$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa File: 1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json) Hash identifier: ps+ydVEzSY4iZYwLzyAsrobjT9OeYrrVm+jq8gRfhrw= Subject key identifier: 29:A8:02:11:17:F4:1B:7D:B3:4D:DD:A4:A6:A5:22:B6:C3:44:11:23 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584795168F87A74662CF7D55C6C0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa Signing time: Fri 18 Oct 2024 13:00:41 +0000 ROA not before: Fri 18 Oct 2024 13:00:41 +0000 ROA not after: Thu 16 Jan 2025 14:00:41 +0000 asID: 14618 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:95:16:8f:87:a7:46:62:cf:7d:55:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Oct 18 13:00:41 2024 GMT Not After : Jan 16 14:00:41 2025 GMT Subject: CN=54754eaa-f8ec-4d79-b478-9bcf9136091f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:80:bd:ea:85:4c:54:0e:43:e3:e2:74:2a:7a: a8:9e:c2:e0:49:83:85:58:20:9d:16:a6:09:41:11: 28:00:ba:0e:c3:ba:c5:2b:41:6e:67:aa:3f:c8:31: 4a:61:a3:e9:d0:f1:73:44:2e:23:b4:2e:b6:67:6b: 19:f9:43:f0:8a:b6:5d:4d:25:14:99:ff:f6:0e:e0: 53:a2:f5:0f:a6:3f:20:6f:2b:10:22:83:cf:45:01: b0:61:8e:e6:9e:2c:16:1b:96:4c:fa:1a:d9:be:24: 3c:ce:54:96:b3:e3:b5:9d:63:94:75:e8:d6:03:7a: 78:1c:30:87:98:99:6c:a1:82:ae:73:25:02:33:c7: 7a:7a:ba:95:7f:fc:c9:0c:e9:28:08:b2:fe:4c:54: d4:83:1f:82:9f:52:0a:87:23:5e:64:31:62:1b:82: 19:ea:05:45:28:e8:f0:9f:b9:03:2d:04:55:53:f5: 97:76:ba:8a:18:79:e1:a3:1f:d3:8e:e6:bb:7d:5f: a7:76:4c:dc:b6:60:d3:0a:d0:d8:d0:18:5e:26:27: 65:9d:a8:1f:52:72:4f:af:e8:aa:22:dd:1d:94:74: 3d:36:64:9c:01:bc:ad:27:a1:00:32:c5:4d:74:bb: ad:08:df:88:5a:a5:00:13:ad:14:6e:df:95:b8:cd: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A8:02:11:17:F4:1B:7D:B3:4D:DD:A4:A6:A5:22:B6:C3:44:11:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:da:ed:33:8c:0c:bc:3f:9f:63:8d:81:a4:ac:c5:97:54:d8: cb:ea:0d:14:41:dd:e5:8c:4e:f7:e1:7b:35:6e:e7:b8:f0:14: b8:7d:9f:a8:e1:b5:3c:82:46:27:c9:53:26:a3:2f:48:c2:97: 98:d8:c8:28:9a:0f:58:bb:f6:96:95:31:57:7c:f8:c0:66:1f: 34:5a:19:c6:d6:85:7a:85:26:58:4f:16:6e:ff:55:e0:2a:a4: 0d:2a:53:b0:b3:20:e2:e0:6e:7d:32:d6:42:22:cf:63:ed:5c: ff:cc:ea:c1:18:c8:ee:26:bc:b9:4e:c7:44:25:ca:d6:76:6c: 28:a5:e6:84:e3:be:62:56:51:23:2d:d2:18:95:0f:5f:b8:d8: 87:63:b3:ee:28:06:2a:40:42:2a:00:b8:24:0a:1a:f5:3a:d7: f8:b3:9e:be:e0:1a:5b:6f:f4:dd:8b:29:60:3e:c0:ee:d1:8f: 09:d6:ab:b3:ce:20:d6:28:d6:8d:3e:ba:f0:3c:fc:97:ed:2c: 50:fb:c3:b8:9e:8e:a9:83:82:95:68:ed:f3:a1:67:0a:bf:40: 43:98:99:90:e3:06:56:47:e7:29:77:0b:10:b3:a4:22:14:fd: e6:d6:3f:36:92:1c:a8:bb:ca:37:23:58:34:fe:8e:2e:84:41: 23:d6:dd:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeVFo+Hp0Ziz31VxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk NTQ3NTRlYWEtZjhlYy00ZDc5LWI0NzgtOWJjZjkxMzYwOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4C96oVMVA5D4+J0KnqonsLgSYOFWCCdFqYJ QREoALoOw7rFK0FuZ6o/yDFKYaPp0PFzRC4jtC62Z2sZ+UPwirZdTSUUmf/2DuBT ovUPpj8gbysQIoPPRQGwYY7mniwWG5ZM+hrZviQ8zlSWs+O1nWOUdejWA3p4HDCH mJlsoYKucyUCM8d6erqVf/zJDOkoCLL+TFTUgx+Cn1IKhyNeZDFiG4IZ6gVFKOjw n7kDLQRVU/WXdrqKGHnhox/Tjua7fV+ndkzctmDTCtDY0BheJidlnagfUnJPr+iq It0dlHQ9NmScAbytJ6EAMsVNdLutCN+IWqUAE60Ubt+VuM3mAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmoAhEX9Bt9s03dpKalIrbDRBEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMWQwNzA1OGMtOTFlMS0z ZThjLWI4NTUtNjZiNGU4MWU2NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXa7TOMDLw/n2ONgaSsxZdU2MvqDRRB3eWMTvfhezVu57jwFLh9n6jh tTyCRifJUyajL0jCl5jYyCiaD1i79paVMVd8+MBmHzRaGcbWhXqFJlhPFm7/VeAq pA0qU7CzIOLgbn0y1kIiz2PtXP/M6sEYyO4mvLlOx0QlytZ2bCil5oTjvmJWUSMt 0hiVD1+42Idjs+4oBipAQioAuCQKGvU61/iznr7gGltv9N2LKWA+wO7RjwnWq7PO INYo1o0+uvA8/JftLFD7w7iejqmDgpVo7fOhZwq/QEOYmZDjBlZH5yl3CxCzpCIU /ebWPzaSHKi7yjcjWDT+ji6EQSPW3Ts= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:21 2024 by rpki-client on console-ams.rpki-client.org