$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa File: a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa (raw, json) Hash identifier: 8aHeUNbQa59agPzYUNMO9ddLUI5lp9TYMkN0SmJLUXc= Subject key identifier: 22:87:88:52:F8:8B:B7:B5:1D:84:98:0C:02:7B:18:7F:B0:08:32:D5 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A3FB6749B0D1FCDA4980 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 216.246.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a3:fb:67:49:b0:d1:fc:da:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=6a543490-26cc-4d78-aa36-e4bee0c3bf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:ff:f6:b6:eb:2b:7d:ec:62:b1:4f:bf:c0: c0:67:f0:ec:ff:9d:94:3d:2c:dc:f7:58:05:02:f3: 39:ff:c9:31:b5:de:bd:6b:2d:26:af:7c:82:7c:11: de:39:d4:3b:40:51:f4:e8:25:bf:18:43:89:c9:76: 9c:8b:d4:bf:48:fa:d0:68:bd:d7:95:16:88:6b:52: a5:30:8a:03:40:bd:16:67:3b:90:ee:43:00:c8:6d: 16:0c:2b:e8:1b:1c:68:3e:8a:1a:cf:69:29:14:e4: ae:fc:76:e8:db:7c:20:d2:ca:8e:39:d8:d3:d0:ab: a2:ad:78:ff:8a:6f:6b:38:a5:84:eb:07:2e:ca:a7: 35:0c:4c:86:7a:5d:41:8a:bf:55:84:2e:34:05:e9: df:93:ce:c6:b5:d4:48:2c:0a:4d:7b:8a:78:f8:e2: 56:21:dc:cf:50:fd:8d:64:8d:d0:d1:c0:1d:b2:6c: 07:5d:69:13:d6:e5:5d:9d:fc:f8:9c:b8:3a:d6:ac: 19:79:a3:56:e1:27:06:51:82:11:4f:c4:8e:bf:98: fc:f6:12:f2:0e:38:53:34:c6:76:1d:55:51:c6:1f: ba:4b:01:eb:26:a4:f0:91:df:90:67:e3:03:90:ba: 9c:3c:56:5d:a8:09:3b:fb:5d:79:b7:90:65:f5:0a: 67:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:87:88:52:F8:8B:B7:B5:1D:84:98:0C:02:7B:18:7F:B0:08:32:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:af:33:dc:f2:14:9d:db:6a:d4:be:f6:9d:68:a5:d9:bd:9b: 0c:22:9c:4c:6f:f0:f4:b8:1c:45:4e:18:05:43:60:8f:7e:44: e7:2d:3a:fe:99:7a:84:ea:8a:de:20:9a:cd:e6:85:6c:84:1d: cb:78:35:35:8d:8f:e6:97:7c:7c:33:be:3d:b5:81:16:88:99: 75:d0:15:e8:dd:ff:4c:f4:39:1c:76:f4:94:7a:d6:74:8c:cb: 86:5e:d8:34:99:a5:bf:ad:46:2c:97:06:2a:70:9b:6c:df:8f: 5e:c5:9f:86:ac:0c:4e:00:22:71:3b:5d:81:62:42:fd:47:e5: 69:5f:57:70:e1:7f:91:91:10:b2:99:6a:da:c5:01:76:06:87: 53:64:28:2e:f1:ba:b4:02:1d:b7:7b:4b:44:b3:d6:24:dc:5d: a2:a3:9f:d8:ca:d9:67:2c:6e:bc:17:3e:6e:61:5d:1f:30:0d: 04:bb:eb:e8:5a:f3:75:47:8d:2f:9f:0c:2c:2b:b2:a4:b2:3b: d6:7f:a7:32:51:13:3e:9e:a8:17:8e:8c:7d:c7:bb:46:ea:bd: 21:21:11:15:4d:34:5e:32:68:62:87:55:cd:85:f1:ea:4a:5b: 65:4b:b6:b3:fa:56:d8:88:80:50:0e:ad:c2:21:b0:7e:7f:ff: 39:f1:43:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqP7Z0mw0fzaSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NmE1NDM0OTAtMjZjYy00ZDc4LWFhMzYtZTRiZWUwYzNiZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnz/9rbrK33sYrFPv8DAZ/Ds/52UPSzc91gF AvM5/8kxtd69ay0mr3yCfBHeOdQ7QFH06CW/GEOJyXaci9S/SPrQaL3XlRaIa1Kl MIoDQL0WZzuQ7kMAyG0WDCvoGxxoPooaz2kpFOSu/Hbo23wg0sqOOdjT0KuirXj/ im9rOKWE6wcuyqc1DEyGel1Bir9VhC40Benfk87GtdRILApNe4p4+OJWIdzPUP2N ZI3Q0cAdsmwHXWkT1uVdnfz4nLg61qwZeaNW4ScGUYIRT8SOv5j89hLyDjhTNMZ2 HVVRxh+6SwHrJqTwkd+QZ+MDkLqcPFZdqAk7+115t5Bl9QpnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKHiFL4i7e1HYSYDAJ7GH+wCDLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYTdhZWZkNGEtNDEyMC0z ZWFmLWJjNjgtYWEyYTBkYTY5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGvM9zyFJ3batS+9p1opdm9mwwinExv8PS4HEVOGAVDYI9+ROctOv6Z eoTqit4gms3mhWyEHct4NTWNj+aXfHwzvj21gRaImXXQFejd/0z0ORx29JR61nSM y4Ze2DSZpb+tRiyXBipwm2zfj17Fn4asDE4AInE7XYFiQv1H5WlfV3Dhf5GRELKZ atrFAXYGh1NkKC7xurQCHbd7S0Sz1iTcXaKjn9jK2WcsbrwXPm5hXR8wDQS76+ha 83VHjS+fDCwrsqSyO9Z/pzJREz6eqBeOjH3Hu0bqvSEhERVNNF4yaGKHVc2F8epK W2VLtrP6VtiIgFAOrcIhsH5//znxQ4Q= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org