$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa File: de012c4e-185d-3ce9-b093-964f60565a71.roa (raw, json) Hash identifier: lId9DBPgsdTLDxT+WHP9hemXpAEVnNAQ5OaUL21mXTE= Subject key identifier: 05:E7:F4:DA:43:F8:D5:E5:53:0B:4E:12:14:CB:DA:BE:98:F0:AC:B6 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858477D5B9E0FCBC2D491316D9780 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa Signing time: Thu 10 Oct 2024 01:00:33 +0000 ROA not before: Thu 10 Oct 2024 01:00:33 +0000 ROA not after: Wed 08 Jan 2025 02:00:33 +0000 asID: 21949 IP address blocks: 72.15.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7d:5b:9e:0f:cb:c2:d4:91:31:6d:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 10 01:00:33 2024 GMT Not After : Jan 8 02:00:33 2025 GMT Subject: CN=21af9150-7aff-45e1-b769-fe343ff7df11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:69:7d:d8:fa:41:d0:3e:ab:87:51:d4:d7: 4f:33:59:79:14:dd:8e:c6:20:03:08:b2:05:31:11: f9:8e:aa:0c:52:c2:c2:66:31:c4:4e:09:9d:68:16: 9e:56:a4:2f:5b:48:b6:06:e6:44:2b:e9:d0:ef:5b: a9:9f:c1:e4:07:cf:cd:ec:65:3a:f3:f3:77:ff:72: 79:07:c7:73:93:fe:7e:43:28:35:35:fa:6d:58:25: eb:14:dc:67:57:03:7d:d4:39:ac:a4:b6:72:40:97: d7:da:a7:d7:3d:e2:a7:1f:8e:14:47:83:bb:69:4a: 22:e0:4c:50:43:14:75:7c:a8:d1:dd:39:3e:2c:9a: 40:8e:71:6a:8c:52:ca:f7:45:e2:5f:e8:4e:28:af: 2d:eb:10:fe:ad:2e:b9:6a:e5:ae:13:33:4d:4a:b8: a4:76:b5:8b:07:a0:94:3c:6f:ab:21:a4:37:a7:d0: 0b:b2:7e:5a:61:8b:fa:79:9d:d1:94:8e:c6:f5:b2: 9d:ea:a1:d6:e1:90:da:19:e7:23:78:cd:57:c0:b0: e3:d9:ac:60:25:c1:af:de:e6:44:9d:2d:f0:53:4f: 16:36:af:8d:ff:ec:6a:50:0b:43:d7:ff:c3:2d:16: 43:2d:85:91:db:60:31:b9:5e:64:36:8b:ca:ab:a3: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E7:F4:DA:43:F8:D5:E5:53:0B:4E:12:14:CB:DA:BE:98:F0:AC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 72.15.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ea:8c:82:40:57:a4:6c:cf:4f:8d:e0:bf:f0:69:c8:08:95: 62:4f:a1:1d:68:79:a0:db:05:92:95:76:cf:c8:68:0d:ea:27: bb:e8:e0:6f:72:b1:e8:35:ab:4b:93:2a:67:4a:7a:9f:a3:17: 1d:e5:28:36:35:53:1e:46:75:34:c2:50:c8:ff:f6:53:a8:d6: 3b:fe:72:c7:e6:0c:5e:78:12:a1:27:e6:41:ba:39:3e:1c:b9: 2b:52:b4:c0:25:91:90:12:54:5e:e6:53:71:71:ac:93:72:d2: a8:ca:fe:fc:ef:16:94:1c:df:d2:4a:aa:43:b1:23:d4:76:28: a6:49:86:ca:12:20:cb:02:b1:c0:b0:80:98:65:b2:a1:19:08: b4:46:c4:2d:0c:65:95:21:eb:e6:aa:47:cd:7e:08:f7:4c:6d: c4:b5:c3:25:96:3a:e7:4f:fb:1e:28:15:41:b1:9c:0f:b4:42: 1e:2d:87:de:de:fe:3c:3f:13:2a:8d:93:87:f8:8b:d5:71:ba: 90:c1:db:94:39:61:a4:d5:00:f6:63:85:3e:c5:45:17:83:db: ec:d1:de:d8:0d:c5:f8:01:f6:c4:af:8d:95:7a:2d:46:b5:a7: e1:a8:71:34:e1:a2:d7:16:8a:96:7e:23:50:35:9f:25:ff:6c: 94:0e:75:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd9W54Py8LUkTFtl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk MjFhZjkxNTAtN2FmZi00NWUxLWI3NjktZmUzNDNmZjdkZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA1pfdj6QdA+q4dR1NdPM1l5FN2OxiADCLIF MRH5jqoMUsLCZjHETgmdaBaeVqQvW0i2BuZEK+nQ71upn8HkB8/N7GU68/N3/3J5 B8dzk/5+Qyg1NfptWCXrFNxnVwN91DmspLZyQJfX2qfXPeKnH44UR4O7aUoi4ExQ QxR1fKjR3Tk+LJpAjnFqjFLK90XiX+hOKK8t6xD+rS65auWuEzNNSrikdrWLB6CU PG+rIaQ3p9ALsn5aYYv6eZ3RlI7G9bKd6qHW4ZDaGecjeM1XwLDj2axgJcGv3uZE nS3wU08WNq+N/+xqUAtD1//DLRZDLYWR22AxuV5kNovKq6NMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXn9NpD+NXlUwtOEhTL2r6Y8Ky2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZGUwMTJjNGUtMTg1ZC0z Y2U5LWIwOTMtOTY0ZjYwNTY1YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESA8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvqjIJAV6Rsz0+N4L/wacgIlWJPoR1oeaDbBZKVds/IaA3qJ7vo4G9y seg1q0uTKmdKep+jFx3lKDY1Ux5GdTTCUMj/9lOo1jv+csfmDF54EqEn5kG6OT4c uStStMAlkZASVF7mU3FxrJNy0qjK/vzvFpQc39JKqkOxI9R2KKZJhsoSIMsCscCw gJhlsqEZCLRGxC0MZZUh6+aqR81+CPdMbcS1wyWWOudP+x4oFUGxnA+0Qh4th97e /jw/EyqNk4f4i9VxupDB25Q5YaTVAPZjhT7FRReD2+zR3tgNxfgB9sSvjZV6LUa1 p+GocTThotcWipZ+I1A1nyX/bJQOdaQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:49 2024 by rpki-client on console-fra.rpki-client.org