$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa File: c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa (raw, json) Hash identifier: bDWCQ9ebT/G32lX4bG+4FAuDBtVwTnl4dKLaaZSfKJU= Subject key identifier: D1:04:66:90:DF:F7:0B:2E:04:BB:DF:DB:1A:FC:B9:E6:97:8C:E5:1F Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847B2669BD0E6559051D23E7020 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa Signing time: Tue 29 Oct 2024 01:00:32 +0000 ROA not before: Tue 29 Oct 2024 01:00:32 +0000 ROA not after: Mon 27 Jan 2025 02:00:32 +0000 asID: 398420 IP address blocks: 206.71.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:66:9b:d0:e6:55:90:51:d2:3e:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Oct 29 01:00:32 2024 GMT Not After : Jan 27 02:00:32 2025 GMT Subject: CN=0a02acf5-ea68-415f-ae0c-7c77bae6e153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:de:1e:cc:d1:6a:b4:05:32:b3:42:a1:e5: 4a:b3:9c:40:ab:69:52:03:a3:bc:98:6a:ab:d5:b9: b7:3b:39:06:ab:da:cb:bf:99:f5:06:78:d6:dc:ef: 9b:e3:b1:01:9a:ec:27:1b:5d:01:d9:8c:f7:fb:48: 4a:3b:41:76:e9:e7:f1:88:70:8e:95:61:71:84:25: e8:bb:c0:b6:77:59:14:41:5c:d1:f5:ed:f3:4b:94: 2f:82:ae:8a:37:b1:63:7e:0c:0f:ec:7e:be:90:89: 49:64:71:b7:b3:fc:0f:9f:f8:51:85:b1:d4:1e:69: 76:29:a0:c0:26:b4:40:ab:95:70:ab:ac:66:41:4d: ae:e4:53:cd:5a:25:38:e8:76:39:ab:55:be:42:45: 09:41:41:e4:00:dd:ec:d1:9a:31:28:67:02:f7:9f: 7c:b1:6c:1f:ce:3c:a0:82:a9:72:7f:a9:f9:ec:17: 36:71:c9:90:ef:a2:d8:92:0e:ec:dd:e5:ce:e5:28: 8f:c9:60:96:b3:67:1f:bf:b8:99:2b:bf:a8:e1:89: 22:ef:12:dd:89:3b:96:ff:36:3f:58:02:7b:b8:6b: 7f:6f:c7:63:12:fe:46:3e:53:07:aa:46:f9:8d:6e: ea:0f:76:e3:e7:c5:f9:95:22:44:17:27:de:7c:c6: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:04:66:90:DF:F7:0B:2E:04:BB:DF:DB:1A:FC:B9:E6:97:8C:E5:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7a:28:8d:5b:40:1f:2b:fb:24:97:de:ef:b8:a0:d4:b7:8b: 43:79:ce:96:f1:b1:ca:1a:c2:3d:54:ea:13:6a:8f:7e:ab:a2: 9b:48:ee:0e:5a:42:c0:97:7c:0d:15:d9:65:cf:63:a5:30:a8: 04:9e:89:56:cf:e9:7a:c2:a8:ac:7e:cf:03:32:f1:7c:62:6b: 3f:4b:6b:61:67:28:67:3f:de:db:dd:e4:f7:fa:d4:01:d0:ec: ea:b1:78:a4:28:df:51:8f:99:e5:73:22:4b:04:ee:8a:99:0f: 22:02:bd:10:c2:e3:6b:81:27:6e:85:52:f6:2a:6a:51:a3:e9: aa:37:a9:c2:9e:26:2b:eb:62:76:f9:ae:11:80:1b:6d:27:74: 8c:f0:6c:77:8b:d5:7c:fa:9a:14:1c:51:e9:93:7c:7d:01:d2: 7c:83:e7:f4:38:55:ef:d2:41:bd:f8:04:5e:a3:4f:ea:0f:5f: a8:ed:40:43:c5:40:e0:3e:1a:9c:05:7c:49:c2:0c:ce:d8:76: e6:74:e1:59:a7:f4:2c:bd:7c:18:55:ec:3b:5f:c8:31:f6:04: f4:05:1c:f5:75:c9:b1:8c:2b:48:4c:e2:8a:d4:df:c2:2a:08: 51:cd:dc:dc:a1:20:ff:ef:ab:a2:c4:5d:e6:27:31:a5:7f:cf: e6:2a:49:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeyZpvQ5lWQUdI+cCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk MGEwMmFjZjUtZWE2OC00MTVmLWFlMGMtN2M3N2JhZTZlMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+zeHszRarQFMrNCoeVKs5xAq2lSA6O8mGqr 1bm3OzkGq9rLv5n1BnjW3O+b47EBmuwnG10B2Yz3+0hKO0F26efxiHCOlWFxhCXo u8C2d1kUQVzR9e3zS5Qvgq6KN7FjfgwP7H6+kIlJZHG3s/wPn/hRhbHUHml2KaDA JrRAq5Vwq6xmQU2u5FPNWiU46HY5q1W+QkUJQUHkAN3s0ZoxKGcC9598sWwfzjyg gqlyf6n57Bc2ccmQ76LYkg7s3eXO5SiPyWCWs2cfv7iZK7+o4Yki7xLdiTuW/zY/ WAJ7uGt/b8djEv5GPlMHqkb5jW7qD3bj58X5lSJEFyfefMYmewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEEZpDf9wsuBLvf2xr8ueaXjOUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYzUxYWQ0ZGEtOWJkZC0z OTQ4LTg3ODktMWQxOTRiYjlmMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC16KI1bQB8r+ySX3u+4oNS3i0N5zpbxscoawj1U6hNqj36roptI7g5a QsCXfA0V2WXPY6UwqASeiVbP6XrCqKx+zwMy8Xxiaz9La2FnKGc/3tvd5Pf61AHQ 7OqxeKQo31GPmeVzIksE7oqZDyICvRDC42uBJ26FUvYqalGj6ao3qcKeJivrYnb5 rhGAG20ndIzwbHeL1Xz6mhQcUemTfH0B0nyD5/Q4Ve/SQb34BF6jT+oPX6jtQEPF QOA+GpwFfEnCDM7YduZ04Vmn9Cy9fBhV7DtfyDH2BPQFHPV1ybGMK0hM4orU38Iq CFHN3NyhIP/vq6LEXeYnMaV/z+YqSeg= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org