$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa File: a725e940-6637-3306-a3a1-f7abc3c20a45.roa (raw, json) Hash identifier: yHi5+8T/oyzCkrCj2FjrsPdPuiKZAB+3nkKdi88rTsQ= Subject key identifier: FD:AC:86:24:60:BA:9A:DB:6B:DA:E2:56:76:4B:23:36:C7:CE:A2:50 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858477D5B9DC69BCD8BCFAF7AD680 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 21949 IP address blocks: 206.253.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:9d:c6:9b:cd:8b:cf:af:7a:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=abb21278-d393-4e18-823c-78108bbf6aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:6b:bf:ee:90:d5:c4:fc:a0:2d:7a:d3:4b: f0:ad:90:ab:b6:67:10:4b:f4:f2:78:9d:4f:2d:0c: 5d:4d:e5:d6:f1:02:59:9f:fe:72:a2:00:03:44:fa: e7:01:f8:83:60:ec:db:a5:22:bf:56:a3:ba:d7:50: a8:20:68:80:22:8a:37:16:8f:89:e9:36:47:64:22: 51:bd:a0:7b:3b:00:2d:12:40:0d:97:98:41:c4:30: fb:17:ce:b9:0a:b3:a8:5a:ed:54:14:85:e3:6b:e0: b6:a2:97:d9:15:77:9b:8b:23:98:fa:44:09:30:1b: b9:ea:ba:a6:0a:c5:c0:48:de:e2:99:a6:4d:9c:f7: a1:c2:01:d2:34:21:7e:8d:f6:ac:d9:ab:89:0e:21: 7e:72:bb:ab:d2:ee:bb:fa:ad:30:9b:28:16:a8:a1: da:0b:3e:5e:74:46:87:56:ac:2b:77:89:8c:d4:f5: a2:a8:50:aa:1b:56:e4:dd:87:ae:9b:bc:44:a9:d5: 84:4a:42:19:80:cf:e9:62:1e:2a:45:10:f3:37:0b: 6d:cd:37:b5:45:e2:b5:4d:48:cb:ce:fa:34:d3:c2: 54:f0:8d:59:24:e0:63:03:c3:14:28:bd:59:ca:1b: 68:7f:fe:d0:7c:d7:73:10:21:6b:06:ed:ec:07:96: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AC:86:24:60:BA:9A:DB:6B:DA:E2:56:76:4B:23:36:C7:CE:A2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 206.253.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:25:30:d4:49:be:20:43:a5:54:ad:cc:c5:ab:00:a5:15:c6: af:8b:6f:fe:28:06:26:51:36:36:ae:9e:0c:6e:39:f0:e0:fb: 3a:d6:d4:80:2b:bd:55:95:3b:ca:05:77:8d:e1:a1:76:0c:3e: 8f:53:b1:87:9f:af:38:97:eb:e7:d4:c2:82:9a:e4:ed:a7:a7: a6:98:ba:89:51:2e:9b:02:ae:7d:c8:d1:42:c2:53:95:2d:25: 55:38:50:63:c9:f6:2f:05:01:d3:b0:37:40:ab:da:ad:ad:28: d2:3d:bc:0d:c2:58:d1:d2:23:05:fd:a2:b2:c3:fa:32:3b:3a: 7b:70:a7:bc:50:fe:20:69:d8:05:73:a7:9c:d3:7f:06:0c:9e: 02:85:17:c5:07:80:eb:1a:db:00:97:2a:76:7a:37:21:b6:3d: d2:5b:02:44:55:a2:7a:d6:48:48:c0:3c:90:17:4d:42:c8:16: 88:9c:34:f8:44:9a:01:1d:d2:c4:88:ad:27:ca:e9:81:b1:a7: c6:ac:46:e6:10:c5:11:bb:ae:93:a6:eb:f4:cf:cf:3e:42:bd: c7:27:05:7b:ac:9b:fe:af:52:9a:d7:1b:6b:27:b7:71:c9:4a: 9f:89:6f:cd:7f:ee:dd:f6:e8:0d:dc:1b:6d:bc:e3:de:89:fe: b9:31:0a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W53Gm82Lz6961oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk YWJiMjEyNzgtZDM5My00ZTE4LTgyM2MtNzgxMDhiYmY2YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpZrv+6Q1cT8oC1600vwrZCrtmcQS/TyeJ1P LQxdTeXW8QJZn/5yogADRPrnAfiDYOzbpSK/VqO611CoIGiAIoo3Fo+J6TZHZCJR vaB7OwAtEkANl5hBxDD7F865CrOoWu1UFIXja+C2opfZFXebiyOY+kQJMBu56rqm CsXASN7imaZNnPehwgHSNCF+jfas2auJDiF+crur0u67+q0wmygWqKHaCz5edEaH Vqwrd4mM1PWiqFCqG1bk3Yeum7xEqdWESkIZgM/pYh4qRRDzNwttzTe1ReK1TUjL zvo008JU8I1ZJOBjA8MUKL1Zyhtof/7QfNdzECFrBu3sB5behQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2shiRguprba9riVnZLIzbHzqJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTcyNWU5NDAtNjYzNy0z MzA2LWEzYTEtZjdhYmMzYzIwYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAglMNRJviBDpVStzMWrAKUVxq+Lb/4oBiZRNjaungxuOfDg+zrW1IAr vVWVO8oFd43hoXYMPo9TsYefrziX6+fUwoKa5O2np6aYuolRLpsCrn3I0ULCU5Ut JVU4UGPJ9i8FAdOwN0Cr2q2tKNI9vA3CWNHSIwX9orLD+jI7Ontwp7xQ/iBp2AVz p5zTfwYMngKFF8UHgOsa2wCXKnZ6NyG2PdJbAkRVonrWSEjAPJAXTULIFoicNPhE mgEd0sSIrSfK6YGxp8asRuYQxRG7rpOm6/TPzz5CvccnBXusm/6vUprXG2snt3HJ Sp+Jb81/7t326A3cG228496J/rkxCkw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:49 2024 by rpki-client on console-fra.rpki-client.org