$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa File: b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json) Hash identifier: hjMq7iYbRNFftiNyevxeNeJLc4FVJXYYPnqyKO/FFug= Subject key identifier: A1:0A:4F:70:C5:6B:5C:0D:24:8E:E8:F5:1C:C2:DB:3F:E7:C5:52:77 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584774FB8BA1B6C33D5816D29E80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 22781 IP address blocks: 216.131.120.0/24 maxlen: 24 2606:b300:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:8b:a1:b6:c3:3d:58:16:d2:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=c2bd9f1b-340c-4686-9a37-d6f100807e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:ed:33:ef:ed:e4:90:85:d0:da:39:b7:0f: 34:e6:47:41:a3:87:a0:5c:8c:d3:ca:ab:44:31:84: a9:09:70:12:bf:03:b4:98:1c:7c:3f:a0:75:65:27: e5:d2:86:bf:91:d5:ec:a2:db:91:91:9b:bf:c4:f6: 9a:89:f3:2e:41:d9:16:34:56:17:ee:7c:0d:38:22: c5:5e:b6:31:f7:5c:4d:d6:6a:b2:30:80:06:bc:ef: bb:0b:32:9f:c8:75:08:25:30:7c:de:13:42:71:c6: 29:1a:f7:51:9b:45:09:a1:1d:c4:2f:59:86:1a:70: e3:58:b6:e6:e2:28:6d:bf:b7:98:57:ea:52:de:ea: 07:63:5d:f4:50:cd:3e:c0:4a:b8:08:e7:72:5b:2f: 85:ff:cd:f7:f0:3d:aa:90:bb:23:9c:85:6f:d5:0f: 9b:41:79:a8:fb:60:6d:f2:ff:26:2a:50:95:11:41: ee:7e:da:73:70:0d:08:fd:09:b4:15:90:48:e8:5a: 5e:af:18:95:51:30:fc:71:b7:1f:25:fc:50:15:87: 2c:f1:d7:21:b0:22:f9:2c:5a:9b:9a:b2:ea:77:7e: 4e:c3:fc:8d:e4:0c:cb:fc:00:91:ee:83:68:b3:8d: 77:82:9e:7b:0b:3a:a1:30:ef:98:f7:67:ee:f7:fb: 42:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0A:4F:70:C5:6B:5C:0D:24:8E:E8:F5:1C:C2:DB:3F:E7:C5:52:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.120.0/24 IPv6: 2606:b300:8200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:07:da:d5:8f:e2:11:57:08:82:87:89:b5:44:3c:f6:3c:7f: 88:c3:0a:7f:5b:bc:9f:ce:ba:48:c6:72:02:f2:9a:3c:0f:57: f8:3c:c9:65:f6:2f:e3:82:e6:36:e6:f9:d6:60:f3:bf:aa:91: 78:83:e6:1c:4f:5e:47:4a:00:ad:cd:bd:64:d6:0a:36:e4:a3: 7c:3d:d7:6c:51:aa:54:89:52:37:ff:3e:6e:63:b9:50:9b:86: b9:06:42:84:0f:2c:57:ed:44:e2:aa:ad:f3:a4:24:cf:1e:b3: 37:fc:d5:27:7f:28:bd:27:bf:af:7d:43:5c:88:d3:3b:d4:1c: c2:8c:0d:bc:2d:2a:2f:32:65:9a:42:39:f0:82:2f:15:79:4f: 36:73:10:5a:dc:4a:48:80:2c:dc:e7:9a:04:6f:21:e0:2e:87: 9f:9a:d1:16:d5:de:7b:15:32:19:40:4b:9e:b6:0a:4a:69:56: e1:7d:8a:3f:89:38:1c:8b:07:e9:44:f4:f6:43:d2:50:af:16: e7:0a:72:78:59:64:28:48:8b:5c:78:6f:73:aa:73:55:fe:82: 29:91:9d:6e:a5:c1:d1:2a:2c:09:bf:3d:8a:7a:cc:19:af:d2: f6:3c:a5:b2:8a:9e:0c:52:07:eb:c1:90:e6:96:9e:ce:ab:9e: 7b:a1:6e:e4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEd0+4uhtsM9WBbSnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk YzJiZDlmMWItMzQwYy00Njg2LTlhMzctZDZmMTAwODA3ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIftM+/t5JCF0No5tw805kdBo4egXIzTyqtE MYSpCXASvwO0mBx8P6B1ZSfl0oa/kdXsotuRkZu/xPaaifMuQdkWNFYX7nwNOCLF XrYx91xN1mqyMIAGvO+7CzKfyHUIJTB83hNCccYpGvdRm0UJoR3EL1mGGnDjWLbm 4ihtv7eYV+pS3uoHY130UM0+wEq4COdyWy+F/8338D2qkLsjnIVv1Q+bQXmo+2Bt 8v8mKlCVEUHuftpzcA0I/Qm0FZBI6FperxiVUTD8cbcfJfxQFYcs8dchsCL5LFqb mrLqd35Ow/yN5AzL/ACR7oNos413gp57CzqhMO+Y92fu9/tC1wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKEKT3DFa1wNJI7o9RzC2z/nxVJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjIxNDgyYmYtODU5ZS0z NTFiLWIzNTgtYTFjMDBiNjU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN4MA4E AgACMAgDBgAmBrMAgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWB9rVj+IRVwiCh4m1RDz2PH+Iwwp/W7yf zrpIxnIC8po8D1f4PMll9i/jguY25vnWYPO/qpF4g+YcT15HSgCtzb1k1go25KN8 PddsUapUiVI3/z5uY7lQm4a5BkKEDyxX7UTiqq3zpCTPHrM3/NUnfyi9J7+vfUNc iNM71BzCjA28LSovMmWaQjnwgi8VeU82cxBa3EpIgCzc55oEbyHgLoefmtEW1d57 FTIZQEuetgpKaVbhfYo/iTgciwfpRPT2Q9JQrxbnCnJ4WWQoSItceG9zqnNV/oIp kZ1upcHRKiwJvz2KeswZr9L2PKWyip4MUgfrwZDmlp7Oq557oW7k -----END CERTIFICATE-----Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org