$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa File: f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa (raw, json) Hash identifier: hhfOO5vlBlupv6voPRqWVzM5WyDyd6rAsFEyQaYxtdE= Subject key identifier: 42:0D:A3:D4:B2:29:47:74:A4:61:F7:F1:18:C9:38:6E:3C:80:53:1C Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Certificate serial: 010D0C9F432858479AABF01724F35D90338AF780 Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 15100 IP address blocks: 216.38.32.0/20 maxlen: 20 216.38.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:f0:17:24:f3:5d:90:33:8a:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=0e34870f-83a6-491a-9fab-7ef215a22621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cf:67:ad:5e:f3:16:b8:55:b7:b9:ac:fb:47: a1:23:a3:a3:ee:ec:5b:e7:98:a4:4d:3a:25:85:df: 8b:56:3c:b3:9e:bc:b2:f7:b5:37:20:13:fe:bb:f3: bc:e1:6d:3b:83:25:3d:74:1b:54:60:e6:e0:fb:11: 89:cb:9e:48:8c:21:75:94:ab:c1:f5:32:5c:cc:46: ae:ba:2f:84:6b:cb:b7:b8:06:13:9b:f9:4d:f8:13: d2:06:04:ff:bc:15:e6:15:72:0c:c8:21:b6:23:ea: e4:a9:3a:b9:8f:47:0e:a6:b7:88:89:a9:34:fb:30: 68:3f:3b:a1:72:71:65:39:77:dd:0b:f6:cb:62:7a: 1b:39:cb:f2:65:83:bc:6c:b3:76:5c:9c:80:57:6e: 38:1b:a7:0c:c5:81:29:a6:03:5d:74:68:88:d0:f6: cb:2b:d0:46:07:fe:a5:fd:fb:4b:57:35:6f:56:a7: a6:bc:fd:c5:a4:f8:d4:06:33:4c:f1:85:ee:19:85: 38:71:16:06:23:cb:51:69:85:a0:66:78:b4:86:b4: 40:88:86:4f:da:b6:a4:cc:b0:6b:66:cd:c4:79:20: f4:01:39:14:67:67:72:dd:6c:b5:7e:a3:21:47:5d: 3e:0a:a9:75:59:0b:fb:08:6f:ef:f4:e1:f9:01:45: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:A3:D4:B2:29:47:74:A4:61:F7:F1:18:C9:38:6E:3C:80:53:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl X509v3 Authority Key Identifier: keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer sbgp-ipAddrBlock: critical IPv4: 216.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e0:27:6c:42:16:66:c0:4a:b2:de:62:a0:4c:cd:59:94:13: e7:c8:dd:9e:a8:66:5a:65:79:88:d2:0b:39:91:9f:e4:3e:99: 7b:81:0c:62:d4:fc:18:44:a2:c8:17:b5:5f:29:30:79:4b:2c: ee:b5:b2:83:87:8e:5d:8c:2f:22:b3:bb:f2:6b:bb:99:ff:e0: 9b:ac:d9:b0:7b:0e:e9:1c:fe:a7:8d:14:b8:07:55:86:93:d1: 63:ef:a3:6c:df:60:9c:92:ea:58:9a:20:5d:df:18:57:1d:86: e3:72:7b:91:b9:51:b5:5f:3b:e3:32:e5:15:d2:82:52:01:9e: ff:a7:2b:9b:f7:db:10:5b:91:d7:c7:a3:60:88:b6:52:23:08: 4d:4f:e1:10:4d:8d:ed:29:93:7a:be:8d:94:f9:af:ae:1e:38: fa:9c:56:22:76:f9:34:c9:5f:55:2c:83:9f:66:d7:af:75:80: b3:9e:e9:56:37:da:88:b4:bd:ef:a9:0f:d6:a7:d0:d5:51:39: 18:cd:b9:dc:7b:fb:00:77:89:77:98:ba:87:86:63:48:6a:5c: 09:9a:74:3b:e6:20:20:f9:a0:da:73:c5:e3:d0:93:c9:0e:d0: 83:2a:7e:08:c8:a7:00:4d:c3:9f:2f:81:ba:b1:3d:d7:f5:c5: 96:7c:29:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/AXJPNdkDOK94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz YTdhMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MGUzNDg3MGYtODNhNi00OTFhLTlmYWItN2VmMjE1YTIyNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs9nrV7zFrhVt7ms+0ehI6Oj7uxb55ikTTol hd+LVjyznryy97U3IBP+u/O84W07gyU9dBtUYObg+xGJy55IjCF1lKvB9TJczEau ui+Ea8u3uAYTm/lN+BPSBgT/vBXmFXIMyCG2I+rkqTq5j0cOpreIiak0+zBoPzuh cnFlOXfdC/bLYnobOcvyZYO8bLN2XJyAV244G6cMxYEppgNddGiI0PbLK9BGB/6l /ftLVzVvVqemvP3FpPjUBjNM8YXuGYU4cRYGI8tRaYWgZni0hrRAiIZP2rakzLBr Zs3EeSD0ATkUZ2dy3Wy1fqMhR10+Cql1WQv7CG/v9OH5AUXCJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEINo9SyKUd0pGH38RjJOG48gFMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvZjkyNDEzM2EtYjVhZC0z NmYxLThhNDUtYzg2ZGJlYjFkYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1 YmIxMjNhN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2CYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvgJ2xCFmbASrLeYqBMzVmUE+fI3Z6oZlpleYjSCzmRn+Q+mXuBDGLU /BhEosgXtV8pMHlLLO61soOHjl2MLyKzu/Jru5n/4Jus2bB7Dukc/qeNFLgHVYaT 0WPvo2zfYJyS6liaIF3fGFcdhuNye5G5UbVfO+My5RXSglIBnv+nK5v32xBbkdfH o2CItlIjCE1P4RBNje0pk3q+jZT5r64eOPqcViJ2+TTJX1Usg59m1691gLOe6VY3 2oi0ve+pD9an0NVRORjNudx7+wB3iXeYuoeGY0hqXAmadDvmICD5oNpzxePQk8kO 0IMqfgjIpwBNw58vgbqxPdf1xZZ8Kbk= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:46 2024 by rpki-client on console-fra.rpki-client.org