$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa File: de50b0d4-4323-3366-a872-b7f78b1a7210.roa (raw, json) Hash identifier: ldOHCqdG6IMfVITK0QRjqABjh1pEAxn8J84sJTlClSs= Subject key identifier: D8:92:A7:7D:97:F4:46:5D:14:FC:4B:E1:29:CA:19:5E:04:E4:A0:D4 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F43285847B696BE33A11287708420B000 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 397976 IP address blocks: 206.82.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:be:33:a1:12:87:70:84:20:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=49449d5b-6dac-42d6-b033-bbf4fa65e5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:c9:84:17:49:c6:76:33:56:f9:87:f1:83: 17:f3:9d:aa:0c:f4:23:e2:46:15:27:5e:6b:95:e3: f8:34:f5:6a:e0:ae:0c:b2:e7:1e:0b:f6:1c:ba:24: ef:6f:ec:1b:6a:e5:e1:77:6d:2f:21:42:67:3e:53: 82:f1:7c:e4:18:ae:63:af:ea:9b:f3:f1:59:be:6e: 4b:74:5a:49:3d:89:04:14:37:9e:ce:f5:a4:1f:1a: 93:53:e2:f7:60:82:c3:01:14:11:e7:e8:20:4d:61: 91:ad:6c:27:30:e3:91:5c:59:26:93:77:b1:ae:f2: 53:a8:19:eb:d3:92:c9:b9:33:6f:4f:2f:da:82:2d: 42:5c:26:eb:2c:3c:9f:ac:aa:25:a5:af:2e:d9:ee: 2b:0d:d3:9c:1a:b0:bc:c5:d7:b7:e4:2e:d9:bc:88: f6:3f:d9:fe:19:39:b3:21:7c:16:93:d5:ed:fe:b3: 49:c2:52:ee:96:be:50:1a:0c:08:3d:13:d4:5d:bb: e8:df:54:c5:e2:22:fe:6d:5e:54:dc:df:f4:7b:1d: b2:b4:68:9b:09:fe:a4:3c:ac:43:b1:6d:35:45:f5: c3:c0:31:aa:56:e0:d2:3c:44:3a:0c:4a:9b:ca:c3: de:79:35:4d:3a:0d:cf:26:a3:28:b8:be:a3:91:aa: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:92:A7:7D:97:F4:46:5D:14:FC:4B:E1:29:CA:19:5E:04:E4:A0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 206.82.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f9:ac:d7:7a:29:93:4b:a2:e5:7d:7f:3d:22:90:3e:76:40: 45:28:2f:ed:f5:77:9c:70:53:91:9f:48:1b:4a:41:bd:20:df: 82:52:97:c4:f3:98:24:00:71:d4:60:2b:1f:8d:f0:ae:87:12: 4a:01:e1:25:46:a6:5f:5c:e7:5d:a3:05:01:b5:3d:93:09:5f: 56:7c:29:2f:ca:9c:71:a6:86:39:e3:de:e8:7b:1f:1b:38:9c: 1a:cb:43:e9:10:5a:6c:a0:97:ed:5a:cc:47:a4:92:e2:59:c1: 5b:7d:3c:bd:4b:9e:da:3d:24:a0:31:a5:16:b6:83:ac:61:8f: 12:ae:09:4f:e5:2e:d4:6c:44:fa:b4:bb:21:09:c1:bf:e2:87: d1:ed:9f:a8:da:a4:ef:53:7a:2a:c3:d0:44:d3:32:91:28:b3: 49:f5:1a:f3:b6:4c:5d:97:63:0b:34:74:80:20:1b:3d:4a:27: a0:c3:7d:b5:0e:97:a1:2a:30:67:f4:bb:67:72:af:09:02:03: 98:5e:8a:2a:6f:20:1e:76:c8:06:86:79:f8:2d:80:16:ca:f1: 6a:ae:96:54:57:16:ee:48:cc:bd:6c:d4:88:cc:8a:4e:ae:08: d7:86:70:c8:cc:12:c4:b9:75:d5:50:e6:f2:21:83:61:13:2b: f7:ee:c9:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lr4zoRKHcIQgsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk NDk0NDlkNWItNmRhYy00MmQ2LWIwMzMtYmJmNGZhNjVlNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXfJhBdJxnYzVvmH8YMX852qDPQj4kYVJ15r leP4NPVq4K4MsuceC/YcuiTvb+wbauXhd20vIUJnPlOC8XzkGK5jr+qb8/FZvm5L dFpJPYkEFDeezvWkHxqTU+L3YILDARQR5+ggTWGRrWwnMOORXFkmk3exrvJTqBnr 05LJuTNvTy/agi1CXCbrLDyfrKolpa8u2e4rDdOcGrC8xde35C7ZvIj2P9n+GTmz IXwWk9Xt/rNJwlLulr5QGgwIPRPUXbvo31TF4iL+bV5U3N/0ex2ytGibCf6kPKxD sW01RfXDwDGqVuDSPEQ6DEqbysPeeTVNOg3PJqMouL6jkar7VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiSp32X9EZdFPxL4SnKGV4E5KDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZGU1MGIwZDQtNDMyMy0z MzY2LWE4NzItYjdmNzhiMWE3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzlJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb5rNd6KZNLouV9fz0ikD52QEUoL+31d5xwU5GfSBtKQb0g34JSl8Tz mCQAcdRgKx+N8K6HEkoB4SVGpl9c512jBQG1PZMJX1Z8KS/KnHGmhjnj3uh7Hxs4 nBrLQ+kQWmygl+1azEekkuJZwVt9PL1Lnto9JKAxpRa2g6xhjxKuCU/lLtRsRPq0 uyEJwb/ih9Htn6japO9TeirD0ETTMpEos0n1GvO2TF2XYws0dIAgGz1KJ6DDfbUO l6EqMGf0u2dyrwkCA5heiipvIB52yAaGefgtgBbK8WqullRXFu5IzL1s1IjMik6u CNeGcMjMEsS5ddVQ5vIhg2ETK/fuySE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:18 2024 by rpki-client on console-ams.rpki-client.org