$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa File: 6436fe84-15d0-3af0-956b-b3cb8a063158.roa (raw, json) Hash identifier: eF0TZwApeGLStrVMWqJcfuBeQ6TrQgj2wr2Yi45/z1w= Subject key identifier: 75:EF:F8:33:64:8D:F1:03:6D:19:38:81:9A:4E:EA:59:FE:1C:B8:5C Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A3AF82218BA89B7A0D00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 216.246.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:af:82:21:8b:a8:9b:7a:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=d51855ef-ad23-4bae-b6c0-f202b868b0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:e0:c5:07:b6:0b:11:42:54:b1:5d:4f:8b: 16:8c:b9:f4:12:b5:ac:f6:65:c2:3c:21:e4:04:09: 37:93:7e:23:34:7e:fb:43:4c:0b:dc:1f:19:42:82: ec:5f:0d:72:04:22:7a:41:3a:7a:18:62:e6:de:d9: 9b:cc:fd:a3:3f:45:f9:4b:6a:b2:c3:34:b1:17:15: 42:30:f7:54:cf:5c:25:31:18:27:22:58:50:c3:39: 02:a5:d7:23:7b:1d:a2:04:84:31:22:bf:d2:74:a2: 4a:09:6b:88:68:71:49:04:82:6b:53:60:ea:77:0c: a2:19:3c:5f:7d:6b:a3:93:3b:52:d9:97:6d:46:15: c8:1e:bd:58:1f:8b:35:d0:e4:89:87:19:3d:5d:e9: 66:bd:9b:5f:f1:ab:2d:39:c7:dc:e6:fa:a0:49:65: 98:aa:fe:96:31:97:d5:74:17:f0:89:b3:da:f0:0c: 06:18:24:74:0a:f0:35:aa:e4:98:a6:cb:3a:c4:bc: 19:9e:07:0f:14:b7:4d:f5:54:b6:f5:ac:02:b4:73: d7:eb:48:05:23:89:a3:92:7e:13:9b:5e:79:23:3f: 89:28:ab:98:37:b5:0a:fc:90:92:c1:bb:13:7c:a4: 0f:50:a3:47:cd:66:a7:10:22:d1:72:66:34:56:f1: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:F8:33:64:8D:F1:03:6D:19:38:81:9A:4E:EA:59:FE:1C:B8:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9b:72:b1:eb:80:99:c5:8a:56:3b:fc:0a:45:f4:b0:0c:28: 0a:ae:3f:94:ab:e0:49:d1:07:87:f6:f4:a7:98:82:a6:fc:09: 72:d1:4d:c6:e5:20:a1:98:5b:83:ed:78:ad:d1:19:6f:cf:7b: 39:be:a3:59:c3:74:be:9e:68:c1:ee:85:a3:44:d3:1d:ee:ed: 0e:d7:12:26:9e:7a:ae:29:79:58:6d:6c:be:1d:8e:e5:60:0a: 66:31:3c:5f:14:b2:96:ac:ab:cc:4f:7d:5d:34:86:cc:b5:55: 8d:44:16:40:0c:ba:10:95:8c:df:b0:ef:1f:74:a7:88:08:3e: 44:2d:90:fa:72:a7:98:96:11:00:f1:2c:88:d5:7f:b0:48:b3: c0:62:5c:6c:dc:82:79:91:d1:ff:e7:ac:ec:1d:07:6d:8f:13: 6b:03:5b:89:f1:26:ec:c0:b9:95:68:ff:48:1d:5b:60:21:dc: e1:81:22:50:c3:94:31:e5:f5:a9:ab:a6:08:02:02:12:af:0b: 47:b4:5f:89:ef:19:25:4e:19:f7:69:29:fd:da:0e:ea:f4:79: 47:f1:6c:4f:49:8b:9a:e0:b4:9b:84:1a:d0:9b:d4:d9:14:17: b2:bc:33:12:a8:5f:f9:32:e2:43:1e:e5:cb:16:f7:9d:13:55: 17:bd:b1:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqOvgiGLqJt6DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDUxODU1ZWYtYWQyMy00YmFlLWI2YzAtZjIwMmI4NjhiMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs3gxQe2CxFCVLFdT4sWjLn0ErWs9mXCPCHk BAk3k34jNH77Q0wL3B8ZQoLsXw1yBCJ6QTp6GGLm3tmbzP2jP0X5S2qywzSxFxVC MPdUz1wlMRgnIlhQwzkCpdcjex2iBIQxIr/SdKJKCWuIaHFJBIJrU2DqdwyiGTxf fWujkztS2ZdtRhXIHr1YH4s10OSJhxk9XelmvZtf8astOcfc5vqgSWWYqv6WMZfV dBfwibPa8AwGGCR0CvA1quSYpss6xLwZngcPFLdN9VS29awCtHPX60gFI4mjkn4T m155Iz+JKKuYN7UK/JCSwbsTfKQPUKNHzWanECLRcmY0VvEBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXv+DNkjfEDbRk4gZpO6ln+HLhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNjQzNmZlODQtMTVkMC0z YWYwLTk1NmItYjNjYjhhMDYzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWbcrHrgJnFilY7/ApF9LAMKAquP5Sr4EnRB4f29KeYgqb8CXLRTcbl IKGYW4PteK3RGW/Pezm+o1nDdL6eaMHuhaNE0x3u7Q7XEiaeeq4peVhtbL4djuVg CmYxPF8Uspasq8xPfV00hsy1VY1EFkAMuhCVjN+w7x90p4gIPkQtkPpyp5iWEQDx LIjVf7BIs8BiXGzcgnmR0f/nrOwdB22PE2sDW4nxJuzAuZVo/0gdW2Ah3OGBIlDD lDHl9amrpggCAhKvC0e0X4nvGSVOGfdpKf3aDur0eUfxbE9Ji5rgtJuEGtCb1NkU F7K8MxKoX/ky4kMe5csW950TVRe9sT8= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org