$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json) Hash identifier: lXqoceawCShHPw1gC0RReXTBQ5roIS3lEt0qMv7R74w= Subject key identifier: 79:02:DD:E5:57:A0:02:81:49:CC:C0:8B:6B:B6:41:A0:42:4E:C1:E5 Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F43285847A8A14EED82095E0B80DE3E80 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 393909 IP address blocks: 172.86.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:4e:ed:82:09:5e:0b:80:de:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=4eb23873-fbb9-4fc2-a8a8-86009b614061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0e:9f:3c:39:0c:45:33:3e:05:d1:0c:16:2b: 32:7b:d0:92:2a:cc:1d:d1:8f:bd:69:b5:70:4d:67: a6:10:fc:33:05:c7:ec:da:c6:af:65:27:68:68:10: 92:89:21:9c:4b:a8:65:09:85:90:b5:17:bf:0b:1c: 01:d4:f7:e3:f7:29:93:71:ba:07:80:eb:d7:7c:12: de:cb:7e:d5:a4:52:8d:b6:94:6f:9f:e8:4c:16:bf: a9:c0:51:79:04:b8:f6:bf:f8:d9:e6:9c:66:6e:b7: 73:37:04:2f:ca:aa:71:9e:03:32:73:e8:f1:52:67: a1:12:92:4c:24:7a:42:c8:ee:53:36:28:d7:d5:2f: e4:52:79:1a:f4:b4:11:7b:f7:1a:df:44:b8:bc:db: 5e:3e:66:c3:ac:0b:14:42:33:be:78:48:82:f9:02: 33:e2:00:4b:e6:6d:7b:f6:f0:fd:15:c5:98:c1:ae: 4a:b4:b2:4c:b3:d4:10:4e:02:12:c5:f9:ba:ab:c6: 35:f8:9d:92:34:66:9d:53:ae:97:84:99:50:8d:04: 6a:93:01:2f:65:6a:b1:0b:2f:1f:c7:02:25:f5:01: 87:37:2f:6b:f1:90:b5:1f:d1:00:bb:3d:f7:07:51: bc:9c:33:c5:73:39:ab:c9:55:b5:4a:ce:ff:83:b7: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:02:DD:E5:57:A0:02:81:49:CC:C0:8B:6B:B6:41:A0:42:4E:C1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 172.86.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:4d:54:85:13:bd:74:98:11:f9:a0:89:d3:17:21:19:ce:a9: 97:e1:55:5b:a8:f0:7f:f3:8c:6a:f4:76:67:67:b1:81:c5:c1: 51:9b:2a:24:22:b7:7c:80:0c:23:65:cf:32:45:f8:dd:46:97: 86:0f:66:25:e4:a8:0e:0a:76:d3:8a:b4:32:6a:14:a7:83:55: 9e:e9:a7:04:38:ac:0a:f4:e1:ec:7b:cc:f8:db:82:65:d9:e6: 41:bb:77:14:cc:bd:f5:e6:e2:b7:6f:05:51:02:b3:c3:15:36: e1:f9:16:54:19:d0:d7:aa:8e:0c:57:7c:c4:8b:6d:aa:f8:27: e1:08:18:89:5a:9e:17:fd:69:3d:9f:98:e1:95:af:e8:c6:f0: da:6f:b4:46:9d:f9:ce:44:2c:05:39:da:ac:59:25:c1:3c:33: 95:9d:3e:71:49:1f:1f:83:67:51:4f:30:f9:30:58:33:9c:5c: 27:1e:82:68:5c:62:15:fe:6c:ec:bf:28:78:d3:d7:0d:2e:8b: b3:59:89:94:02:24:48:ea:a2:00:2b:cc:3d:60:0e:8b:3d:d5: d4:ac:d1:90:d5:f1:e9:d3:29:15:68:a7:f7:bd:24:d0:13:47: bf:e8:d1:b4:f0:ea:02:82:49:65:49:30:18:f9:74:4f:f0:f8: cf:dc:55:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooU7tggleC4DePoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk NGViMjM4NzMtZmJiOS00ZmMyLWE4YTgtODYwMDliNjE0MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A6fPDkMRTM+BdEMFisye9CSKswd0Y+9abVw TWemEPwzBcfs2savZSdoaBCSiSGcS6hlCYWQtRe/CxwB1Pfj9ymTcboHgOvXfBLe y37VpFKNtpRvn+hMFr+pwFF5BLj2v/jZ5pxmbrdzNwQvyqpxngMyc+jxUmehEpJM JHpCyO5TNijX1S/kUnka9LQRe/ca30S4vNtePmbDrAsUQjO+eEiC+QIz4gBL5m17 9vD9FcWYwa5KtLJMs9QQTgISxfm6q8Y1+J2SNGadU66XhJlQjQRqkwEvZWqxCy8f xwIl9QGHNy9r8ZC1H9EAuz33B1G8nDPFczmryVW1Ss7/g7fHmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkC3eVXoAKBSczAi2u2QaBCTsHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvZmY1NDk5YmYtODI4MC0z ODZkLWE1NWEtYzQ5NDE4MWJlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVNVIUTvXSYEfmgidMXIRnOqZfhVVuo8H/zjGr0dmdnsYHFwVGbKiQi t3yADCNlzzJF+N1Gl4YPZiXkqA4KdtOKtDJqFKeDVZ7ppwQ4rAr04ex7zPjbgmXZ 5kG7dxTMvfXm4rdvBVECs8MVNuH5FlQZ0NeqjgxXfMSLbar4J+EIGIlanhf9aT2f mOGVr+jG8NpvtEad+c5ELAU52qxZJcE8M5WdPnFJHx+DZ1FPMPkwWDOcXCcegmhc YhX+bOy/KHjT1w0ui7NZiZQCJEjqogArzD1gDos91dSs0ZDV8enTKRVop/e9JNAT R7/o0bTw6gKCSWVJMBj5dE/w+M/cVd0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:17 2024 by rpki-client on console-ams.rpki-client.org