$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa File: 89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa (raw, json) Hash identifier: vq73R800FT2TamE+IrA+6EdRNCrr2D7tW9+yamf65TU= Subject key identifier: 12:F7:26:C6:1B:17:4F:28:F9:AB:B3:9A:8E:DF:92:81:8C:35:C7:6B Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F43285847D999EBBA36A4481789CB4480 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 40501 IP address blocks: 216.235.80.0/24 maxlen: 24 216.235.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:eb:ba:36:a4:48:17:89:cb:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=124192ef-8fed-448a-9d41-07c6698c7c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:f5:67:26:21:03:9f:3d:7e:30:6b:37:8a: 1e:60:27:e3:1a:80:ae:c9:c0:95:e9:71:2e:22:f9: c4:e4:00:1b:b0:b3:7b:c5:f4:0a:3c:64:c9:0c:95: 7e:26:58:d8:77:dc:96:d2:53:8e:2d:83:db:49:1f: 17:05:5c:0f:8b:06:e8:b4:45:20:58:83:60:78:44: 13:1b:da:6b:53:dd:f6:a0:f8:29:cd:d9:29:21:74: 23:08:90:71:e6:29:85:f5:25:13:cb:eb:14:9e:5b: db:58:2b:e0:5c:d1:fe:f1:cd:58:5a:94:6e:18:d8: 5e:81:d3:1f:02:dd:d7:c4:bd:69:6e:b8:38:c0:13: 4b:17:d4:57:d2:2f:a2:40:38:50:13:1b:0e:e7:4b: d3:46:91:92:f6:22:d2:67:d4:7e:46:e7:90:c9:3e: 37:9a:cd:fa:86:3d:23:dc:12:10:62:ac:3f:53:0b: 76:7b:fe:b9:6c:1b:23:d4:70:91:e2:c4:3a:be:b8: 8b:ca:82:7f:c7:91:b0:96:a2:c8:d8:b3:23:b7:0c: 2a:5f:47:ba:24:53:64:db:66:24:69:5b:ed:b4:b6: 7c:a3:14:8d:d6:28:dc:bd:f2:70:9a:ff:64:8b:5b: 31:2b:10:b2:d8:f2:7b:29:c4:d5:0f:fc:18:e5:dc: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:26:C6:1B:17:4F:28:F9:AB:B3:9A:8E:DF:92:81:8C:35:C7:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.80.0/24 216.235.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f5:5b:2b:dd:eb:30:da:64:fd:6a:69:ce:d3:e7:1b:17:47: f3:80:d5:1a:82:20:1b:92:5d:d5:8b:a5:70:3a:25:30:81:6f: 2a:d4:56:7e:bc:7d:3e:39:4c:1d:0a:4e:f2:e7:56:bf:7b:2e: d1:21:7a:04:4d:a9:92:4a:b7:2f:c2:42:05:1d:2e:5c:ee:43: 16:ed:08:61:0e:bb:6e:c8:fc:be:15:59:ec:f2:1d:42:a5:27: 28:1b:df:17:0d:30:a4:6c:01:23:fe:ea:cc:44:1f:ae:2b:1e: fc:54:ad:48:8e:16:60:69:bc:86:78:57:6b:83:7c:14:31:1b: b8:c4:8a:d2:94:7f:81:3c:5e:48:8e:7c:a3:ff:d0:57:fc:e2: be:1e:05:b8:69:02:20:8d:cd:e2:85:08:43:15:f5:db:c0:b8: 9f:6b:92:1e:d2:96:3e:8a:09:21:a1:a3:e2:eb:30:11:fc:f0: 3d:0c:62:91:a4:38:40:a6:4b:84:b6:0a:60:ca:d4:77:7c:7d: f2:bc:5f:5a:58:8e:f1:83:d3:3c:fc:fa:c3:e2:f8:9c:33:c9: eb:6b:e3:9e:f0:61:70:82:7e:7c:29:42:0b:ae:e2:d9:67:21: 04:e7:9b:e9:da:e3:10:7f:68:e8:29:33:a6:b2:fd:9e:61:98: 9c:3d:0b:59 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfZmeu6NqRIF4nLRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MTI0MTkyZWYtOGZlZC00NDhhLTlkNDEtMDdjNjY5OGM3YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor31ZyYhA589fjBrN4oeYCfjGoCuycCV6XEu IvnE5AAbsLN7xfQKPGTJDJV+JljYd9yW0lOOLYPbSR8XBVwPiwbotEUgWINgeEQT G9prU932oPgpzdkpIXQjCJBx5imF9SUTy+sUnlvbWCvgXNH+8c1YWpRuGNhegdMf At3XxL1pbrg4wBNLF9RX0i+iQDhQExsO50vTRpGS9iLSZ9R+RueQyT43ms36hj0j 3BIQYqw/Uwt2e/65bBsj1HCR4sQ6vriLyoJ/x5GwlqLI2LMjtwwqX0e6JFNk22Yk aVvttLZ8oxSN1ijcvfJwmv9ki1sxKxCy2PJ7KcTVD/wY5dzGPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBL3JsYbF08o+auzmo7fkoGMNcdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvODlhMmEwOWQtMDdhYS0z NGQ0LTgwZDYtYzQ0YTRlZGU4MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2OtQAwQA 2OtbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHH1Wyvd6zDaZP1qac7T5xsXR/OA1RqCIBuSXdWLpXA6JTCB byrUVn68fT45TB0KTvLnVr97LtEhegRNqZJKty/CQgUdLlzuQxbtCGEOu27I/L4V WezyHUKlJygb3xcNMKRsASP+6sxEH64rHvxUrUiOFmBpvIZ4V2uDfBQxG7jEitKU f4E8XkiOfKP/0Ff84r4eBbhpAiCNzeKFCEMV9dvAuJ9rkh7Slj6KCSGho+LrMBH8 8D0MYpGkOECmS4S2CmDK1Hd8ffK8X1pYjvGD0zz8+sPi+Jwzyetr457wYXCCfnwp Qguu4tlnIQTnm+na4xB/aOgpM6ay/Z5hmJw9C1k= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:07 2024 by rpki-client on console-ams.rpki-client.org