$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa File: e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa (raw, json) Hash identifier: cZiaQ/RpieaeQ4YbnVqwdA5LtMf11b6r/yWJvC+HPRU= Subject key identifier: 17:CE:AC:B5:6E:11:0C:5B:B8:21:89:8E:C8:65:A9:1B:C3:FC:D5:8D Certificate issuer: /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363 Certificate serial: 010D0C9F43285847299B23F80038579B9FAFF8C0 Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 40028 IP address blocks: 162.252.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:23:f8:00:38:57:9b:9f:af:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363 Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=33bc68dc-9708-410a-ad07-e1509ef5aa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:5a:70:0e:bb:ec:55:14:d1:b3:06:2c:2a: 1f:36:d5:28:2d:0c:d8:a1:50:41:34:02:12:ab:68: ef:bb:5c:ba:1c:b4:2e:93:0c:36:d3:7b:c4:6b:96: 52:e3:16:01:b0:89:fb:82:30:48:7a:dc:e6:d7:60: c6:46:1b:33:7e:6e:59:59:c4:3a:de:9f:1c:a0:03: 41:5d:7c:ad:b2:bb:7c:19:f1:69:bc:eb:1b:f9:32: c3:d0:70:b7:60:03:28:90:68:3c:a0:5c:76:8d:56: c7:ce:0d:df:2b:42:2a:4a:34:af:21:ff:77:18:78: 84:a2:67:2f:f3:8a:3a:1f:e5:90:76:a6:1b:97:55: 75:fa:f5:32:f4:b4:4e:07:a0:42:e0:80:de:01:79: 87:d4:3e:3a:ad:c9:bc:af:f5:bb:57:61:8c:95:88: 08:c5:52:e4:82:ae:94:ad:e4:d0:e8:01:e5:1b:41: 5a:a3:f0:52:aa:0a:df:44:a2:6c:ea:48:56:20:c0: c4:a6:d9:18:f7:aa:d2:c1:4f:7b:f4:df:fb:0e:26: 14:af:ae:27:a7:e3:85:69:21:ed:83:a1:3d:71:a0: 34:b3:ee:51:5a:32:36:61:a6:c9:11:c3:45:91:91: 99:f5:11:36:29:30:99:dc:f8:de:4f:25:bc:d2:91: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CE:AC:B5:6E:11:0C:5B:B8:21:89:8E:C8:65:A9:1B:C3:FC:D5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl X509v3 Authority Key Identifier: keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer sbgp-ipAddrBlock: critical IPv4: 162.252.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f3:70:e6:81:be:25:7c:15:fa:56:f3:12:c5:11:2c:24:7b: 79:87:54:eb:49:17:cd:b4:f3:fa:05:db:62:d9:63:e5:5e:f2: f6:bc:f9:0a:6a:1c:ec:3e:a6:34:6e:01:fc:51:53:94:43:35: 5c:b2:ff:bd:b2:ae:08:b4:13:1b:9a:53:bb:c9:b2:cd:91:3e: 92:1a:92:74:30:f1:b5:d1:05:46:c0:63:db:4a:93:10:86:c5: 9c:d1:df:52:4c:79:3f:4f:aa:44:6c:2a:bc:16:03:c4:ee:97: 16:80:c5:69:73:53:7c:2c:26:b1:92:21:4f:a2:8c:91:28:38: 5f:3c:66:92:91:39:7b:16:b2:e5:6c:08:ad:24:e0:f1:f3:53: 01:97:d1:69:6b:36:15:25:2a:de:43:77:e5:a6:cd:85:ae:10: 73:3a:22:0f:98:f9:fe:a8:ce:bc:15:03:51:ea:37:53:2c:89: 01:78:66:72:12:6f:f4:1d:99:04:80:5f:06:65:c5:16:42:f9: 16:95:e5:22:8e:7e:05:0e:fb:2e:04:54:70:c4:2c:84:da:aa: 52:ea:82:0f:0a:67:19:38:44:7b:21:ac:9d:7e:5f:1c:a7:32: 37:ba:7e:17:81:ba:7e:b5:40:63:b4:6d:12:4e:ec:bb:1e:fd: 35:4a:b2:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyP4ADhXm5+v+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxOGNhNmYtMjBjOC00ZjFiLWI0ZjUtZTRmODA1ODYy MzYzMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MzNiYzY4ZGMtOTcwOC00MTBhLWFkMDctZTE1MDllZjVhYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOxacA677FUU0bMGLCofNtUoLQzYoVBBNAIS q2jvu1y6HLQukww203vEa5ZS4xYBsIn7gjBIetzm12DGRhszfm5ZWcQ63p8coANB XXytsrt8GfFpvOsb+TLD0HC3YAMokGg8oFx2jVbHzg3fK0IqSjSvIf93GHiEomcv 84o6H+WQdqYbl1V1+vUy9LROB6BC4IDeAXmH1D46rcm8r/W7V2GMlYgIxVLkgq6U reTQ6AHlG0Fao/BSqgrfRKJs6khWIMDEptkY96rSwU979N/7DiYUr64np+OFaSHt g6E9caA0s+5RWjI2YabJEcNFkZGZ9RE2KTCZ3PjeTyW80pEHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfOrLVuEQxbuCGJjshlqRvD/NWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDE4 Y2E2Zi0yMGM4LTRmMWItYjRmNS1lNGY4MDU4NjIzNjMvZTljYWYyNjktNmNhYi0z NWM2LTgzZjUtOTFhYWM0ZTlmNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzQxOGNhNmYtMjBjOC00ZjFiLWI0 ZjUtZTRmODA1ODYyMzYzL2M0MThjYTZmLTIwYzgtNGYxYi1iNGY1LWU0ZjgwNTg2 MjM2My5jcmwwHwYDVR0jBBgwFoAUNfqIdPmA7c2mQtILHtC4i+/r13swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDE4Y2E2Zi0yMGM4LTRmMWItYjRmNS1lNGY4 MDU4NjIzNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDzcOaBviV8FfpW8xLFESwke3mHVOtJF8208/oF22LZY+Ve8va8+Qpq HOw+pjRuAfxRU5RDNVyy/72yrgi0ExuaU7vJss2RPpIaknQw8bXRBUbAY9tKkxCG xZzR31JMeT9PqkRsKrwWA8TulxaAxWlzU3wsJrGSIU+ijJEoOF88ZpKROXsWsuVs CK0k4PHzUwGX0WlrNhUlKt5Dd+WmzYWuEHM6Ig+Y+f6ozrwVA1HqN1MsiQF4ZnIS b/QdmQSAXwZlxRZC+RaV5SKOfgUO+y4EVHDELITaqlLqgg8KZxk4RHshrJ1+Xxyn Mje6fheBun61QGO0bRJO7Lse/TVKso8= -----END CERTIFICATE-----Generated at Thu Nov 21 16:16:14 2024 by rpki-client on console-ams.rpki-client.org