$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa File: a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa (raw, json) Hash identifier: /9rdx8a0f8zWmd/Sq5j0tQMPwnko6gSJKCEqIeS9KSM= Subject key identifier: 3B:18:63:18:35:62:85:50:24:10:95:E2:6E:6D:AE:31:03:23:7C:94 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858477D5B9D9CD9203016C8DB2DC0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 21949 IP address blocks: 205.175.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:9d:9c:d9:20:30:16:c8:db:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=4d593a98-8483-475b-8c43-8c69bb71bc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:60:68:2b:07:fa:a2:e5:a6:3a:f0:a9:5c: 54:15:a5:5c:f5:98:ac:3d:9b:41:fb:0a:c8:7d:1f: fc:97:f4:48:9c:68:17:fa:23:ea:a3:58:56:c9:9f: 77:cf:35:ea:39:15:6d:98:99:53:4f:ba:bf:79:d6: 9c:6a:c4:e2:3a:59:af:50:7d:52:d0:b8:e3:24:5e: 65:ff:32:a8:ba:d4:16:ae:04:e1:0d:7c:ee:f9:a2: d8:05:e7:3c:58:4e:18:df:18:de:25:c1:71:7f:7f: 66:83:1a:c0:42:d8:e5:c9:0e:66:65:cf:ff:b5:19: 1f:cd:04:6d:ea:34:f1:7b:b0:58:33:75:7f:d4:52: 8e:40:21:9c:c8:f8:db:0d:da:c6:da:35:7e:da:7c: 57:d4:97:52:73:9b:c5:a7:05:21:9e:64:78:1d:3f: 3a:dd:27:7f:55:a9:d8:19:86:86:1a:e1:ea:11:d2: 9c:15:bd:1f:08:ee:9e:7a:15:9a:98:8d:c5:91:f4: a9:de:2e:71:3d:98:ac:81:2f:b7:dd:9a:bd:36:11: 52:4f:65:a7:06:1f:fe:6b:00:05:62:e2:7c:98:74: 69:d6:f7:96:31:61:a4:93:d4:4e:22:e4:2e:d1:36: 05:b4:d1:53:94:f6:59:6c:11:c6:ca:59:f4:cd:ca: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:18:63:18:35:62:85:50:24:10:95:E2:6E:6D:AE:31:03:23:7C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a5e5c4ab-da4a-39d0-9270-c0e84fea040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 205.175.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:66:1b:45:f8:68:09:3c:20:f0:9d:f4:5e:42:90:c3:87:4a: e2:fd:8d:ca:96:4d:6b:91:40:e2:02:1d:3b:35:0f:8b:a2:70: f0:34:db:0a:47:d1:1f:8f:be:00:77:5d:38:3d:14:6e:ce:10: 2a:0a:e6:86:18:56:2d:00:06:c6:76:ac:27:c2:a2:20:e9:70: 9d:d7:25:f2:80:8f:35:dd:95:56:44:f0:ff:7f:cd:fb:bd:26: 7e:5b:f5:00:ee:6e:98:78:cd:76:88:02:1e:5c:c8:e5:f8:b5: c7:72:4b:5e:b8:0a:1b:ac:db:68:e8:bc:23:a1:8f:af:b3:e2: 8a:ad:36:ba:72:05:87:8c:f2:e4:dd:5d:0b:c8:1c:1a:e4:9a: 0d:b8:85:36:71:22:1d:2d:a9:7f:87:58:60:2f:1b:c9:c4:5d: de:e8:f0:98:8d:eb:23:cd:0f:bd:e3:cc:22:a5:22:8b:ae:e3: da:6b:55:c5:51:d0:cf:38:a9:b4:b1:40:03:a1:50:e1:df:b1: 2b:79:34:1a:b3:c1:31:e8:79:8b:90:25:9c:12:2d:d8:f0:9e: c2:af:ce:7d:7e:e8:f5:d1:99:2a:17:35:10:50:8d:67:44:80: 01:f0:a6:ef:b0:8e:ef:88:ae:bb:f4:90:89:40:84:08:35:0f: 11:38:b1:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W52c2SAwFsjbLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk NGQ1OTNhOTgtODQ4My00NzViLThjNDMtOGM2OWJiNzFiYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWRgaCsH+qLlpjrwqVxUFaVc9ZisPZtB+wrI fR/8l/RInGgX+iPqo1hWyZ93zzXqORVtmJlTT7q/edacasTiOlmvUH1S0LjjJF5l /zKoutQWrgThDXzu+aLYBec8WE4Y3xjeJcFxf39mgxrAQtjlyQ5mZc//tRkfzQRt 6jTxe7BYM3V/1FKOQCGcyPjbDdrG2jV+2nxX1JdSc5vFpwUhnmR4HT863Sd/VanY GYaGGuHqEdKcFb0fCO6eehWamI3FkfSp3i5xPZisgS+33Zq9NhFST2WnBh/+awAF YuJ8mHRp1veWMWGkk9ROIuQu0TYFtNFTlPZZbBHGyln0zcqfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsYYxg1YoVQJBCV4m5trjEDI3yUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTVlNWM0YWItZGE0YS0z OWQwLTkyNzAtYzBlODRmZWEwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCza/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVmG0X4aAk8IPCd9F5CkMOHSuL9jcqWTWuRQOICHTs1D4uicPA02wpH 0R+PvgB3XTg9FG7OECoK5oYYVi0ABsZ2rCfCoiDpcJ3XJfKAjzXdlVZE8P9/zfu9 Jn5b9QDubph4zXaIAh5cyOX4tcdyS164Chus22jovCOhj6+z4oqtNrpyBYeM8uTd XQvIHBrkmg24hTZxIh0tqX+HWGAvG8nEXd7o8JiN6yPND73jzCKlIouu49prVcVR 0M84qbSxQAOhUOHfsSt5NBqzwTHoeYuQJZwSLdjwnsKvzn1+6PXRmSoXNRBQjWdE gAHwpu+wju+Irrv0kIlAhAg1DxE4sfM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:49 2024 by rpki-client on console-fra.rpki-client.org