$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa File: 0867b451-b315-3f3b-bed4-0121ba565f01.roa (raw, json) Hash identifier: IzhMD2hnmLFk0zbbtW52UExj/KuSnC9hfMrNiQuqSXU= Subject key identifier: 6E:72:AC:12:FA:56:3D:F2:1E:0C:A2:EF:37:FB:C5:6F:0B:54:6E:43 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A3C8702E1672402A6380 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 216.246.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:c8:70:2e:16:72:40:2a:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=d0506178-7836-46b8-af06-8db85eeb6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:fe:cd:a0:b2:26:01:7f:45:41:e5:63:c5: bd:93:78:78:6a:88:7f:8b:ab:15:b0:b1:49:ef:32: 54:e4:e0:9b:b1:7a:58:fe:1b:0c:86:ea:1c:26:6f: ba:40:c9:c4:42:72:1b:16:50:e6:4f:1a:89:e3:05: f1:2f:9d:bc:e5:b7:0d:af:a6:7a:e1:e7:54:bd:e6: 11:38:5e:d3:b5:4f:0b:a8:74:b4:43:7d:1b:79:3e: 6f:1b:fc:53:55:36:1e:33:8e:9c:ef:0b:ea:8f:15: 64:c2:0b:b3:ab:ae:0e:d4:0e:69:4e:cf:0b:8f:40: e9:a1:e7:f7:1c:2a:e8:77:b0:8d:6e:dd:8e:fd:05: a4:59:99:b6:24:cf:c9:cf:06:67:70:d4:74:bd:6b: 11:68:72:19:77:5f:bc:cf:7c:3e:0a:78:c4:1a:fb: b7:24:5a:78:ab:49:ed:87:5e:cb:53:47:13:69:12: 5b:7f:ee:9d:28:ee:61:ce:4c:e9:1b:19:16:90:ae: ee:ec:38:92:f5:cb:93:ba:f3:de:0b:ac:3f:7d:21: e9:c0:e3:ff:d8:7b:a6:b1:c0:15:cb:85:f5:2e:ce: 65:71:80:78:c6:81:be:83:33:6f:99:21:66:65:79: ac:4a:99:1c:61:7a:50:ca:e8:4e:ed:50:a9:b4:18: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:72:AC:12:FA:56:3D:F2:1E:0C:A2:EF:37:FB:C5:6F:0B:54:6E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c8:f6:dc:d7:37:69:f5:92:25:6b:06:58:98:8f:b7:51:52: 69:57:a7:6a:a4:17:90:5b:3e:84:2c:4f:51:e6:cd:bd:71:19: 88:e6:4f:2f:03:f9:40:98:b8:65:e0:3d:ed:53:b8:61:44:92: 5d:5c:f3:72:86:45:ce:85:d5:83:7a:63:7e:7e:26:48:ec:b4: 50:64:d7:3c:0a:7f:e8:80:45:a0:d2:bf:09:68:32:f4:11:fa: 6c:1e:91:4f:0c:0d:78:00:90:77:0c:c6:d8:9d:3d:34:33:db: de:0c:6f:70:6a:24:67:a4:fa:6b:a2:e1:2e:66:2c:d9:07:98: 90:4c:95:ab:78:56:4d:73:43:59:6c:b3:ec:f9:13:cf:7c:aa: 96:bd:1e:7d:e6:8a:ee:b4:9a:e1:4b:79:72:e8:7b:b1:59:e6: 5a:d5:db:d4:5b:43:23:31:38:bf:72:ff:36:36:a4:71:43:35: f6:f0:e2:11:70:e3:18:33:20:af:e7:7c:de:ac:4b:73:6d:e3: 2a:1e:c0:50:d8:57:4d:e3:80:53:de:ae:e2:a3:6a:dd:14:ca: d7:1b:c7:85:a0:16:98:a2:5a:34:21:d7:ef:69:2a:bf:28:6a: ae:1b:e6:72:c0:5b:db:7c:d0:1a:c9:3e:d1:3a:19:eb:0d:0c: ae:66:0a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqPIcC4WckAqY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDA1MDYxNzgtNzgzNi00NmI4LWFmMDYtOGRiODVlZWI2ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw/+zaCyJgF/RUHlY8W9k3h4aoh/i6sVsLFJ 7zJU5OCbsXpY/hsMhuocJm+6QMnEQnIbFlDmTxqJ4wXxL5285bcNr6Z64edUveYR OF7TtU8LqHS0Q30beT5vG/xTVTYeM46c7wvqjxVkwguzq64O1A5pTs8Lj0Dpoef3 HCrod7CNbt2O/QWkWZm2JM/JzwZncNR0vWsRaHIZd1+8z3w+CnjEGvu3JFp4q0nt h17LU0cTaRJbf+6dKO5hzkzpGxkWkK7u7DiS9cuTuvPeC6w/fSHpwOP/2HumscAV y4X1Ls5lcYB4xoG+gzNvmSFmZXmsSpkcYXpQyuhO7VCptBgTiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5yrBL6Vj3yHgyi7zf7xW8LVG5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMDg2N2I0NTEtYjMxNS0z ZjNiLWJlZDQtMDEyMWJhNTY1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7I9tzXN2n1kiVrBliYj7dRUmlXp2qkF5BbPoQsT1Hmzb1xGYjmTy8D +UCYuGXgPe1TuGFEkl1c83KGRc6F1YN6Y35+JkjstFBk1zwKf+iARaDSvwloMvQR +mwekU8MDXgAkHcMxtidPTQz294Mb3BqJGek+mui4S5mLNkHmJBMlat4Vk1zQ1ls s+z5E898qpa9Hn3miu60muFLeXLoe7FZ5lrV29RbQyMxOL9y/zY2pHFDNfbw4hFw 4xgzIK/nfN6sS3Nt4yoewFDYV03jgFPeruKjat0Uytcbx4WgFpiiWjQh1+9pKr8o aq4b5nLAW9t80BrJPtE6GesNDK5mCjU= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org