$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa File: c6373672-771d-3946-baf4-d4e76c94aaf4.roa (raw, json) Hash identifier: is5PamSGLJaUFSkWQjBMfHV1YD4DTYtBSCYlDUlf/O8= Subject key identifier: B3:D9:5C:2E:C3:20:39:DE:E4:25:D9:53:3D:97:30:BE:5A:EE:72:4C Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F432858475EA61EB6D1EA3705BD296D80 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 6939 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:1e:b6:d1:ea:37:05:bd:29:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=a02b6f74-113b-4c02-a793-2e9203704cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:8b:74:d4:b4:5a:30:6e:a0:69:9b:ca:ef: fb:90:d9:eb:7f:1f:31:db:1b:e6:0c:cb:5f:9b:66: a8:3c:81:9c:5c:84:11:37:12:38:26:92:e3:8e:14: 95:d2:ac:c0:45:27:8a:ab:09:a9:87:b4:9f:4f:03: d8:ef:bf:8a:c4:ff:90:b5:8d:d8:32:05:fc:5f:42: 73:30:7a:5d:5a:67:17:de:ec:99:c2:8d:f9:b0:ff: 7e:03:b8:73:cf:ac:f9:48:6c:60:b9:9c:a8:87:ec: 77:9f:54:76:bf:4a:bc:dc:b3:09:65:b9:fb:b7:eb: 81:7b:af:32:47:94:27:b7:92:e8:3c:3f:1b:d0:43: 58:53:03:f1:52:6e:7b:96:bf:db:88:df:97:a6:4e: df:f3:df:69:c2:3e:c0:43:c2:3d:50:89:47:47:cd: 31:ad:30:55:85:ea:d4:54:8c:d7:33:09:f5:b1:bc: bf:76:23:c0:ae:7a:e0:8f:0f:51:67:78:d1:9d:c1: cc:e5:5e:4b:ce:f9:aa:3f:bc:7c:7d:60:1a:ad:0e: 01:4b:89:eb:44:ac:27:44:99:1c:80:f2:4b:05:fe: 20:e1:0e:3f:79:f1:d7:57:f0:38:4e:08:47:e7:fe: 69:ac:cb:e1:99:85:3d:a3:4a:f7:f6:cf:85:d5:ef: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D9:5C:2E:C3:20:39:DE:E4:25:D9:53:3D:97:30:BE:5A:EE:72:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2a:ad:cc:82:cb:66:c3:ef:fe:22:38:df:8b:d3:33:63:97: 7f:1e:e9:3e:76:2d:b0:10:7f:d8:4b:48:b5:06:e2:0d:cc:ae: 75:f9:77:f2:aa:1c:ed:1d:ac:73:e8:17:a0:49:ca:46:45:06: a5:8d:f9:d5:9f:14:f4:bc:a2:b3:4c:3a:db:04:2f:e1:18:a2: a4:bc:45:f3:c7:c0:bb:c0:e0:65:3c:b1:d5:8b:76:62:a5:df: 35:1e:78:23:4a:e5:4c:4c:48:8c:fd:4e:e1:42:35:45:79:e3: c5:2f:1d:34:3e:db:32:4c:cb:fb:33:4c:b4:b8:b8:63:9a:32: f3:a4:5f:df:0c:66:e1:b3:aa:ff:19:ed:90:b5:3a:24:bd:46: 03:73:17:bd:12:c5:2a:ae:71:a3:4e:13:57:67:e9:6f:bf:a0: b1:da:3d:71:c5:64:bf:6e:3a:d8:64:a8:b3:76:b3:6a:f4:fe: ea:3e:2d:af:f0:7f:15:37:cc:02:78:64:06:88:cb:b8:2c:8f: b0:be:c9:c2:ae:91:33:99:33:0f:75:95:73:79:d0:aa:2e:0f: b9:fd:74:d4:57:54:29:31:ce:cc:fa:04:e4:ea:b5:49:03:91: 78:3a:9d:92:fb:1e:ed:3f:32:9e:68:8e:d2:02:68:75:5d:46: 4f:38:1a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdeph620eo3Bb0pbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk YTAyYjZmNzQtMTEzYi00YzAyLWE3OTMtMmU5MjAzNzA0Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHSLdNS0WjBuoGmbyu/7kNnrfx8x2xvmDMtf m2aoPIGcXIQRNxI4JpLjjhSV0qzARSeKqwmph7SfTwPY77+KxP+QtY3YMgX8X0Jz MHpdWmcX3uyZwo35sP9+A7hzz6z5SGxguZyoh+x3n1R2v0q83LMJZbn7t+uBe68y R5Qnt5LoPD8b0ENYUwPxUm57lr/biN+Xpk7f899pwj7AQ8I9UIlHR80xrTBVherU VIzXMwn1sby/diPArnrgjw9RZ3jRncHM5V5LzvmqP7x8fWAarQ4BS4nrRKwnRJkc gPJLBf4g4Q4/efHXV/A4TghH5/5prMvhmYU9o0r39s+F1e+BiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPZXC7DIDne5CXZUz2XML5a7nJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvYzYzNzM2NzItNzcxZC0z OTQ2LWJhZjQtZDRlNzZjOTRhYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUqrcyCy2bD7/4iON+L0zNjl38e6T52LbAQf9hLSLUG4g3MrnX5d/Kq HO0drHPoF6BJykZFBqWN+dWfFPS8orNMOtsEL+EYoqS8RfPHwLvA4GU8sdWLdmKl 3zUeeCNK5UxMSIz9TuFCNUV548UvHTQ+2zJMy/szTLS4uGOaMvOkX98MZuGzqv8Z 7ZC1OiS9RgNzF70SxSqucaNOE1dn6W+/oLHaPXHFZL9uOthkqLN2s2r0/uo+La/w fxU3zAJ4ZAaIy7gsj7C+ycKukTOZMw91lXN50KouD7n9dNRXVCkxzsz6BOTqtUkD kXg6nZL7Hu0/Mp5ojtICaHVdRk84GjE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:25 2024 by rpki-client on console-ams.rpki-client.org