$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa File: dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json) Hash identifier: dWOoUwRpAtT0SSarjzH9Innwklxnn4suZ1nvYYjQRuw= Subject key identifier: 9C:03:B2:ED:40:A0:55:1F:5F:92:DA:FC:62:D2:16:71:3E:6A:6F:6A Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F432858472F30818BAC82A65E3CBCBD00 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 13638 IP address blocks: 65.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:81:8b:ac:82:a6:5e:3c:bc:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=625ee975-39c6-44c2-bb6d-9f5eadc2efaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:e7:34:3b:d0:7c:e5:a9:90:28:32:a2:18: 2f:73:7d:f4:5e:fe:69:63:26:85:64:ee:70:b8:dd: 31:6e:3f:4e:eb:48:99:67:b6:5a:56:72:d0:fe:0a: 3e:29:72:f4:67:22:6e:96:00:2d:13:8a:52:e9:fe: 42:e3:cc:87:dc:48:e2:1e:79:19:f8:9e:66:98:6a: 72:5b:48:f8:fd:a4:90:29:18:59:ef:7d:6f:5e:00: 0a:f2:39:5a:11:11:40:e7:27:ab:83:60:5b:47:f9: b8:57:ee:24:a5:df:f1:7a:ea:f3:6a:40:e3:fb:b9: b4:7a:5b:e4:42:f9:6b:74:5c:57:ac:e9:6f:6c:e8: c6:f5:bd:5d:d3:f2:86:6c:10:8d:19:e5:d5:99:d1: 27:09:05:3d:85:cc:13:fa:54:fe:8f:d2:5a:bc:92: 68:0c:a4:8c:89:eb:5a:d3:60:e2:e6:ed:41:db:ea: 95:86:2d:60:79:9b:5f:f3:9e:46:41:c6:d7:3a:77: 4f:29:98:25:1e:46:bd:c0:72:91:10:a1:32:b9:b1: aa:f2:ec:0d:07:2a:d7:5d:74:51:da:7c:1e:59:4c: f1:34:93:7f:86:7f:be:87:44:77:22:43:1f:3e:19: 45:21:51:36:bf:6c:64:e9:46:93:7d:9f:92:7b:96: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:03:B2:ED:40:A0:55:1F:5F:92:DA:FC:62:D2:16:71:3E:6A:6F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 65.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d6:c9:9f:aa:45:e9:0c:f8:33:f8:67:42:7d:5b:9c:01:51: 90:4c:2d:9b:f3:7e:ec:5a:47:1d:df:4d:ca:2c:3f:a2:a3:a0: a9:5d:0f:ea:80:fb:17:5f:96:04:56:76:ad:d3:38:08:43:4d: 52:5d:c0:c6:2f:48:e2:d7:a0:39:ee:9c:60:3e:0e:aa:46:c0: e4:16:a5:af:25:a5:ba:00:0b:46:07:88:de:a2:3e:25:5d:a2: 99:01:ed:7d:8d:12:51:c2:c2:97:cd:9e:b1:dd:2c:2c:04:db: 93:76:0f:12:6a:e2:86:fa:81:97:57:4d:c0:c4:34:26:db:55: 12:6e:79:25:b0:97:61:05:07:82:c8:03:d8:b6:4c:82:70:8f: 7c:cb:15:39:20:c7:e0:2e:45:32:da:b8:f8:33:9e:3d:02:da: 7e:ef:ee:ca:fc:82:b1:31:72:2c:18:57:e1:78:48:7d:95:0e: 80:f1:9a:05:26:27:a6:6e:bb:40:79:df:0e:1f:f6:49:d1:34: 08:c0:d0:73:57:4d:da:52:cd:b3:85:ca:68:c7:7b:02:0f:d4: 61:7c:74:51:f0:9d:18:38:52:c8:11:0f:c3:5a:0d:02:40:66: 0c:04:c4:04:3b:09:d1:d8:90:65:5c:d7:27:d4:a5:ab:12:ef: 4c:ee:b8:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIGLrIKmXjy8vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk NjI1ZWU5NzUtMzljNi00NGMyLWJiNmQtOWY1ZWFkYzJlZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluHnNDvQfOWpkCgyohgvc330Xv5pYyaFZO5w uN0xbj9O60iZZ7ZaVnLQ/go+KXL0ZyJulgAtE4pS6f5C48yH3EjiHnkZ+J5mmGpy W0j4/aSQKRhZ731vXgAK8jlaERFA5yerg2BbR/m4V+4kpd/xeurzakDj+7m0elvk QvlrdFxXrOlvbOjG9b1d0/KGbBCNGeXVmdEnCQU9hcwT+lT+j9JavJJoDKSMieta 02Di5u1B2+qVhi1geZtf855GQcbXOndPKZglHka9wHKREKEyubGq8uwNByrXXXRR 2nweWUzxNJN/hn++h0R3IkMfPhlFIVE2v2xk6UaTfZ+Se5aBJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwDsu1AoFUfX5La/GLSFnE+am9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvZGZlZjkxMDMtYjIzYy0z NDJjLTgzZGEtMTU5ZmQ1NzgwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzWyZ+qRekM+DP4Z0J9W5wBUZBMLZvzfuxaRx3fTcosP6KjoKldD+qA +xdflgRWdq3TOAhDTVJdwMYvSOLXoDnunGA+DqpGwOQWpa8lpboAC0YHiN6iPiVd opkB7X2NElHCwpfNnrHdLCwE25N2DxJq4ob6gZdXTcDENCbbVRJueSWwl2EFB4LI A9i2TIJwj3zLFTkgx+AuRTLauPgznj0C2n7v7sr8grExciwYV+F4SH2VDoDxmgUm J6Zuu0B53w4f9knRNAjA0HNXTdpSzbOFymjHewIP1GF8dFHwnRg4UsgRD8NaDQJA ZgwExAQ7CdHYkGVc1yfUpasS70zuuKs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:21 2024 by rpki-client on console-ams.rpki-client.org