$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json) Hash identifier: /xP6oDOG/1KhgUdfJ8UyLeESoPqKRaAo4IqX9rIeX/I= Subject key identifier: 46:65:5A:D1:64:BB:54:72:18:83:9F:D4:E4:85:7D:10:7E:86:7C:F0 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285847967BCC270925A850598133E4 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 16509 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:cc:27:09:25:a8:50:59:81:33:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=2b64aa2a-a856-479d-9b87-2dc3375531b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:ed:d3:31:cd:c7:73:56:33:76:42:1d:88: dd:de:1b:8f:bc:72:77:f2:a1:6e:e0:86:ba:07:d9: ba:58:74:6b:70:f5:b0:dd:a7:f6:e3:bf:2f:53:d0: b1:63:b1:ad:9b:58:26:d2:69:d3:56:01:18:2a:ec: a4:e9:79:02:e6:b6:41:9f:f1:9b:a0:bb:b5:f1:06: a9:84:c2:0c:d2:fb:84:58:a1:95:5c:68:69:ca:42: 50:c5:79:06:a0:4f:72:e8:e6:36:bc:82:02:11:34: e4:32:00:05:91:0f:e4:21:ed:3d:e4:c5:ce:85:0f: d5:a2:21:87:aa:c9:f8:c6:20:3e:2b:1a:7e:d1:8e: f5:7b:22:58:07:c4:3a:2e:75:ef:0c:b5:64:bc:f5: 0e:2c:72:70:56:50:9f:12:be:da:5c:dd:02:a5:89: 13:b7:21:7f:4f:cc:ab:13:96:d4:6d:76:37:b5:20: 94:5c:96:58:f8:fb:75:66:b1:b5:82:3c:dc:d9:aa: 8a:1f:c4:9c:19:a7:98:a9:d9:d2:12:bf:59:71:df: 5f:a6:2b:cf:cc:b6:a1:4c:00:62:96:cb:49:64:c8: 13:d4:c5:4b:f9:31:ac:52:8b:bc:12:fe:87:95:cb: 37:af:7c:d0:db:1a:93:70:37:8a:a7:c8:61:b9:cc: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:65:5A:D1:64:BB:54:72:18:83:9F:D4:E4:85:7D:10:7E:86:7C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:06:b7:73:97:44:59:f0:67:de:da:ef:10:65:0b:62:aa:6b: b4:c3:c7:6e:c6:21:f7:f9:cb:55:28:88:fe:a8:90:80:f7:da: 1a:29:9f:9a:d5:68:24:7d:0f:d9:02:36:f7:01:11:39:dd:04: ed:d2:81:8d:51:c3:07:01:f9:3d:c3:32:29:19:be:1d:6b:21: 17:ee:39:6b:f5:11:b6:0e:55:5c:07:f2:df:c8:45:60:90:34: f9:59:ac:53:03:79:b7:f5:e3:a6:66:49:2b:b6:f4:a4:74:77: 04:50:c1:0e:ae:55:03:e4:d0:65:d4:98:00:00:59:ab:9a:8c: 9e:66:96:d3:b7:74:dd:f0:7d:da:db:9b:fe:7d:bf:82:57:39: 90:60:89:55:fa:08:45:57:85:a4:6f:3e:ca:d7:cc:9d:ed:55: 4a:e0:54:40:31:9e:36:df:7c:07:eb:81:ea:ed:85:15:c7:ff: 92:ce:ea:81:85:bf:5d:36:39:bd:6c:0f:7d:a4:22:f4:fb:d2: 7e:56:97:7b:d4:2d:ba:6d:81:d3:80:34:11:5b:0b:e3:7b:18: b7:63:05:1f:1f:8e:0b:ae:e6:57:4c:ef:26:c1:59:70:1d:c8: 30:5f:7c:82:7a:71:fb:00:ab:36:88:f4:59:b6:d4:f6:cc:93: a7:37:57:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8wnCSWoUFmBM+QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk MmI2NGFhMmEtYTg1Ni00NzlkLTliODctMmRjMzM3NTUzMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk/t0zHNx3NWM3ZCHYjd3huPvHJ38qFu4Ia6 B9m6WHRrcPWw3af2478vU9CxY7Gtm1gm0mnTVgEYKuyk6XkC5rZBn/GboLu18Qap hMIM0vuEWKGVXGhpykJQxXkGoE9y6OY2vIICETTkMgAFkQ/kIe095MXOhQ/VoiGH qsn4xiA+Kxp+0Y71eyJYB8Q6LnXvDLVkvPUOLHJwVlCfEr7aXN0CpYkTtyF/T8yr E5bUbXY3tSCUXJZY+Pt1ZrG1gjzc2aqKH8ScGaeYqdnSEr9Zcd9fpivPzLahTABi lstJZMgT1MVL+TGsUou8Ev6Hlcs3r3zQ2xqTcDeKp8hhucwLdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZlWtFku1RyGIOf1OSFfRB+hnzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWMzMDRkMzQtODk1MC0z NWQ1LWFjZWMtZDJkMTM3NzNiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYGt3OXRFnwZ97a7xBlC2Kqa7TDx27GIff5y1UoiP6okID32hopn5rV aCR9D9kCNvcBETndBO3SgY1RwwcB+T3DMikZvh1rIRfuOWv1EbYOVVwH8t/IRWCQ NPlZrFMDebf146ZmSSu29KR0dwRQwQ6uVQPk0GXUmAAAWauajJ5mltO3dN3wfdrb m/59v4JXOZBgiVX6CEVXhaRvPsrXzJ3tVUrgVEAxnjbffAfrgerthRXH/5LO6oGF v102Ob1sD32kIvT70n5Wl3vULbptgdOANBFbC+N7GLdjBR8fjguu5ldM7ybBWXAd yDBffIJ6cfsAqzaI9Fm21PbMk6c3V3U= -----END CERTIFICATE-----Generated at Thu Nov 21 15:31:39 2024 by rpki-client on console-fra.rpki-client.org