$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa File: 2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa (raw, json) Hash identifier: FvRZS0OmDVnd6O8GfG1oQz15d8fCGRutyO/myykVQi0= Subject key identifier: 37:6D:98:05:77:93:D2:50:EA:57:DE:FB:22:89:06:38:DE:41:94:0A Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F4328584754E0C79399346B314DB61700 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 400071 IP address blocks: 216.73.182.0/23 maxlen: 32 2602:fc31::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:c7:93:99:34:6b:31:4d:b6:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=ed1c732b-994c-4a49-a46b-666caf5dd41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:e9:02:bc:fc:7a:ad:d2:6b:d1:0d:e8:c9: ed:6a:b5:b1:e7:92:6c:47:15:37:0b:65:96:fc:04: 88:dd:60:c1:28:d3:25:23:4f:bf:17:3f:0f:26:49: ca:53:a3:89:48:ee:00:cd:18:03:15:67:7a:00:4b: 9c:15:e3:fd:3a:77:20:42:3c:49:25:aa:25:e8:7d: 10:db:fb:a1:a7:f5:6d:2d:67:24:8d:2f:60:d3:af: ee:b1:2f:db:39:54:1d:83:df:c3:c2:f8:d3:37:07: ae:9f:2f:1b:67:38:72:08:c7:8a:19:f9:bd:db:4d: 29:ba:36:89:c1:89:8f:09:11:8b:51:78:67:61:bc: a8:51:4c:2a:de:14:53:e1:0e:69:b4:54:f8:fd:79: cc:b3:33:d2:43:e1:f3:7b:ab:ec:04:2f:b4:a5:8a: de:f7:18:5f:d6:5b:b0:2e:a8:52:4d:b4:89:c2:87: f7:6a:6e:97:d2:49:2d:64:b9:46:24:39:ed:fd:07: 4c:ec:1d:a3:f7:b0:30:d1:f7:a8:eb:d3:71:24:b8: ee:74:2d:f1:d4:cf:39:38:50:3f:59:d2:56:d8:74: 5b:84:e4:f7:3d:e7:8b:a7:56:d9:61:08:fc:c2:58: 7e:dd:43:10:6a:3b:72:4c:43:e2:54:e9:1c:fe:5e: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6D:98:05:77:93:D2:50:EA:57:DE:FB:22:89:06:38:DE:41:94:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv4: 216.73.182.0/23 IPv6: 2602:fc31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:0e:06:fd:cc:a7:97:ec:2b:92:91:94:d6:17:05:63:ac:2f: d9:b6:57:79:f8:4c:03:a4:e4:bb:02:d2:f2:5d:80:30:f4:b7: e1:10:fb:b6:7e:1a:ef:8c:b8:9a:af:99:d7:27:53:0c:e3:77: 2b:83:43:2a:22:1a:a1:2e:e6:18:72:44:31:0c:bd:a4:d5:83: 92:a3:cc:23:25:0f:06:f9:73:ba:20:bb:de:2f:a8:da:78:70: db:04:b6:2c:3c:1e:d3:79:5b:07:a9:58:e8:4a:4f:ec:31:6b: 25:ed:67:f1:c8:e9:80:5a:b3:03:59:60:70:86:90:51:c7:c3: ec:5a:0e:27:35:dd:c6:1f:9d:28:ef:03:20:0b:ca:9b:4a:ff: ff:62:53:57:44:e8:57:19:1e:69:c8:33:d5:3d:01:f6:2f:c4: 83:09:96:71:44:82:bf:b2:58:3c:55:72:d6:b5:d6:6b:bd:a2: 68:51:ff:ef:90:57:f0:1a:f2:a6:35:a8:3d:b6:b4:16:38:8e: 60:53:92:ca:0a:33:d4:7d:66:f3:7a:5d:05:0d:1e:08:b5:40: ab:a5:77:69:6f:cf:4f:6e:7e:d4:35:81:55:22:1f:bc:04:9d: c7:45:96:a1:80:33:ea:ef:b5:6f:ee:5c:a6:73:c6:f3:93:0d: 36:52:4b:54 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdU4MeTmTRrMU22FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWQxYzczMmItOTk0Yy00YTQ5LWE0NmItNjY2Y2FmNWRkNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSPpArz8eq3Sa9EN6MntarWx55JsRxU3C2WW /ASI3WDBKNMlI0+/Fz8PJknKU6OJSO4AzRgDFWd6AEucFeP9OncgQjxJJaol6H0Q 2/uhp/VtLWckjS9g06/usS/bOVQdg9/DwvjTNweuny8bZzhyCMeKGfm9200pujaJ wYmPCRGLUXhnYbyoUUwq3hRT4Q5ptFT4/XnMszPSQ+Hze6vsBC+0pYre9xhf1luw LqhSTbSJwof3am6X0kktZLlGJDnt/QdM7B2j97Aw0feo69NxJLjudC3x1M85OFA/ WdJW2HRbhOT3PeeLp1bZYQj8wlh+3UMQajtyTEPiVOkc/l6AewIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDdtmAV3k9JQ6lfe+yKJBjjeQZQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvMmI0ZDdkMjEtNjE2ZS0z ODRhLWFjZjUtMmIyNGQ1MzNjN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQB2Em2MA4E AgACMAgDBgQmAvwxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC2Dgb9zKeX7CuSkZTWFwVjrC/Ztld5+EwD pOS7AtLyXYAw9LfhEPu2fhrvjLiar5nXJ1MM43crg0MqIhqhLuYYckQxDL2k1YOS o8wjJQ8G+XO6ILveL6jaeHDbBLYsPB7TeVsHqVjoSk/sMWsl7WfxyOmAWrMDWWBw hpBRx8PsWg4nNd3GH50o7wMgC8qbSv//YlNXROhXGR5pyDPVPQH2L8SDCZZxRIK/ slg8VXLWtdZrvaJoUf/vkFfwGvKmNag9trQWOI5gU5LKCjPUfWbzel0FDR4ItUCr pXdpb89Pbn7UNYFVIh+8BJ3HRZahgDPq77Vv7lymc8bzkw02UktU -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:29 2024 by rpki-client on console-ams.rpki-client.org