$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa File: f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa (raw, json) Hash identifier: mIGCHeK+aCK6ME935SdpXiTpSF3ITuDhE8NJScuSxlw= Subject key identifier: 7D:97:40:94:1C:E7:98:44:62:B6:00:95:7F:40:90:F6:DA:0F:A2:FA Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847B2669BE8C589DFDC0BCE4580 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa Signing time: Tue 29 Oct 2024 01:00:32 +0000 ROA not before: Tue 29 Oct 2024 01:00:32 +0000 ROA not after: Mon 27 Jan 2025 02:00:32 +0000 asID: 398420 IP address blocks: 206.71.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:66:9b:e8:c5:89:df:dc:0b:ce:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Oct 29 01:00:32 2024 GMT Not After : Jan 27 02:00:32 2025 GMT Subject: CN=9324e382-0a7f-4a6b-a328-be925a6d72a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:27:2d:86:19:f5:f7:70:a9:07:4c:41:ab: 2d:fd:67:58:63:c7:bb:e3:23:30:31:d7:8c:53:bd: d5:3d:1f:3a:27:1e:99:ad:6e:8e:20:5f:c8:a2:a7: 6f:c4:a4:8e:bd:71:c7:ad:51:52:97:99:3f:5f:a6: 24:47:0f:b6:ce:d0:f1:ab:52:a8:b1:e7:ca:a0:4e: 8b:d3:0a:c4:94:84:91:d0:8a:f1:9d:6b:22:f5:46: 5a:3e:48:a5:ec:bb:49:3c:5d:42:cd:4b:9b:1d:63: e5:83:0d:b0:34:42:46:47:9c:c5:47:ba:87:c2:5e: cc:29:6f:54:53:7f:d5:6a:3b:cc:5f:46:fe:4c:4c: aa:b9:f9:b6:ff:cb:87:ea:71:3b:e0:8e:d7:81:65: 0c:fc:e3:ff:4c:0c:d2:4c:1f:2d:3b:63:4d:74:8a: 69:47:2b:98:83:30:0e:f7:01:fb:9d:eb:98:33:1c: a0:89:da:dc:23:ab:1a:d4:fc:52:cf:8b:db:3a:33: 01:a5:af:cc:09:e0:08:d0:54:68:da:66:10:da:28: 1a:28:94:81:ec:b5:08:9e:34:ff:37:97:e1:4d:1e: a6:21:44:1b:8a:2f:65:36:db:41:a3:aa:a3:6d:e6: 3b:68:46:21:b6:1e:4d:f5:5d:d9:c5:78:cb:20:33: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:97:40:94:1C:E7:98:44:62:B6:00:95:7F:40:90:F6:DA:0F:A2:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:05:2d:06:64:9e:fa:36:70:39:7e:a7:32:62:ec:54:c2:01: 0e:a6:55:43:5d:a2:eb:6e:d7:3d:21:d3:92:2a:3f:aa:1f:c5: f2:3b:7a:54:4a:a2:b9:ef:cc:e1:e9:a9:fa:38:b3:d2:54:23: ad:52:bf:16:b7:13:2e:33:37:41:bb:c7:ab:14:8c:6f:c0:b0: d2:74:88:05:4d:3c:b8:28:85:c5:29:0d:0f:c1:f9:7d:14:d3: 13:a6:56:d2:74:89:8b:23:fb:cc:54:77:f5:ce:6c:61:8e:24: f9:bf:ac:b9:e6:58:60:7a:4d:09:87:48:4c:40:cb:e6:f4:da: 08:f8:71:2e:e3:b3:44:9b:3a:a7:9c:67:67:5f:0b:62:ce:65: c5:41:89:b9:7a:98:7e:9d:d1:dc:93:17:7d:8b:33:b7:b4:7c: 7c:56:ba:15:34:f2:bc:56:bf:43:70:77:b8:13:3e:ab:8d:d6: e0:7c:73:e8:ee:5e:d7:c4:a5:22:49:c8:42:e2:1b:ff:64:33: 44:e3:8d:6a:db:1c:55:32:e0:c2:c8:98:df:b2:ba:b8:5b:49: 92:f7:22:58:d1:70:df:0b:64:60:cc:cc:93:b9:30:0a:69:60: 0f:40:38:6a:d9:23:90:83:d1:81:a7:26:54:2e:9f:49:d6:e8: 53:fc:b4:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeyZpvoxYnf3AvORYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk OTMyNGUzODItMGE3Zi00YTZiLWEzMjgtYmU5MjVhNmQ3MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdwnLYYZ9fdwqQdMQast/WdYY8e74yMwMdeM U73VPR86Jx6ZrW6OIF/IoqdvxKSOvXHHrVFSl5k/X6YkRw+2ztDxq1KosefKoE6L 0wrElISR0IrxnWsi9UZaPkil7LtJPF1CzUubHWPlgw2wNEJGR5zFR7qHwl7MKW9U U3/VajvMX0b+TEyqufm2/8uH6nE74I7XgWUM/OP/TAzSTB8tO2NNdIppRyuYgzAO 9wH7neuYMxygidrcI6sa1PxSz4vbOjMBpa/MCeAI0FRo2mYQ2igaKJSB7LUInjT/ N5fhTR6mIUQbii9lNttBo6qjbeY7aEYhth5N9V3ZxXjLIDP2sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2XQJQc55hEYrYAlX9AkPbaD6L6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjY2ODViN2EtNWYxMC0z YmYzLThlYjktOWIwMzEwZDllMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsFLQZknvo2cDl+pzJi7FTCAQ6mVUNdoutu1z0h05IqP6ofxfI7elRK ornvzOHpqfo4s9JUI61Svxa3Ey4zN0G7x6sUjG/AsNJ0iAVNPLgohcUpDQ/B+X0U 0xOmVtJ0iYsj+8xUd/XObGGOJPm/rLnmWGB6TQmHSExAy+b02gj4cS7js0SbOqec Z2dfC2LOZcVBibl6mH6d0dyTF32LM7e0fHxWuhU08rxWv0Nwd7gTPquN1uB8c+ju XtfEpSJJyELiG/9kM0TjjWrbHFUy4MLImN+yurhbSZL3IljRcN8LZGDMzJO5MApp YA9AOGrZI5CD0YGnJlQun0nW6FP8tEU= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org