$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json) Hash identifier: 0YXQaLYclRw8+5hfKZuQoyp8BM9kbxZ5nDB5teSvdC0= Subject key identifier: 23:07:24:12:F8:97:AE:22:C6:8C:08:94:C2:D6:BE:9B:2C:49:7A:88 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F432858473D25FE61EC11AEEA523282D0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 16696 IP address blocks: 161.38.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:fe:61:ec:11:ae:ea:52:32:82:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=8b3e43ed-efe1-478f-b735-9a5f7c4cbbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:82:31:e8:57:d2:40:19:c6:d6:09:a5:ad: 01:cc:7c:c6:25:1d:91:10:e9:a8:01:9a:ce:72:07: 87:37:d8:f7:62:77:eb:18:19:65:d7:dc:df:41:18: d0:ce:83:43:8b:f6:c9:35:b1:8c:e7:d4:9a:be:81: a6:49:2b:66:70:6a:91:74:88:b3:13:ff:7d:d0:d9: 55:b5:75:47:b7:83:cf:e1:30:e7:6d:9d:34:dc:f6: 7a:12:93:0b:a9:92:77:31:f4:95:4f:ac:fa:af:d7: 2c:10:ca:8e:41:54:97:05:4f:f9:af:a6:6f:9f:97: cb:9d:29:08:2e:a0:20:30:cb:a1:12:b2:ed:81:b1: 43:f1:22:30:14:2f:22:d0:4d:86:3c:47:d0:63:f5: 02:e7:95:8e:b5:b1:53:30:a3:f4:60:64:c1:3e:71: 38:d1:91:0f:6e:ae:f2:d6:2c:71:9f:ac:c4:61:39: 96:d6:bf:64:1f:2d:0e:90:22:ec:cb:3e:b0:8e:35: a2:a0:e0:61:31:f5:98:53:aa:c1:f9:41:27:dd:26: 14:08:c9:59:23:80:31:cd:3b:60:ba:0e:6f:ec:02: d9:49:66:71:ed:fe:1c:16:79:c6:67:56:3f:03:d1: 99:89:6f:7a:29:8c:4e:03:33:b2:df:f1:6c:20:8a: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:24:12:F8:97:AE:22:C6:8C:08:94:C2:D6:BE:9B:2C:49:7A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:97:e4:a7:08:c0:b7:a1:60:70:8c:1e:49:f8:dd:dc:59:b7: 34:78:a7:ab:aa:a6:0b:f2:d5:d6:79:3b:b7:31:01:66:8e:ec: 2b:62:c5:43:ed:e9:c9:02:0b:90:60:42:06:69:0e:02:48:fe: a2:9f:00:5a:93:55:97:a2:4c:33:c9:fe:d8:5d:c9:ce:8e:0f: 9d:df:4c:29:da:de:fc:37:3a:3b:82:05:a2:ba:b5:ca:d4:c8: 00:ee:3f:0d:04:54:79:39:15:31:8e:ad:91:29:07:f9:f5:54: 11:38:9c:a9:6b:dc:29:14:02:2b:30:04:60:e8:ac:48:ba:0c: f5:ca:b3:93:6e:20:73:8c:a9:9a:0d:5b:e1:93:3e:9d:6d:5e: 15:a4:41:71:bc:5f:6c:1a:d3:03:4e:da:a2:f0:bf:b9:ab:d4: 8f:57:76:f9:7e:03:14:66:31:03:2d:df:cf:37:b4:fe:ad:57: f6:70:36:d6:10:da:ea:da:9a:f8:28:b0:f7:e2:48:75:c8:18: d9:e2:84:b9:f7:48:bd:e1:37:7d:fe:e9:1d:1c:78:b5:07:96: 38:ca:62:bc:9a:f5:39:f6:1d:d0:94:91:c7:b4:a2:9e:0c:f7: e8:17:68:e1:7d:f0:0c:64:5f:3c:14:0d:86:f1:e5:c0:cd:8f: ac:8a:b6:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9Jf5h7BGu6lIygtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk OGIzZTQzZWQtZWZlMS00NzhmLWI3MzUtOWE1ZjdjNGNiYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/+CMehX0kAZxtYJpa0BzHzGJR2REOmoAZrO cgeHN9j3YnfrGBll19zfQRjQzoNDi/bJNbGM59SavoGmSStmcGqRdIizE/990NlV tXVHt4PP4TDnbZ003PZ6EpMLqZJ3MfSVT6z6r9csEMqOQVSXBU/5r6Zvn5fLnSkI LqAgMMuhErLtgbFD8SIwFC8i0E2GPEfQY/UC55WOtbFTMKP0YGTBPnE40ZEPbq7y 1ixxn6zEYTmW1r9kHy0OkCLsyz6wjjWioOBhMfWYU6rB+UEn3SYUCMlZI4AxzTtg ug5v7ALZSWZx7f4cFnnGZ1Y/A9GZiW96KYxOAzOy3/FsIIo56wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMHJBL4l64ixowIlMLWvpssSXqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MWY4ZDItNmRhMC0z MjkwLWI4NjQtYzZkNmU2MzQ0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWX5KcIwLehYHCMHkn43dxZtzR4p6uqpgvy1dZ5O7cxAWaO7CtixUPt 6ckCC5BgQgZpDgJI/qKfAFqTVZeiTDPJ/thdyc6OD53fTCna3vw3OjuCBaK6tcrU yADuPw0EVHk5FTGOrZEpB/n1VBE4nKlr3CkUAiswBGDorEi6DPXKs5NuIHOMqZoN W+GTPp1tXhWkQXG8X2wa0wNO2qLwv7mr1I9Xdvl+AxRmMQMt3883tP6tV/ZwNtYQ 2uramvgosPfiSHXIGNnihLn3SL3hN33+6R0ceLUHljjKYrya9Tn2HdCUkce0op4M 9+gXaOF98AxkXzwUDYbx5cDNj6yKtvs= -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:30 2024 by rpki-client on console-ams.rpki-client.org