0ld1s7WYdL0hkEvupWhIBb r2Qrz8mTdzRKEHhEbxg3ECsVTzkcM5WwAbsduh9uEXgkla+bPbVxUvcMXYbCe1p6 dIuhRgysEsnTzjxdOy49UX7rXXHkyt8LH2NQlqEPMBv3m8F3FIAayWMIh90ADSMz ebEs1hNBHTOwge/qhbgemQTvzTRXPU9A0sdwJy9ZWDGph9qG41AZd2RkefLOQyJ7 xDPxqQcuid4999ct/W82Sgbv84qWIfrArO67+hCLqM93fj9wtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJQtJLE3/HQ+XTTxgiMsH/12zSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDJjMTJjYTgtMjViMy0z MWRlLWEyYTEtMmQ0NGM5ODJmZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2J6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx5GJnSGPgPNkMOLoBwQkPosFOky+GLlAzuGbeI24EPRG//wd7lUdQY YE69dHdKhCobwYOtFCsy7L8Vq5la0XLFkd8Sc+XQ58A1pidZVCa/jg30/Ev2jPLS efm+aGn9nXtRaLVIP1nFB7ObB+5IZ5++I4ibsXopRau5k483OstSrel+RqgTOqlB hnYQ8+tm44Djf4ezmLHsGHRZHPxm9yVRkuX7uXDVpyjWL/B5V7YwSgPTNkgcVlCD g0REXF/HnWXampSHVfRL7qipwmvF6FsNY06E2ILX3PXUEnfwlM2lCF1wY30fTgBQ hBQJVC7qOhkm3qfC/tKL6xBgihY8A4g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:33 2024 by rpki-client on console-ams.rpki-client.org