$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa File: 609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa (raw, json) Hash identifier: bml2NAXGY7GHLCEVYU6XrvPnDSxnxf+Dh/VbAH4BRxM= Subject key identifier: C3:4B:5E:77:F1:C9:32:2C:3C:CD:5A:01:22:8D:CC:8A:D7:7C:BE:CF Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285847E4C4AB0F93465A48BE6DC180 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa Signing time: Sat 16 Nov 2024 02:00:28 +0000 ROA not before: Sat 16 Nov 2024 02:00:28 +0000 ROA not after: Fri 14 Feb 2025 02:00:28 +0000 asID: 394002 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e4:c4:ab:0f:93:46:5a:48:be:6d:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Nov 16 02:00:28 2024 GMT Not After : Feb 14 02:00:28 2025 GMT Subject: CN=84f68aa7-73b9-4b6f-be48-4fef7f0207ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:c6:d4:81:f4:4e:0f:9a:46:63:eb:c2:04: bc:8b:2d:9d:63:a5:74:6b:92:7a:bb:e1:8d:18:c7: 19:39:07:80:ba:f6:c6:4f:34:12:06:da:0a:76:4f: 33:d0:25:45:7d:f7:72:19:16:eb:08:0d:15:96:02: 87:b7:9b:3f:60:8a:a1:73:a7:19:3a:1d:cc:a3:29: 0e:53:3e:61:06:e6:dc:04:b2:9c:ab:2a:4a:b9:1b: 06:84:cc:cc:2e:72:5b:ba:a6:93:d8:c5:97:f8:28: fc:3c:90:34:f7:f1:02:3f:8d:86:cf:c2:9e:eb:46: 95:3f:b4:70:e2:9c:13:6e:f0:bf:b1:7b:00:34:10: 15:b3:35:8b:5c:ee:d5:86:39:ac:21:fc:ca:9a:b9: 0f:0f:7d:e2:96:14:29:da:56:0a:8e:47:9c:48:ad: 4b:a4:2c:b4:41:bd:c5:0e:56:d7:0d:74:16:85:df: e1:64:f5:8c:fd:d8:99:50:6f:dd:0a:b6:cd:15:50: ed:7e:64:9b:8b:c3:bb:58:c2:53:5c:f4:39:79:a1: ba:55:21:d8:3d:b0:d0:7d:f7:76:2e:2c:65:a5:a7: 87:0e:97:f3:ca:6e:66:ac:aa:07:c3:c4:65:03:76: eb:03:b5:00:f4:28:de:3f:c5:83:bd:25:93:8c:ca: 52:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4B:5E:77:F1:C9:32:2C:3C:CD:5A:01:22:8D:CC:8A:D7:7C:BE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8e:1e:77:43:cc:cc:1a:a6:a3:62:63:35:59:8f:c9:bf:99: 9b:26:65:67:11:4f:e9:06:5a:8c:7b:07:31:c7:50:7e:1c:bf: e0:d5:2d:7f:a2:46:2e:7c:eb:69:e4:bc:a2:00:e4:ae:f7:1e: 88:ea:cd:b8:da:08:15:a4:50:48:51:2e:6e:22:bb:a9:13:bf: c5:dc:6e:7a:96:53:1a:99:dc:e7:ff:cc:b0:56:91:96:81:52: 87:c4:ae:a8:9a:c3:81:79:24:1c:de:b5:fd:59:e9:cf:49:e2: 78:ef:4c:5d:89:2f:19:3d:b3:26:70:0b:b1:26:69:89:38:78: 32:74:39:7d:3d:56:8e:60:db:c6:47:2c:bd:9d:50:b6:e9:06: ff:35:69:1b:cd:78:98:d2:6e:97:b7:33:d0:19:44:a6:43:ce: 1d:e8:e8:01:82:ba:eb:32:0a:7b:fe:af:14:56:97:db:e9:6e: dc:0b:fa:a2:c1:2c:0a:4b:bf:96:c8:6b:0a:4a:f2:d9:89:c4: de:87:d0:02:9d:54:4d:3f:a2:c8:fc:67:f5:8d:97:ab:9c:97: 15:8d:8b:8e:4e:36:40:a3:ce:d9:4d:ce:02:a8:98:71:a7:f2: 66:f0:0f:b8:71:19:f6:49:53:5a:a5:7e:56:9d:d6:2c:dc:56: 1d:ea:55:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfkxKsPk0ZaSL5twYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI0MTExNjAyMDAyOFoXDTI1MDIxNDAyMDAyOFowLzEtMCsGA1UEAxMk ODRmNjhhYTctNzNiOS00YjZmLWJlNDgtNGZlZjdmMDIwN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk3G1IH0Tg+aRmPrwgS8iy2dY6V0a5J6u+GN GMcZOQeAuvbGTzQSBtoKdk8z0CVFffdyGRbrCA0VlgKHt5s/YIqhc6cZOh3MoykO Uz5hBubcBLKcqypKuRsGhMzMLnJbuqaT2MWX+Cj8PJA09/ECP42Gz8Ke60aVP7Rw 4pwTbvC/sXsANBAVszWLXO7VhjmsIfzKmrkPD33ilhQp2lYKjkecSK1LpCy0Qb3F DlbXDXQWhd/hZPWM/diZUG/dCrbNFVDtfmSbi8O7WMJTXPQ5eaG6VSHYPbDQffd2 LixlpaeHDpfzym5mrKoHw8RlA3brA7UA9CjeP8WDvSWTjMpSBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNLXnfxyTIsPM1aASKNzIrXfL7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNjA5ZWMxZTAtNDA4Yi0z YmZkLTk3NmItM2QwY2NiZDI5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeOHndDzMwapqNiYzVZj8m/mZsmZWcRT+kGWox7BzHHUH4cv+DVLX+i Ri5862nkvKIA5K73HojqzbjaCBWkUEhRLm4iu6kTv8XcbnqWUxqZ3Of/zLBWkZaB UofErqiaw4F5JBzetf1Z6c9J4njvTF2JLxk9syZwC7EmaYk4eDJ0OX09Vo5g28ZH LL2dULbpBv81aRvNeJjSbpe3M9AZRKZDzh3o6AGCuusyCnv+rxRWl9vpbtwL+qLB LApLv5bIawpK8tmJxN6H0AKdVE0/osj8Z/WNl6uclxWNi45ONkCjztlNzgKomHGn 8mbwD7hxGfZJU1qlflad1izcVh3qVfY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:48 2024 by rpki-client on console-fra.rpki-client.org