$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa File: e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa (raw, json) Hash identifier: HICyZYWW1THzBNKx3CgDGuuOFOtVrQ78BCLGjO9OybA= Subject key identifier: 8E:DA:86:4F:43:E1:8F:E9:BD:DE:A1:E5:03:CB:0D:86:D5:76:5A:98 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F432858478CB692424854372F6734F700 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 14618 IP address blocks: 170.225.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:92:42:48:54:37:2f:67:34:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=1df23cea-e969-4af7-a361-0babb24126d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:2b:21:2c:a0:7d:1d:e4:ee:de:c9:89:cf: 16:72:c6:b7:9e:19:86:b7:10:bf:28:71:80:78:89: 52:52:a6:0b:55:3b:60:97:d2:cd:bb:f3:76:c5:b1: 6c:52:f7:c5:00:ad:35:18:24:9f:09:f4:de:6b:d3: 15:75:d3:67:e7:2f:9b:dd:93:62:41:f5:b2:dd:92: be:ab:45:cd:ad:9d:ef:89:55:6e:61:a0:5d:c3:23: 69:49:6c:cd:98:ab:62:ca:06:5d:42:00:cc:d6:9f: a1:4e:53:e2:52:54:98:0e:eb:91:d2:ad:58:ae:90: af:15:91:0c:d3:18:f7:46:bf:7f:51:10:77:39:75: ca:00:49:7c:7d:bd:73:03:3a:06:78:0c:9b:72:09: 24:48:2d:d6:8c:16:79:73:5b:56:39:df:f7:80:26: ce:ef:74:3f:24:aa:14:39:fc:14:c8:75:23:35:34: 1b:51:30:90:c7:fd:cd:00:c6:ff:9d:bb:7c:58:8b: 21:42:6a:17:f2:61:ba:7e:03:9e:23:fe:30:e5:0b: 37:20:70:f4:88:24:c8:3b:18:30:b0:26:f1:d3:71: fc:fc:41:95:30:61:5c:cc:79:58:77:3c:97:a0:9c: bb:75:2a:6d:18:aa:c1:42:69:d1:d0:bc:fe:6a:07: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:86:4F:43:E1:8F:E9:BD:DE:A1:E5:03:CB:0D:86:D5:76:5A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/e1e69ec7-1c9b-33cf-8623-0cf33c6cf293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1e:be:d7:03:d2:56:11:be:ea:29:ba:d2:a4:c2:64:ca:98: f2:37:b2:2b:be:db:85:9d:18:4a:a1:ab:19:51:95:86:9e:e2: 2f:3f:3e:5d:30:49:94:29:a4:37:99:b6:77:e9:bb:25:58:8d: 14:1d:28:d0:9b:2c:80:8e:07:a1:fb:d3:19:60:89:03:00:45: fb:06:6d:70:ca:c8:c6:82:76:01:a9:76:f8:52:a3:9c:b6:83: 76:d5:d3:25:50:53:6c:0d:01:af:cf:e6:e2:e2:d2:9a:dc:e6: 43:54:01:b8:16:cb:32:b2:70:00:f5:4d:b1:94:90:2b:7f:e4: 56:5d:2e:f1:9c:78:fb:13:80:aa:1e:f4:4a:94:3a:be:b4:ef: f9:c8:3b:f2:f5:d0:a0:48:6a:f5:95:c5:f6:cb:04:fb:13:44: 29:84:b7:82:64:db:3f:94:e1:30:dd:c2:d5:79:a7:8d:e1:f7: e0:29:0c:72:89:6b:61:95:87:62:9d:92:1b:56:10:f8:39:24: c2:5c:a0:7d:f2:f2:5b:b1:c1:0f:90:cb:18:95:f8:8d:37:58: 29:ac:32:b3:e1:8b:53:7b:4e:a2:54:91:f5:c7:b4:23:b2:cb: 6e:78:a6:49:ca:b2:3e:bb:91:bf:8d:cb:28:29:20:a4:8e:9d: 4b:5e:05:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpJCSFQ3L2c09wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk MWRmMjNjZWEtZTk2OS00YWY3LWEzNjEtMGJhYmIyNDEyNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoborISygfR3k7t7Jic8Wcsa3nhmGtxC/KHGA eIlSUqYLVTtgl9LNu/N2xbFsUvfFAK01GCSfCfTea9MVddNn5y+b3ZNiQfWy3ZK+ q0XNrZ3viVVuYaBdwyNpSWzNmKtiygZdQgDM1p+hTlPiUlSYDuuR0q1YrpCvFZEM 0xj3Rr9/URB3OXXKAEl8fb1zAzoGeAybcgkkSC3WjBZ5c1tWOd/3gCbO73Q/JKoU OfwUyHUjNTQbUTCQx/3NAMb/nbt8WIshQmoX8mG6fgOeI/4w5Qs3IHD0iCTIOxgw sCbx03H8/EGVMGFczHlYdzyXoJy7dSptGKrBQmnR0Lz+agcqaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7ahk9D4Y/pvd6h5QPLDYbVdlqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZTFlNjllYzctMWM5Yi0z M2NmLTg2MjMtMGNmMzNjNmNmMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMevtcD0lYRvuoputKkwmTKmPI3siu+24WdGEqhqxlRlYae4i8/Pl0w SZQppDeZtnfpuyVYjRQdKNCbLICOB6H70xlgiQMARfsGbXDKyMaCdgGpdvhSo5y2 g3bV0yVQU2wNAa/P5uLi0prc5kNUAbgWyzKycAD1TbGUkCt/5FZdLvGcePsTgKoe 9EqUOr607/nIO/L10KBIavWVxfbLBPsTRCmEt4Jk2z+U4TDdwtV5p43h9+ApDHKJ a2GVh2KdkhtWEPg5JMJcoH3y8luxwQ+QyxiV+I03WCmsMrPhi1N7TqJUkfXHtCOy y254pknKsj67kb+NyygpIKSOnUteBWA= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:10 2024 by rpki-client on console-ams.rpki-client.org