$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa File: 0b865a74-43ce-357e-8858-73c4efd70945.roa (raw, json) Hash identifier: zEj4eCKcy8LvRG27IJAzD/hMJVuVBsViHIRcGnWwSlA= Subject key identifier: 89:2F:AF:F9:80:3F:29:45:6C:21:A8:17:0C:A8:38:38:C9:33:77:87 Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F4328584754E0CEF4CE15DF017C4E0900 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 40501 IP address blocks: 216.235.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:ce:f4:ce:15:df:01:7c:4e:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=a8c15aa8-4edf-4b2e-9e8c-9eb21f5eabb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:94:f4:aa:5d:3a:6a:6f:6f:a1:15:63:e9: 02:9c:0f:c7:85:7c:83:19:93:22:3f:0e:de:76:df: 77:40:e1:af:3d:9f:76:1d:c6:89:4c:8b:e3:72:91: a7:3e:01:be:ef:9a:c8:69:b9:d0:01:03:9d:32:43: 3e:94:a0:3c:08:12:c3:07:58:77:40:d0:6a:cc:85: c3:67:6c:d1:14:dc:8b:22:b8:a9:90:d8:7b:62:22: 38:90:4d:ed:84:2e:5e:68:ea:34:50:95:a9:70:a0: 25:38:0c:ab:ea:47:58:3f:a3:cb:b6:78:a3:73:30: 8e:bf:9b:d5:63:9e:61:34:7b:91:fb:b4:d9:f8:25: 72:5e:fd:3e:ee:90:f7:f3:af:35:a6:78:bb:45:28: 3f:81:3d:42:08:fe:0a:47:3a:3d:bd:8e:5c:de:00: 27:93:17:72:06:57:2b:b2:21:54:8a:0e:8b:c9:38: 3a:b4:70:30:bf:bd:df:ff:c9:b7:cc:95:db:c2:1d: 7f:18:cc:20:6c:f2:5a:3b:4a:93:b0:d4:7b:56:39: b8:01:0a:4b:c1:da:d5:17:95:82:50:94:f3:4b:71: 68:31:2c:91:5a:3d:a1:66:db:73:2e:9f:79:a4:54: f8:56:2b:e8:db:77:19:9f:3e:e8:86:fd:29:fe:33: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:AF:F9:80:3F:29:45:6C:21:A8:17:0C:A8:38:38:C9:33:77:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/0b865a74-43ce-357e-8858-73c4efd70945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e4:4b:07:b6:c1:39:74:77:ff:9e:dc:ba:7d:e8:c1:ef:e3: 47:0b:89:1c:83:1d:13:2f:ed:76:b7:9c:07:f6:07:04:cb:53: 0d:21:86:73:66:91:c5:58:be:d6:4b:d1:33:b0:4b:23:50:5d: 5a:d2:d5:a8:df:fa:b0:c0:27:5e:1a:dd:db:53:df:ba:b3:24: cb:2a:a9:72:e0:6d:a8:fd:bc:2a:4e:d1:77:50:30:9c:44:82: 10:4f:61:fb:74:00:fc:c9:00:96:1b:4a:88:2e:f2:09:e0:47: a0:70:87:00:60:d9:be:76:18:ca:9d:01:eb:65:df:d5:64:7b: 31:ea:89:ca:d3:a5:0b:89:86:16:f3:fa:35:74:9b:cc:47:9b: 17:17:8f:72:c1:83:97:43:9a:85:c6:51:ee:25:81:95:1b:bb: 44:0c:81:3d:e9:e4:ab:50:43:22:b5:31:50:bc:1a:27:27:8a: 94:71:6f:fe:e0:2c:94:ed:02:89:24:a7:36:7b:68:cb:cb:a4: 05:c6:f6:e5:42:e8:df:4c:c6:e8:d4:e6:81:dc:2a:ee:37:81: 83:05:47:32:cb:83:4e:44:0f:49:cd:16:51:9f:4e:8d:ba:1f: d3:26:8e:38:03:39:e7:a5:9e:d8:5f:b0:c7:82:9f:f5:49:40: 80:65:8c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4M70zhXfAXxOCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YThjMTVhYTgtNGVkZi00YjJlLTllOGMtOWViMjFmNWVhYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9uU9KpdOmpvb6EVY+kCnA/HhXyDGZMiPw7e dt93QOGvPZ92HcaJTIvjcpGnPgG+75rIabnQAQOdMkM+lKA8CBLDB1h3QNBqzIXD Z2zRFNyLIripkNh7YiI4kE3thC5eaOo0UJWpcKAlOAyr6kdYP6PLtnijczCOv5vV Y55hNHuR+7TZ+CVyXv0+7pD38681pni7RSg/gT1CCP4KRzo9vY5c3gAnkxdyBlcr siFUig6LyTg6tHAwv73f/8m3zJXbwh1/GMwgbPJaO0qTsNR7Vjm4AQpLwdrVF5WC UJTzS3FoMSyRWj2hZttzLp95pFT4Vivo23cZnz7ohv0p/jPlfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkvr/mAPylFbCGoFwyoODjJM3eHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvMGI4NjVhNzQtNDNjZS0z NTdlLTg4NTgtNzNjNGVmZDcwOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvkSwe2wTl0d/+e3Lp96MHv40cLiRyDHRMv7Xa3nAf2BwTLUw0hhnNm kcVYvtZL0TOwSyNQXVrS1ajf+rDAJ14a3dtT37qzJMsqqXLgbaj9vCpO0XdQMJxE ghBPYft0APzJAJYbSogu8gngR6BwhwBg2b52GMqdAetl39VkezHqicrTpQuJhhbz +jV0m8xHmxcXj3LBg5dDmoXGUe4lgZUbu0QMgT3p5KtQQyK1MVC8GicnipRxb/7g LJTtAokkpzZ7aMvLpAXG9uVC6N9MxujU5oHcKu43gYMFRzLLg05ED0nNFlGfTo26 H9MmjjgDOeelnthfsMeCn/VJQIBljCE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:07 2024 by rpki-client on console-ams.rpki-client.org