$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa File: 3ee16212-ace1-3836-9f78-e67462b4a3ba.roa (raw, json) Hash identifier: ViUUfYlU9VxbU4ZnBt765BlkAGx6scEWOvNduBaa85g= Subject key identifier: E3:21:6C:64:54:F8:AF:6F:0E:CD:C1:53:EE:C8:31:5C:E9:32:FC:39 Certificate issuer: /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Certificate serial: 010D0C9F43285847A04148660C34680BEA3D6280 Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 10973 IP address blocks: 216.128.96.0/20 maxlen: 20 216.128.96.0/21 maxlen: 21 216.128.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:48:66:0c:34:68:0b:ea:3d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=62791b13-34e4-46b4-b0a2-2f42c0178cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:b6:20:f3:a5:8e:61:8e:48:3c:e6:df:65: 35:98:21:9b:e2:bb:67:29:37:8a:30:09:12:50:1d: 50:35:51:57:50:ba:05:0a:de:15:de:f5:4d:f0:c9: 95:27:62:12:9f:e8:ea:5b:07:3b:6f:a1:8a:f3:64: 98:11:92:bc:cd:91:ed:e8:7a:66:52:ed:62:c6:9e: 1c:16:60:b1:c2:07:fb:66:06:b4:92:f0:17:77:8e: 16:5d:01:6b:a6:6e:c8:94:5d:2d:69:0a:eb:f2:00: 1d:0d:c9:90:13:26:a6:56:75:ff:5e:e8:f0:d7:26: fa:e9:60:12:ca:8c:db:0a:0c:b7:7f:0b:ec:76:92: c9:41:37:fb:f2:3c:a0:02:2f:24:11:2e:aa:c6:70: 4b:79:a4:52:56:ba:51:f8:c6:e3:9a:fe:d6:a5:fb: 92:e0:66:69:0c:8f:f4:bf:d2:bf:c5:92:e8:6e:c4: 90:d4:e3:8c:99:c1:dd:32:55:6a:10:91:81:44:be: f5:65:68:ea:bd:00:ce:c7:74:cd:4b:3a:2d:0b:2e: c7:1e:8f:a9:12:20:f6:a3:2a:40:a0:dc:99:28:4b: 70:79:11:f8:62:ec:0b:a8:2f:ac:4e:ac:4c:6c:5b: b8:54:26:04:30:c6:a0:21:80:2e:d1:ba:60:94:05: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:21:6C:64:54:F8:AF:6F:0E:CD:C1:53:EE:C8:31:5C:E9:32:FC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl X509v3 Authority Key Identifier: keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer sbgp-ipAddrBlock: critical IPv4: 216.128.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2b:19:02:67:8c:ef:ef:bf:8b:75:08:d4:7f:ac:2a:b2:2b: 38:0e:57:0b:55:9d:2e:6c:6f:e8:32:bc:6b:4b:f7:95:c1:a5: 60:bd:ec:74:8b:69:ac:fd:a6:ce:18:85:06:32:75:54:53:1d: 81:d6:30:82:e7:aa:7e:80:5a:cd:2b:e2:82:ab:f4:0a:b6:b5: 7b:d0:88:1d:77:bf:81:5d:14:db:c0:3a:56:94:3e:f4:68:81: 30:90:fa:63:a0:d8:fe:23:71:77:fc:21:9c:d1:6e:46:e6:1c: b8:a0:96:17:e1:91:36:6c:fb:f3:99:22:c1:63:2f:4b:9c:e6: b8:16:fe:8e:11:24:94:9b:4c:cf:61:ee:42:ea:da:14:b4:a6: 42:1b:4c:0a:bb:4a:df:5c:e1:82:12:83:6e:c5:97:64:fd:07: e4:b7:ae:0f:d2:1e:cc:2a:ba:8e:fb:08:a7:5f:fd:6d:45:63: 7c:48:8d:91:e9:0c:03:ce:ee:b5:39:7a:ee:40:42:9b:ac:d1: d5:36:b9:6e:f7:4c:50:45:1e:53:68:41:10:b4:eb:53:c6:fb: 9d:e4:46:f8:50:8f:0d:e9:65:c5:5d:65:6b:91:96:e7:e7:bb: 60:8a:ea:74:c7:39:5f:25:78:03:ff:8e:a2:aa:02:f9:28:72: 69:8b:aa:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUhmDDRoC+o9YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWViYTEyZmYtYzIyMS00YWIzLTlhYTYtZDU0MmQwODEy NTQzMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk NjI3OTFiMTMtMzRlNC00NmI0LWIwYTItMmY0MmMwMTc4Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTG2IPOljmGOSDzm32U1mCGb4rtnKTeKMAkS UB1QNVFXULoFCt4V3vVN8MmVJ2ISn+jqWwc7b6GK82SYEZK8zZHt6HpmUu1ixp4c FmCxwgf7Zga0kvAXd44WXQFrpm7IlF0taQrr8gAdDcmQEyamVnX/Xujw1yb66WAS yozbCgy3fwvsdpLJQTf78jygAi8kES6qxnBLeaRSVrpR+Mbjmv7WpfuS4GZpDI/0 v9K/xZLobsSQ1OOMmcHdMlVqEJGBRL71ZWjqvQDOx3TNSzotCy7HHo+pEiD2oypA oNyZKEtweRH4YuwLqC+sTqxMbFu4VCYEMMagIYAu0bpglAWqXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMhbGRU+K9vDs3BU+7IMVzpMvw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJh MTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQyZDA4MTI1NDMvM2VlMTYyMTItYWNlMS0z ODM2LTlmNzgtZTY3NDYyYjRhM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWViYTEyZmYtYzIyMS00YWIzLTlh YTYtZDU0MmQwODEyNTQzLzFlYmExMmZmLWMyMjEtNGFiMy05YWE2LWQ1NDJkMDgx MjU0My5jcmwwHwYDVR0jBBgwFoAUO3Cbc63ymWoAZSmxQ0389dJAUgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJhMTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQy ZDA4MTI1NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwrGQJnjO/vv4t1CNR/rCqyKzgOVwtVnS5sb+gyvGtL95XBpWC97HSL aaz9ps4YhQYydVRTHYHWMILnqn6AWs0r4oKr9Aq2tXvQiB13v4FdFNvAOlaUPvRo gTCQ+mOg2P4jcXf8IZzRbkbmHLiglhfhkTZs+/OZIsFjL0uc5rgW/o4RJJSbTM9h 7kLq2hS0pkIbTAq7St9c4YISg27Fl2T9B+S3rg/SHswquo77CKdf/W1FY3xIjZHp DAPO7rU5eu5AQpus0dU2uW73TFBFHlNoQRC061PG+53kRvhQjw3pZcVdZWuRlufn u2CK6nTHOV8leAP/jqKqAvkocmmLqig= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org