$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa File: dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa (raw, json) Hash identifier: E8iea2HdR8isEtYNSFlckqu5H9sepT2+x+/JNTqUrhs= Subject key identifier: 6C:D6:1D:96:BD:E6:67:37:97:8C:07:6F:73:C9:66:DD:72:57:85:61 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285847B1015E064B15BDE21AFC7D00 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 212238 IP address blocks: 172.102.218.0/24 maxlen: 24 216.158.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:5e:06:4b:15:bd:e2:1a:fc:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=87fbb5e8-345f-448f-ab79-eb9c18486074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:a4:72:a8:0c:ed:a4:71:9b:68:a1:ea:f2: ae:3f:f4:02:38:94:8d:cf:1d:cd:84:88:75:66:63: 58:19:43:92:c6:c2:2d:96:30:57:f2:96:1f:fa:04: 0b:2e:de:b8:69:17:29:94:75:59:77:69:c9:b9:43: 7c:52:b8:8c:e1:b8:5a:03:cb:61:25:0e:98:67:7c: 14:3b:49:f5:d9:e0:22:d6:df:29:a7:e5:27:1f:8b: 2d:56:34:c2:78:94:3e:3f:bc:a0:b2:90:06:46:b8: 4a:b1:45:80:15:fb:37:b6:ef:30:dd:ed:02:31:bf: f0:7c:a2:3e:f5:f3:5d:9a:29:5e:d0:1f:60:7e:a3: 5c:c7:3d:3d:1c:b0:7f:b3:57:1b:4c:a6:bc:2f:0f: 45:69:7e:92:97:1f:36:15:0b:09:8f:63:e4:b4:cf: 09:4f:4c:f7:ae:62:d5:e0:5c:29:58:dd:12:60:4e: 60:31:46:f8:80:79:5b:1e:de:ed:7e:f0:bf:d3:e3: 42:58:65:3e:2e:36:b7:6a:32:aa:9d:68:e9:2c:03: e3:ed:55:10:7c:c3:e2:4e:64:43:8f:e0:1b:64:b2: 22:cb:cc:c1:fd:c3:c0:02:bb:c2:3a:d2:7c:fc:c5: 4e:da:53:63:79:fa:38:68:3b:99:9f:20:d0:a7:12: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D6:1D:96:BD:E6:67:37:97:8C:07:6F:73:C9:66:DD:72:57:85:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.218.0/24 216.158.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ae:d4:90:83:28:ea:7f:7f:28:21:fc:7b:b5:b1:44:6b:c0: 4c:dc:8c:cd:77:24:6a:89:25:f5:16:c1:9a:eb:b0:64:ab:08: 6e:9c:19:86:d5:c9:c3:e5:b7:a7:8a:89:22:89:23:86:e6:b7: 8d:44:22:8f:b2:b0:80:8d:f3:71:9e:bd:8e:54:39:7d:c3:27: a0:48:b5:77:e2:fb:7a:47:99:9b:b6:c5:df:93:bc:4b:64:5b: 02:44:3d:d9:9a:87:da:60:83:6d:29:e8:51:ad:77:61:e4:c7: 19:40:90:a3:cc:39:1f:a7:57:52:08:de:57:d2:fc:31:c9:50: ac:c5:ca:09:30:4f:99:83:8f:d8:4a:e6:99:fc:c7:51:68:10: c7:71:8c:28:d9:55:b6:2c:17:ab:9f:bb:7f:5a:98:c7:1e:fd: 5c:ff:b1:eb:ac:37:0c:2b:a7:8c:c2:52:ac:e2:c0:3c:34:95: e5:eb:dc:de:8b:7b:3c:c4:a1:89:b9:af:64:71:8e:23:93:e4: 96:28:69:8a:e1:7c:47:db:d4:36:ea:6d:2a:44:29:8d:a1:dd: d0:00:e4:bc:a6:cd:61:b6:d0:eb:ba:d3:3d:f2:05:ec:a8:27: 71:91:4f:49:c1:fe:e4:ad:f4:45:82:cb:c3:90:8d:6f:04:dd: 1a:35:58:51 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEexAV4GSxW94hr8fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk ODdmYmI1ZTgtMzQ1Zi00NDhmLWFiNzktZWI5YzE4NDg2MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqCkcqgM7aRxm2ih6vKuP/QCOJSNzx3NhIh1 ZmNYGUOSxsItljBX8pYf+gQLLt64aRcplHVZd2nJuUN8UriM4bhaA8thJQ6YZ3wU O0n12eAi1t8pp+UnH4stVjTCeJQ+P7ygspAGRrhKsUWAFfs3tu8w3e0CMb/wfKI+ 9fNdmile0B9gfqNcxz09HLB/s1cbTKa8Lw9FaX6Slx82FQsJj2PktM8JT0z3rmLV 4FwpWN0SYE5gMUb4gHlbHt7tfvC/0+NCWGU+Lja3ajKqnWjpLAPj7VUQfMPiTmRD j+AbZLIiy8zB/cPAArvCOtJ8/MVO2lNjefo4aDuZnyDQpxJpFwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGzWHZa95mc3l4wHb3PJZt1yV4VhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZGMwMGUxOGQtMjgzNS0z MGIyLWFlZGMtMGY4MTg1ZWM0YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbaAwQA 2J7NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEyu1JCDKOp/fygh/Hu1sURrwEzcjM13JGqJJfUWwZrrsGSr CG6cGYbVycPlt6eKiSKJI4bmt41EIo+ysICN83GevY5UOX3DJ6BItXfi+3pHmZu2 xd+TvEtkWwJEPdmah9pgg20p6FGtd2HkxxlAkKPMOR+nV1II3lfS/DHJUKzFygkw T5mDj9hK5pn8x1FoEMdxjCjZVbYsF6ufu39amMce/Vz/seusNwwrp4zCUqziwDw0 leXr3N6LezzEoYm5r2RxjiOT5JYoaYrhfEfb1DbqbSpEKY2h3dAA5LymzWG20Ou6 0z3yBeyoJ3GRT0nB/uSt9EWCy8OQjW8E3Ro1WFE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:55 2024 by rpki-client on console-fra.rpki-client.org