$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa File: c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json) Hash identifier: q4hHHyOz6WhzOvKmFe4fOaM2iIZN1KmlX2gxUe7Eu4I= Subject key identifier: 47:9F:2B:CB:A3:2E:36:AD:05:C4:4D:A3:8D:D3:E8:9E:B7:A3:F4:69 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858477230E6210B42A5B972931580 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 395831 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:e6:21:0b:42:a5:b9:72:93:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=45d6938e-d7dd-4031-8725-458629f78ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:6d:e6:aa:42:74:62:37:8e:78:1d:40:4d: 27:18:12:81:af:12:76:40:4c:88:7b:da:c6:b1:d5: 53:36:be:fa:e4:34:13:74:fb:36:86:39:1f:93:3b: dd:1f:b7:08:88:9f:5a:8c:8b:86:e7:9a:6f:f6:e4: c6:a6:44:67:e3:e9:a3:15:ef:50:cf:1e:97:4d:55: cd:63:9a:78:3a:44:7c:7f:2f:89:22:fa:35:e9:bc: ed:0a:32:fc:a0:b7:74:ec:57:7c:0a:0f:95:f2:c2: 1d:73:93:07:43:7b:63:ce:26:fe:41:16:e8:2e:b7: 9e:7f:8b:ca:fb:b6:7b:7a:e9:12:f9:f6:0a:60:25: e3:89:ba:13:b7:c8:6e:5b:62:ab:e2:50:3e:8f:74: 86:e5:10:fe:ed:c7:fb:6b:7d:d3:ee:25:44:ac:25: 7b:c0:bc:27:92:25:9c:04:a9:86:40:81:ea:ee:bb: 41:32:94:7f:5e:f7:95:15:d2:b9:cd:73:15:17:e8: bf:2e:98:06:4d:b5:7a:eb:ab:84:5c:d5:99:47:8a: 7b:f6:d0:6f:a7:83:e7:9c:7a:d5:6c:69:f1:38:ca: f8:62:e3:b6:43:09:a4:af:48:ee:e2:29:cd:a4:d2: 44:99:a9:95:73:77:ad:80:7d:2a:c3:ab:d2:8b:88: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9F:2B:CB:A3:2E:36:AD:05:C4:4D:A3:8D:D3:E8:9E:B7:A3:F4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:77:28:46:b8:f5:a6:4f:e1:84:29:54:e1:83:75:71:4f:d8: da:32:eb:28:af:b2:7d:0b:cb:e2:a3:9d:91:75:1a:a6:29:8d: 56:61:62:05:0e:65:be:97:9d:4f:02:47:d7:a5:c1:ba:7d:a1: 7d:f3:65:47:78:14:75:91:94:1d:10:80:ea:0c:8d:a0:1c:76: dd:9e:0c:e0:bf:75:ba:eb:cc:92:95:34:ae:02:33:04:e9:53: 89:70:45:90:37:c5:89:d5:d8:4c:48:3e:40:f6:71:ca:d4:7d: 53:df:52:78:4e:7d:68:2b:99:37:46:f7:e9:3f:91:6e:d8:2c: cc:08:33:51:c6:8a:3b:0f:a8:f3:fd:31:17:f3:b1:67:26:cb: a3:44:0c:86:b0:12:b6:92:97:3d:9e:4d:48:db:fd:a4:c6:70: b3:a7:16:f1:bb:94:d1:d7:4a:61:d8:4d:10:cb:e6:50:75:a8: 18:36:61:d1:b6:28:d0:b8:50:79:47:7b:a0:ed:69:16:eb:0a: ce:05:03:43:42:1c:40:c8:2c:77:d4:53:b7:ba:cf:1b:98:0c: 52:85:f8:6f:69:63:16:4e:58:27:b1:ef:c0:ae:e4:7e:7d:ec: d6:86:6c:32:39:a9:14:cc:42:b4:44:ff:07:36:ba:54:40:d5: 03:50:7a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOYhC0KluXKTFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk NDVkNjkzOGUtZDdkZC00MDMxLTg3MjUtNDU4NjI5Zjc4ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs59t5qpCdGI3jngdQE0nGBKBrxJ2QEyIe9rG sdVTNr765DQTdPs2hjkfkzvdH7cIiJ9ajIuG55pv9uTGpkRn4+mjFe9Qzx6XTVXN Y5p4OkR8fy+JIvo16bztCjL8oLd07Fd8Cg+V8sIdc5MHQ3tjzib+QRboLreef4vK +7Z7eukS+fYKYCXjiboTt8huW2Kr4lA+j3SG5RD+7cf7a33T7iVErCV7wLwnkiWc BKmGQIHq7rtBMpR/XveVFdK5zXMVF+i/LpgGTbV666uEXNWZR4p79tBvp4PnnHrV bGnxOMr4YuO2Qwmkr0ju4inNpNJEmamVc3etgH0qw6vSi4gdJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEefK8ujLjatBcRNo43T6J63o/RpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzJmZDNmMWQtN2RmNy0z Y2UwLTkyMzAtN2FhNzAwY2RiNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd3KEa49aZP4YQpVOGDdXFP2Noy6yivsn0Ly+KjnZF1GqYpjVZhYgUO Zb6XnU8CR9elwbp9oX3zZUd4FHWRlB0QgOoMjaAcdt2eDOC/dbrrzJKVNK4CMwTp U4lwRZA3xYnV2ExIPkD2ccrUfVPfUnhOfWgrmTdG9+k/kW7YLMwIM1HGijsPqPP9 MRfzsWcmy6NEDIawEraSlz2eTUjb/aTGcLOnFvG7lNHXSmHYTRDL5lB1qBg2YdG2 KNC4UHlHe6DtaRbrCs4FA0NCHEDILHfUU7e6zxuYDFKF+G9pYxZOWCex78Cu5H59 7NaGbDI5qRTMQrRE/wc2ulRA1QNQelo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:30 2024 by rpki-client on console-ams.rpki-client.org