$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa File: 2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa (raw, json) Hash identifier: Mz9sUf/B5pvzULf8BvoqNpAIBVagu7DjQQvFzSzK3Zs= Subject key identifier: E9:4C:96:8C:10:96:A2:3F:2D:F9:A9:27:D4:E8:94:5D:B9:87:0C:01 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F43285847299B22FD8C9231B72FDCC680 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 13807 IP address blocks: 64.64.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:22:fd:8c:92:31:b7:2f:dc:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=8bd6eadb-aa4f-46f4-9104-776083dd5911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:af:66:b2:7f:c5:9d:73:cc:cd:06:ef:3d: 1a:ef:65:d1:c8:99:05:e5:9a:30:47:10:fc:30:81: e4:f9:a5:01:8d:36:ac:ef:ce:e2:06:dd:e8:3c:23: 03:c6:7d:53:03:1d:e8:db:3b:8b:df:4b:3d:51:ef: 7e:4b:cf:b8:40:7d:e8:23:2f:fe:28:78:05:e5:21: c2:4e:11:a5:88:6b:30:f2:33:f0:c7:e8:c1:9a:45: 70:f8:76:fd:22:00:ed:ce:8b:7c:d3:26:ce:be:e7: 63:be:81:40:5f:9b:05:1a:11:8c:a1:5a:de:56:51: c4:20:3a:13:16:a5:3d:b9:4e:e3:f0:db:7d:78:56: 27:dc:85:97:bf:bb:63:13:11:0a:82:b7:8f:4e:32: 88:31:ea:dd:0d:b8:64:75:1a:a2:c9:c7:95:ae:73: a6:40:19:dd:6f:33:70:16:ee:f4:cb:1c:8b:81:2b: cd:23:b9:01:d3:58:32:e8:4f:22:dc:fa:1b:99:77: 1b:67:a0:4b:a5:d8:ec:60:a8:b9:6b:92:10:c9:54: c0:3c:11:23:d7:47:59:e7:dc:31:23:30:5d:6a:3c: 98:a7:90:e0:b2:93:93:5f:c0:e4:9c:4e:58:b5:78: 6b:9f:21:6d:86:0f:92:33:50:05:d3:a5:8c:82:83: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4C:96:8C:10:96:A2:3F:2D:F9:A9:27:D4:E8:94:5D:B9:87:0C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 64.64.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c3:69:6f:61:0e:e5:1b:97:d9:44:4f:df:d8:a1:ca:7c:56: 36:04:5d:3b:d4:82:7e:33:f0:c9:c8:2b:fe:29:91:66:8f:f4: 77:cf:2b:14:1b:ae:74:92:81:5e:e8:ca:e0:bb:c5:08:95:d2: 30:45:06:04:25:78:0a:ab:91:7f:87:1f:20:17:70:75:68:0c: 32:f7:48:a6:49:a5:25:2e:ba:76:10:11:e9:4f:9a:86:43:6e: b5:65:0d:69:fb:8f:4e:ec:61:47:79:a2:ca:3a:4b:3f:57:f7: 1a:b7:9c:d8:49:54:83:e3:9e:ce:ea:0f:3c:f8:ed:6a:c4:5f: 05:66:3d:eb:14:1b:da:69:9c:f1:4d:6a:33:fa:12:2e:0d:0d: 8e:ec:c2:44:43:a8:41:21:bc:68:2f:47:b0:57:dc:21:a3:3f: 69:66:e1:a9:c5:4e:18:15:40:24:70:55:fa:a3:8a:85:51:d3: 10:a2:c5:da:a7:b2:bb:05:e1:bb:4a:a6:d2:5d:df:05:dc:93: af:0c:a4:9d:93:22:87:bb:71:05:6c:61:2f:3d:ab:71:9a:40: b2:d5:b5:b9:fd:10:cf:cc:8c:84:32:58:92:97:c0:b4:d4:83: 45:d3:bf:93:6c:88:e3:47:56:6e:b5:b7:f5:ab:63:d2:c3:01: e8:c9:43:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyL9jJIxty/cxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk OGJkNmVhZGItYWE0Zi00NmY0LTkxMDQtNzc2MDgzZGQ1OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe+vZrJ/xZ1zzM0G7z0a72XRyJkF5ZowRxD8 MIHk+aUBjTas787iBt3oPCMDxn1TAx3o2zuL30s9Ue9+S8+4QH3oIy/+KHgF5SHC ThGliGsw8jPwx+jBmkVw+Hb9IgDtzot80ybOvudjvoFAX5sFGhGMoVreVlHEIDoT FqU9uU7j8Nt9eFYn3IWXv7tjExEKgrePTjKIMerdDbhkdRqiyceVrnOmQBndbzNw Fu70yxyLgSvNI7kB01gy6E8i3PobmXcbZ6BLpdjsYKi5a5IQyVTAPBEj10dZ59wx IzBdajyYp5DgspOTX8DknE5YtXhrnyFthg+SM1AF06WMgoMPaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlMlowQlqI/LfmpJ9TolF25hwwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMmE0ZTNhZDYtZjZiYS0z MGI5LWE0YzUtYjRkOGRiMTA2NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzDaW9hDuUbl9lET9/Yocp8VjYEXTvUgn4z8MnIK/4pkWaP9HfPKxQb rnSSgV7oyuC7xQiV0jBFBgQleAqrkX+HHyAXcHVoDDL3SKZJpSUuunYQEelPmoZD brVlDWn7j07sYUd5oso6Sz9X9xq3nNhJVIPjns7qDzz47WrEXwVmPesUG9ppnPFN ajP6Ei4NDY7swkRDqEEhvGgvR7BX3CGjP2lm4anFThgVQCRwVfqjioVR0xCixdqn srsF4btKptJd3wXck68MpJ2TIoe7cQVsYS89q3GaQLLVtbn9EM/MjIQyWJKXwLTU g0XTv5NsiONHVm61t/WrY9LDAejJQ1E= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:40 2024 by rpki-client on console-ams.rpki-client.org