$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa File: 2c9098e1-8590-3ce4-a313-bf25729c2190.roa (raw, json) Hash identifier: g7cawUsT7vu7qhvwqCBlR/4wpeWLMtQ0B7LyzxsdrPM= Subject key identifier: 06:D0:65:B2:81:F7:B9:38:B8:59:72:3B:96:17:C1:1C:62:B1:2A:68 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A384B44E1F04400CBB00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 216.246.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:84:b4:4e:1f:04:40:0c:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=8d2031fb-a0dc-4558-b8c6-b345c80981c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:d3:80:32:b9:84:c5:43:d7:73:0f:b5:ae: 69:b9:3e:a0:f8:42:6c:31:72:df:fc:8b:9f:e2:1b: 46:c7:06:ed:84:f6:51:4d:09:84:62:76:84:41:2d: b1:dd:d7:38:c2:18:f5:93:3f:5a:d2:09:d6:aa:e9: 9e:82:14:87:ee:3d:05:28:de:b1:40:b0:36:f0:f7: 57:c1:d6:0e:48:46:32:39:7e:1a:c8:00:de:5f:9b: d3:e2:17:d6:8f:e2:88:d7:6c:96:66:cd:6b:3d:6e: 9f:e1:5c:1c:4b:12:e3:fc:da:8a:3c:35:ad:ff:22: a9:ca:8b:ac:b5:46:e6:57:49:96:00:d6:59:c0:e4: 7f:e4:1e:0b:3e:05:99:71:42:70:34:e0:97:74:4b: b5:ba:4d:95:ca:64:55:fd:ca:6e:b0:44:e4:cd:e4: f6:db:03:a8:3a:43:d2:4b:2d:4d:9c:6f:14:48:9e: e0:d7:1e:5e:0a:ef:1c:91:02:59:34:30:8f:0a:58: 5a:bb:57:18:b7:49:42:5a:7a:2e:87:af:e0:fa:90: 1c:e9:37:47:d7:5f:81:70:bb:32:2a:93:e9:e2:c1: 41:66:86:a5:a0:dd:71:fb:30:6c:d7:2b:8f:e7:c6: b9:d2:da:ef:4b:af:06:28:ac:76:3e:35:8f:8f:45: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D0:65:B2:81:F7:B9:38:B8:59:72:3B:96:17:C1:1C:62:B1:2A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b6:c8:af:f4:01:c3:f6:4d:cd:4a:c7:66:38:06:14:9c:d1: b1:ea:4f:ed:84:cb:26:5c:23:c7:6a:fe:0a:6b:41:f3:79:b6: ce:9f:1f:31:e0:01:33:00:83:fe:53:6b:1e:07:e8:14:72:c7: de:a6:65:bf:16:f2:cb:c0:23:b0:64:bf:4c:81:c6:8b:de:55: 0c:9b:10:9c:7f:03:3d:b9:2e:50:4a:bd:0b:b2:be:90:02:58: 72:2c:9b:bc:e5:0f:fc:29:a3:25:82:90:dd:6d:1e:3e:68:cd: 1f:3d:c6:65:ba:d1:a7:26:c9:e4:a0:85:94:5f:10:2d:3d:be: ab:5d:38:7b:f6:4e:45:0f:a6:e6:ba:f0:1b:8f:cc:a1:6a:9d: 05:47:1e:7c:8b:79:8f:d5:79:07:b9:cf:a0:d4:97:66:bf:80: b3:e6:a7:c7:78:f1:45:84:a1:5e:03:ee:19:6a:81:93:93:c4: cd:03:3e:f0:f2:57:1e:bd:63:33:f9:d8:67:81:8e:74:a6:4d: c1:8f:7e:18:cf:20:a9:83:cf:02:21:0a:34:17:3b:11:4a:df: b7:98:05:ca:fd:d1:b1:a9:ed:6f:d9:13:dd:7e:43:18:3d:9c: a9:95:d2:a9:2d:5f:7f:3e:99:55:4a:ac:6c:c3:b7:5b:99:67: dd:03:86:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqOEtE4fBEAMuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OGQyMDMxZmItYTBkYy00NTU4LWI4YzYtYjM0NWM4MDk4MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnfTgDK5hMVD13MPta5puT6g+EJsMXLf/Iuf 4htGxwbthPZRTQmEYnaEQS2x3dc4whj1kz9a0gnWqumeghSH7j0FKN6xQLA28PdX wdYOSEYyOX4ayADeX5vT4hfWj+KI12yWZs1rPW6f4VwcSxLj/NqKPDWt/yKpyous tUbmV0mWANZZwOR/5B4LPgWZcUJwNOCXdEu1uk2VymRV/cpusETkzeT22wOoOkPS Sy1NnG8USJ7g1x5eCu8ckQJZNDCPClhau1cYt0lCWnouh6/g+pAc6TdH11+BcLsy KpPp4sFBZoaloN1x+zBs1yuP58a50trvS68GKKx2PjWPj0ULAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbQZbKB97k4uFlyO5YXwRxisSpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMmM5MDk4ZTEtODU5MC0z Y2U0LWEzMTMtYmYyNTcyOWMyMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm2yK/0AcP2Tc1Kx2Y4BhSc0bHqT+2EyyZcI8dq/gprQfN5ts6fHzHg ATMAg/5Tax4H6BRyx96mZb8W8svAI7Bkv0yBxoveVQybEJx/Az25LlBKvQuyvpAC WHIsm7zlD/wpoyWCkN1tHj5ozR89xmW60acmyeSghZRfEC09vqtdOHv2TkUPpua6 8BuPzKFqnQVHHnyLeY/VeQe5z6DUl2a/gLPmp8d48UWEoV4D7hlqgZOTxM0DPvDy Vx69YzP52GeBjnSmTcGPfhjPIKmDzwIhCjQXOxFK37eYBcr90bGp7W/ZE91+Qxg9 nKmV0qktX38+mVVKrGzDt1uZZ90DhqA= -----END CERTIFICATE-----Generated at Mon Nov 25 16:21:50 2024 by rpki-client on console-ams.rpki-client.org