$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa File: e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa (raw, json) Hash identifier: eeJNvn7B+TpK+NwPzlurAk4gNSAi8nKtNwIVeYf7j8c= Subject key identifier: 58:8F:E9:76:B6:C5:21:9C:FE:6D:BF:56:5D:B8:81:90:AA:1F:A6:78 Certificate issuer: /CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Certificate serial: 010D0C9F43285847D6CF4BBF4BD7A1E9A058AD00 Authority key identifier: 98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 25222 IP address blocks: 216.129.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:4b:bf:4b:d7:a1:e9:a0:58:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=a9656f74-fd80-4af9-b06c-d5689c6ebd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:89:99:2f:44:19:28:4f:8c:c1:bf:80:b3: f1:f5:75:45:56:c9:2a:d1:d5:92:32:bf:30:ed:77: f0:9e:c0:a6:58:bf:63:f2:7d:41:50:d1:eb:68:15: 92:f2:ce:94:a5:7d:1e:17:9c:84:12:2f:5b:16:d3: 57:6e:94:65:d9:64:74:4a:41:57:d5:d9:d8:c1:b0: 2d:0c:35:98:32:08:8a:d3:bb:3c:66:5d:d2:38:e0: fa:da:d8:c5:6d:32:f8:f2:5c:c1:a5:71:fb:1e:82: b6:18:bc:5a:85:8c:a6:31:e5:9c:e4:9d:3e:f4:c6: 5b:71:ad:e9:f4:9d:72:41:50:53:50:45:5d:80:cb: 35:91:9b:d2:fc:78:d9:19:bb:60:a6:31:68:7c:f2: 2a:e5:d1:58:7c:8b:26:97:96:dd:0f:41:a5:4b:44: c7:a1:a1:ed:e0:90:f3:83:4c:94:24:2a:38:f0:59: 36:f1:e3:1e:09:d4:bb:c7:29:84:fd:05:c1:fb:1f: 5c:a8:de:45:f4:86:fe:28:e8:0b:83:9b:44:e7:fd: 6a:92:da:13:bf:fc:fb:26:ce:7b:f4:3f:5d:df:13: ab:4d:fa:66:50:ca:f0:9b:57:7e:57:38:ec:d1:d1: 05:83:46:1b:26:00:1e:4e:0e:8b:59:bb:2a:fe:dc: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:E9:76:B6:C5:21:9C:FE:6D:BF:56:5D:B8:81:90:AA:1F:A6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl X509v3 Authority Key Identifier: keyid:98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer sbgp-ipAddrBlock: critical IPv4: 216.129.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:52:2d:d1:9b:ae:d2:9c:4f:76:1d:1e:91:81:b9:33:d0:db: 16:3a:18:04:1d:11:f2:e8:ac:af:02:6c:0e:c4:4f:6c:80:d7: 62:48:64:d4:2c:92:15:7d:68:11:48:ef:13:b4:31:9e:00:93: f9:fa:54:9f:95:4e:ce:62:0b:aa:89:40:0c:ab:8f:59:7b:9a: 22:0c:34:aa:ee:4d:59:34:31:09:e8:dd:60:ae:50:85:d4:c2: 40:e7:ec:da:82:3d:75:fc:70:9a:61:5b:ba:f0:2f:41:d5:9b: 1a:a1:d1:6e:e8:3f:f7:7f:bc:d6:54:01:a2:fa:bf:11:87:fc: 0c:1e:9a:70:ce:8a:1c:45:96:a5:f6:ae:26:a2:c8:b9:1b:9d: e9:df:f0:4e:60:5f:71:3c:d4:5d:f5:33:c6:93:ff:27:8a:da: 6e:c7:64:c0:30:f1:f7:a7:a2:ed:5e:2b:fd:e1:9a:39:c4:b2: 61:ca:52:96:f1:5a:e7:f2:3b:55:d4:6a:1c:7b:52:c6:5e:72: 8f:d5:81:98:41:ec:51:92:4d:bb:86:2e:7c:c4:eb:93:19:68: 8e:77:71:c5:59:c8:73:47:60:cd:7e:ec:ea:ef:b3:e8:f3:ae: e1:e0:e7:9c:de:0e:aa:32:b3:9a:2a:ea:81:89:aa:21:49:9b: 12:dc:f1:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0u/S9eh6aBYrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1YTg5MDktM2FhZi00NGU4LWIwZDYtYzUwN2U1NTBk MDU0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk YTk2NTZmNzQtZmQ4MC00YWY5LWIwNmMtZDU2ODljNmViZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkROJmS9EGShPjMG/gLPx9XVFVskq0dWSMr8w 7XfwnsCmWL9j8n1BUNHraBWS8s6UpX0eF5yEEi9bFtNXbpRl2WR0SkFX1dnYwbAt DDWYMgiK07s8Zl3SOOD62tjFbTL48lzBpXH7HoK2GLxahYymMeWc5J0+9MZbca3p 9J1yQVBTUEVdgMs1kZvS/HjZGbtgpjFofPIq5dFYfIsml5bdD0GlS0THoaHt4JDz g0yUJCo48Fk28eMeCdS7xymE/QXB+x9cqN5F9Ib+KOgLg5tE5/1qktoTv/z7Js57 9D9d3xOrTfpmUMrwm1d+Vzjs0dEFg0YbJgAeTg6LWbsq/tyOAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiP6Xa2xSGc/m2/Vl24gZCqH6Z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVh ODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3ZTU1MGQwNTQvZTdlMmQ2YjItZTVlMy0z N2I1LWFkNDktY2QwNDIzZTZlNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE1YTg5MDktM2FhZi00NGU4LWIw ZDYtYzUwN2U1NTBkMDU0LzBhNWE4OTA5LTNhYWYtNDRlOC1iMGQ2LWM1MDdlNTUw ZDA1NC5jcmwwHwYDVR0jBBgwFoAUmG0Drypy2EUm+2ahp1BpRmyL21swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVhODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3 ZTU1MGQwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1SLdGbrtKcT3YdHpGBuTPQ2xY6GAQdEfLorK8CbA7ET2yA12JIZNQs khV9aBFI7xO0MZ4Ak/n6VJ+VTs5iC6qJQAyrj1l7miIMNKruTVk0MQno3WCuUIXU wkDn7NqCPXX8cJphW7rwL0HVmxqh0W7oP/d/vNZUAaL6vxGH/AwemnDOihxFlqX2 riaiyLkbnenf8E5gX3E81F31M8aT/yeK2m7HZMAw8fenou1eK/3hmjnEsmHKUpbx WufyO1XUahx7UsZeco/VgZhB7FGSTbuGLnzE65MZaI53ccVZyHNHYM1+7Orvs+jz ruHg55zeDqoys5oq6oGJqiFJmxLc8T4= -----END CERTIFICATE-----Generated at Fri Nov 22 12:10:49 2024 by rpki-client on console-ams.rpki-client.org