$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa File: a07b204f-edf4-348e-a1c8-032675f4fe15.roa (raw, json) Hash identifier: 8xaBXkoAJ7jhIy7tt1yJgI54BnhWrbJW55K30Z9kVm4= Subject key identifier: 55:8F:BF:CA:97:5C:E0:EE:27:BC:E3:B4:60:CF:80:2D:20:5D:D9:58 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F432858474585FD2BFE71B1FCF9CBD230 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa Signing time: Fri 20 Sep 2024 01:00:31 +0000 ROA not before: Fri 20 Sep 2024 01:00:31 +0000 ROA not after: Thu 19 Dec 2024 02:00:31 +0000 asID: 16696 IP address blocks: 216.247.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:85:fd:2b:fe:71:b1:fc:f9:cb:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Sep 20 01:00:31 2024 GMT Not After : Dec 19 02:00:31 2024 GMT Subject: CN=03d9835c-2ced-4dad-9942-4782d7fec4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:04:62:1c:6c:e3:c8:2f:36:d7:67:75:44: dd:d3:96:fc:6a:3d:f4:53:61:68:64:98:41:0c:d8: d5:59:fb:d6:b9:96:6f:57:8d:84:13:3c:c5:8c:ed: 37:29:05:f2:43:56:4c:ab:10:a6:9e:7a:dd:0d:c9: 18:33:27:ac:a3:ed:fc:67:b0:00:66:88:c7:6d:e5: 44:ea:eb:78:e0:f7:34:1f:8a:6d:70:2e:fa:04:48: a2:a1:0c:0b:e4:46:6c:ea:f3:ee:ec:12:27:65:8e: f6:e3:59:b4:c6:01:54:d2:1e:0a:5b:a1:f3:42:d0: b0:ae:69:9e:83:a0:55:0a:94:e4:b6:f3:3a:c6:dd: 7c:a5:6f:69:71:e8:69:69:3f:75:ca:64:b6:3b:32: d7:cb:fc:3e:60:34:e9:d6:01:21:71:51:80:3a:3a: 6a:eb:3a:01:4b:b1:d9:fd:6e:82:c7:7b:05:21:5e: 95:6c:64:92:02:27:d9:ba:f6:22:02:19:3f:30:5c: 5a:98:5f:99:1f:9f:76:a5:58:fd:03:d3:9f:43:f7: 4e:73:d4:b9:2c:3b:2d:c7:84:9e:ae:ec:45:bb:e2: 34:c6:4a:37:a5:21:8c:13:9a:5c:a3:16:de:9c:30: 3e:32:4f:54:bb:ab:fe:47:5b:34:a6:6f:6b:e0:83: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8F:BF:CA:97:5C:E0:EE:27:BC:E3:B4:60:CF:80:2D:20:5D:D9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/a07b204f-edf4-348e-a1c8-032675f4fe15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.247.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:76:0c:85:98:15:0f:b7:3a:ef:d6:85:61:29:4c:20:a3:cf: 2b:90:ca:08:86:5b:69:bf:29:ce:f0:ba:67:fe:28:15:0e:db: 3f:1b:c4:03:a0:d3:97:c1:e0:a6:f1:27:26:02:b4:55:e2:4a: 9e:2e:f6:cb:ec:e7:22:71:ff:3a:38:48:13:28:d5:2b:9e:27: 86:6e:58:d8:b3:e0:73:63:89:9f:74:56:5b:b8:e9:44:71:50: d5:54:6f:dc:3b:8d:0e:79:28:77:a0:07:b1:ea:9a:d4:0a:c9: 61:17:6c:2f:d2:3c:df:81:52:54:0d:dd:71:1f:7a:74:70:19: 0d:f8:45:72:8a:d1:a6:17:96:74:bc:52:53:15:8e:e8:d1:81: f7:ee:02:ee:e0:8a:74:24:fd:39:e5:cd:8f:df:33:c3:5f:1a: a0:0d:7a:41:64:b0:6e:04:35:9d:0c:41:de:a0:99:62:db:7e: d8:02:69:e6:9d:06:40:64:8f:90:de:77:73:b1:fd:f2:f6:bf: 87:6e:d0:a6:8c:bc:2a:48:81:5c:8d:a9:f8:13:0a:1f:9a:ca: a3:7c:67:b7:5b:45:90:57:8e:58:13:e2:15:4e:fc:ce:b4:2f: c7:7d:24:44:d7:d6:06:48:3e:69:9d:7c:f2:97:b5:5e:f5:73: a3:df:19:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhf0r/nGx/PnL0jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk MDNkOTgzNWMtMmNlZC00ZGFkLTk5NDItNDc4MmQ3ZmVjNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQEEYhxs48gvNtdndUTd05b8aj30U2FoZJhB DNjVWfvWuZZvV42EEzzFjO03KQXyQ1ZMqxCmnnrdDckYMyeso+38Z7AAZojHbeVE 6ut44Pc0H4ptcC76BEiioQwL5EZs6vPu7BInZY7241m0xgFU0h4KW6HzQtCwrmme g6BVCpTktvM6xt18pW9pcehpaT91ymS2OzLXy/w+YDTp1gEhcVGAOjpq6zoBS7HZ /W6Cx3sFIV6VbGSSAifZuvYiAhk/MFxamF+ZH592pVj9A9OfQ/dOc9S5LDstx4Se ruxFu+I0xko3pSGME5pcoxbenDA+Mk9Uu6v+R1s0pm9r4IMIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWPv8qXXODuJ7zjtGDPgC0gXdlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYTA3YjIwNGYtZWRmNC0z NDhlLWExYzgtMDMyNjc1ZjRmZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Pf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh2DIWYFQ+3Ou/WhWEpTCCjzyuQygiGW2m/Kc7wumf+KBUO2z8bxAOg 05fB4KbxJyYCtFXiSp4u9svs5yJx/zo4SBMo1SueJ4ZuWNiz4HNjiZ90Vlu46URx UNVUb9w7jQ55KHegB7HqmtQKyWEXbC/SPN+BUlQN3XEfenRwGQ34RXKK0aYXlnS8 UlMVjujRgffuAu7ginQk/TnlzY/fM8NfGqANekFksG4ENZ0MQd6gmWLbftgCaead BkBkj5Ded3Ox/fL2v4du0KaMvCpIgVyNqfgTCh+ayqN8Z7dbRZBXjlgT4hVO/M60 L8d9JETX1gZIPmmdfPKXtV71c6PfGRI= -----END CERTIFICATE-----Generated at Sun Nov 24 18:28:34 2024 by rpki-client on console-ams.rpki-client.org