$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa File: 2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa (raw, json) Hash identifier: WzYQRxjn+b9vX4tBJwlfXyI1QATVVdJEo/MerGLfQtw= Subject key identifier: 7E:FE:14:EE:70:5A:D8:0E:21:14:00:87:10:5C:47:5F:E6:C8:A0:07 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F43285847B7FBFD3B61CD626ED2843D40 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa Signing time: Thu 31 Oct 2024 01:00:31 +0000 ROA not before: Thu 31 Oct 2024 01:00:31 +0000 ROA not after: Wed 29 Jan 2025 02:00:31 +0000 asID: 13768 IP address blocks: 216.152.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b7:fb:fd:3b:61:cd:62:6e:d2:84:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Oct 31 01:00:31 2024 GMT Not After : Jan 29 02:00:31 2025 GMT Subject: CN=33e2b7dc-5823-4725-9bd6-76c9b7fe7cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:ae:2a:d6:46:93:b2:07:d2:97:cc:fa:43: a4:e5:ff:a8:f4:63:51:d7:7c:ae:f2:f3:67:48:0f: 7d:29:64:3b:42:36:f5:47:c4:d7:50:f5:4a:b8:1f: d6:fb:36:4d:05:5b:dd:ed:92:75:78:bf:94:51:92: ef:0a:0b:f8:5b:20:71:cf:5c:80:48:d6:96:5b:de: 38:39:ce:16:73:31:40:4c:68:53:97:94:88:99:d2: 40:56:5f:86:a8:d6:ca:a5:c1:d3:7d:09:ed:2d:f0: 99:22:97:90:a8:15:98:61:b6:a6:30:a4:12:ff:a2: 5a:5e:28:59:4a:40:10:89:bd:95:7a:b7:a8:21:8b: 43:4c:97:6a:40:ba:dc:31:59:e5:72:2a:14:29:00: 1a:ec:38:8f:08:9c:ed:fb:44:f1:4e:1b:97:13:55: ad:6e:19:f1:4e:e1:88:6f:f6:56:71:46:31:9c:5d: 6a:a7:01:fa:55:b7:42:6a:d0:fc:01:e1:6f:07:8c: 04:b5:49:0b:66:52:d2:ad:bd:3c:7f:ca:3c:1c:2a: ca:ac:17:06:20:a5:3e:48:4e:74:b0:7c:1a:2f:20: 63:f7:fe:bc:7e:6e:7e:48:fa:d1:04:c3:d0:88:05: b2:36:58:79:57:66:35:12:77:65:cb:62:0b:9b:8f: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FE:14:EE:70:5A:D8:0E:21:14:00:87:10:5C:47:5F:E6:C8:A0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/2d9cf95f-92db-3d3a-8a04-c23e915bb1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 216.152.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:9b:02:74:79:6c:3d:b3:ae:2b:f8:b5:c9:d8:58:58:e0:45: 28:3f:0a:ee:a3:3a:fb:1d:f0:8c:48:7b:07:4e:1a:2a:50:27: 9b:24:18:96:a5:b7:e9:cd:51:99:81:3c:e2:57:27:7a:ee:7e: 59:c8:83:fd:ac:6f:11:a4:0a:c8:5e:bd:6b:de:5a:35:c9:f2: 5c:72:69:c2:12:0a:51:b8:9f:39:ca:93:b5:66:82:17:30:51: 90:2a:7b:5b:7a:6a:78:4d:1d:51:a4:b7:89:3c:67:03:b3:06: 14:0d:be:4b:64:3a:f0:2a:2a:03:a7:b6:ac:6b:9b:33:d3:b2: aa:b3:7c:ec:0a:85:1c:9d:bb:3d:fc:9b:d8:50:f2:6a:f6:81: 01:0a:c4:e3:02:8f:ba:3c:84:cd:56:38:ac:aa:f9:90:f1:49: ae:04:98:7e:55:fc:21:1b:eb:f8:52:c6:11:b6:4d:76:53:a3: 44:2b:e9:1e:a4:3e:a1:93:7b:77:e1:2e:94:c0:a4:b9:b4:f9: 5c:73:f4:b7:74:db:98:f5:d0:86:2a:1c:bb:72:82:1d:cb:a4: 39:b8:8f:57:26:80:c4:28:10:d9:6f:95:5b:52:da:1a:b8:e6: 26:5a:88:92:26:fe:da:22:28:bf:dd:02:fa:9a:a3:95:a6:f7: e5:83:91:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe3+/07Yc1ibtKEPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI0MTAzMTAxMDAzMVoXDTI1MDEyOTAyMDAzMVowLzEtMCsGA1UEAxMk MzNlMmI3ZGMtNTgyMy00NzI1LTliZDYtNzZjOWI3ZmU3Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMmuKtZGk7IH0pfM+kOk5f+o9GNR13yu8vNn SA99KWQ7Qjb1R8TXUPVKuB/W+zZNBVvd7ZJ1eL+UUZLvCgv4WyBxz1yASNaWW944 Oc4WczFATGhTl5SImdJAVl+GqNbKpcHTfQntLfCZIpeQqBWYYbamMKQS/6JaXihZ SkAQib2VereoIYtDTJdqQLrcMVnlcioUKQAa7DiPCJzt+0TxThuXE1WtbhnxTuGI b/ZWcUYxnF1qpwH6VbdCatD8AeFvB4wEtUkLZlLSrb08f8o8HCrKrBcGIKU+SE50 sHwaLyBj9/68fm5+SPrRBMPQiAWyNlh5V2Y1Endly2ILm48eZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7+FO5wWtgOIRQAhxBcR1/myKAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMmQ5Y2Y5NWYtOTJkYi0z ZDNhLThhMDQtYzIzZTkxNWJiMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJObAnR5bD2zriv4tcnYWFjgRSg/Cu6jOvsd8IxIewdOGipQJ5skGJal t+nNUZmBPOJXJ3ruflnIg/2sbxGkCshevWveWjXJ8lxyacISClG4nznKk7Vmghcw UZAqe1t6anhNHVGkt4k8ZwOzBhQNvktkOvAqKgOntqxrmzPTsqqzfOwKhRyduz38 m9hQ8mr2gQEKxOMCj7o8hM1WOKyq+ZDxSa4EmH5V/CEb6/hSxhG2TXZTo0Qr6R6k PqGTe3fhLpTApLm0+Vxz9Ld025j10IYqHLtygh3LpDm4j1cmgMQoENlvlVtS2hq4 5iZaiJIm/toiKL/dAvqao5Wm9+WDkbI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:29 2024 by rpki-client on console-ams.rpki-client.org