$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa File: b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa (raw, json) Hash identifier: ejZX8kJ1CKMlP5gYuaicms9DIR0Jp3YXtgqz4xi6X0g= Subject key identifier: CC:B2:98:60:E4:40:8A:EB:F7:A5:3F:ED:50:C7:39:B2:9F:5A:53:C9 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584774FBA0F87CDC0B1F5D336400 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 396905 IP address blocks: 216.226.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:a0:f8:7c:dc:0b:1f:5d:33:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=4c8cc528-00f9-4a5a-a9f4-6cb289f832c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:6a:57:23:34:90:52:46:a3:95:ca:bb:8b: c5:2d:68:af:11:97:5d:ae:3b:db:b0:32:84:f8:2e: 90:8c:6f:4c:2e:6a:1a:91:e6:36:b9:6a:53:4c:38: f2:65:a8:80:4c:a2:4d:d8:a5:58:38:67:25:8b:78: 7b:39:8d:50:67:24:10:ba:e8:95:4c:e2:ea:8a:ee: cd:30:ab:50:e9:a8:28:8d:6a:2c:4a:aa:2b:9f:f2: ce:ff:aa:49:4d:02:86:64:32:bb:81:9c:20:d4:57: d8:fd:67:52:0d:d9:55:d8:b7:d4:b7:20:bc:a3:0b: 15:23:93:19:f2:8d:7c:e2:7f:fa:e4:48:a8:66:07: 48:a0:64:87:e3:7b:d7:a6:2b:57:86:80:f5:d3:3d: 36:4e:7e:22:10:fa:f6:9b:01:5e:0a:17:91:4a:86: 77:14:b4:c9:7d:c5:cb:94:61:bd:36:43:a5:fa:5d: 76:67:de:01:21:fb:e1:b5:8b:07:d1:70:cd:7c:ce: 3f:42:d0:1e:c7:f3:08:e7:da:51:93:3f:a2:f7:f5: 72:41:64:49:e2:b5:ef:ea:c2:82:99:b4:6f:73:0e: 1b:68:25:de:88:56:63:d1:ce:c7:ed:dc:1c:45:cc: 45:f5:af:f3:fd:c7:ca:90:fd:e4:88:f4:72:d6:c6: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B2:98:60:E4:40:8A:EB:F7:A5:3F:ED:50:C7:39:B2:9F:5A:53:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 216.226.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:a0:95:67:9d:3b:0d:d8:8a:5a:fb:66:17:2a:94:0f:3d:d3: 22:9f:ee:f2:ad:7a:87:02:43:96:c5:cc:4a:4e:60:62:25:1f: fd:08:af:57:9a:8f:75:18:f2:c8:f5:d7:3c:e3:c0:58:19:a7: 7a:14:5b:2b:5f:9e:f0:3a:d7:29:4b:e5:77:63:f2:ff:46:e8: 65:8e:d0:03:2c:77:b3:f3:b7:df:1f:f2:1e:47:de:41:2d:c5: 52:7b:f3:23:01:f1:90:56:cc:d9:1f:e7:ad:97:ed:c0:45:ad: f7:99:be:97:40:ee:ee:05:b2:82:37:50:af:92:f5:44:bc:8e: 49:2d:15:9d:4a:9e:f0:af:ed:8b:b1:30:0f:fc:49:10:61:bc: b5:65:3a:8a:b7:65:68:08:2f:b4:a2:40:53:b2:41:7d:29:07: 00:72:d1:e6:5e:50:28:cf:e0:5b:8a:90:70:33:a5:48:a1:bf: 0d:e8:7d:f8:ff:78:ff:9d:45:75:11:ff:e1:9a:cb:4a:8d:e7: 33:6f:30:21:21:ef:65:75:04:c1:eb:ee:b5:a7:63:27:41:4b: e8:b0:9a:46:6a:69:4b:87:09:a2:38:65:ab:3d:fb:4c:96:35: 9d:a9:90:0d:8c:e1:9f:79:34:c9:d8:75:fd:23:fa:b2:b1:f4: 7f:d9:8f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6D4fNwLH10zZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk NGM4Y2M1MjgtMDBmOS00YTVhLWE5ZjQtNmNiMjg5ZjgzMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nJqVyM0kFJGo5XKu4vFLWivEZddrjvbsDKE +C6QjG9MLmoakeY2uWpTTDjyZaiATKJN2KVYOGcli3h7OY1QZyQQuuiVTOLqiu7N MKtQ6agojWosSqorn/LO/6pJTQKGZDK7gZwg1FfY/WdSDdlV2LfUtyC8owsVI5MZ 8o184n/65EioZgdIoGSH43vXpitXhoD10z02Tn4iEPr2mwFeCheRSoZ3FLTJfcXL lGG9NkOl+l12Z94BIfvhtYsH0XDNfM4/QtAex/MI59pRkz+i9/VyQWRJ4rXv6sKC mbRvcw4baCXeiFZj0c7H7dwcRcxF9a/z/cfKkP3kiPRy1saw/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyymGDkQIrr96U/7VDHObKfWlPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvYjMzZjhiM2MtNWQxNC0z NjM0LThmZjktMWZkYmI2MDY3MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANaglWedOw3Yilr7ZhcqlA890yKf7vKteocCQ5bFzEpOYGIlH/0Ir1ea j3UY8sj11zzjwFgZp3oUWytfnvA61ylL5Xdj8v9G6GWO0AMsd7Pzt98f8h5H3kEt xVJ78yMB8ZBWzNkf562X7cBFrfeZvpdA7u4FsoI3UK+S9US8jkktFZ1KnvCv7Yux MA/8SRBhvLVlOoq3ZWgIL7SiQFOyQX0pBwBy0eZeUCjP4FuKkHAzpUihvw3offj/ eP+dRXUR/+Gay0qN5zNvMCEh72V1BMHr7rWnYydBS+iwmkZqaUuHCaI4Zas9+0yW NZ2pkA2M4Z95NMnYdf0j+rKx9H/Zj9s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:47 2024 by rpki-client on console-fra.rpki-client.org