$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa File: f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json) Hash identifier: p/EjZFjS7Oes4niH2GSNV08RgJOX1c9NLsf8BCJjbp8= Subject key identifier: 10:67:E9:4F:5C:CA:A4:C3:DA:88:2F:6F:55:D6:96:FA:5E:28:4F:8F Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F432858475BDB7A815326E8CF89D97200 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa Signing time: Sat 28 Sep 2024 01:00:31 +0000 ROA not before: Sat 28 Sep 2024 01:00:31 +0000 ROA not after: Fri 27 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5b:db:7a:81:53:26:e8:cf:89:d9:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 28 01:00:31 2024 GMT Not After : Dec 27 02:00:31 2024 GMT Subject: CN=f25ac174-ad0e-499e-9201-2e02fa704ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:17:09:4d:18:73:4c:b3:b5:c9:e9:90:29: 48:e1:f1:ed:c4:fb:47:bd:78:32:00:17:6e:39:81: a5:8d:bb:95:44:e1:e2:14:11:18:ce:35:31:c6:17: 08:8d:55:a1:f4:31:bf:2b:e8:f5:1d:6a:0d:3a:dd: 32:c7:3e:82:03:79:d3:71:ba:4a:2d:03:dc:57:82: 20:8c:53:eb:b5:fd:1e:8b:ad:52:86:4c:39:84:c4: 27:a3:4c:0d:88:61:bb:03:79:a1:c0:3a:f5:77:28: 4c:eb:c0:5b:42:db:f4:6a:2d:6f:08:9d:cd:95:7e: 66:6c:f9:1e:11:62:65:31:d3:c1:d2:4e:35:c6:3f: 7c:71:41:fc:c7:0c:08:94:bd:2f:de:18:80:e6:18: ae:7f:47:b8:e3:26:2f:09:24:b1:c3:f9:88:73:68: e4:87:c1:b0:f5:60:31:e0:dc:bb:06:32:57:48:fe: 4e:18:36:c1:b1:a3:6a:ae:d0:40:86:44:7b:08:32: ba:c6:04:57:bd:66:b7:c3:34:bc:13:ac:56:9a:95: 0f:02:00:84:95:17:c8:74:10:6a:5a:08:b1:94:ff: d6:16:12:4d:95:6e:73:3b:4a:ad:e5:e0:84:e5:fd: 62:29:62:b7:3a:31:fa:c4:ce:a1:22:83:cc:f8:cd: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:67:E9:4F:5C:CA:A4:C3:DA:88:2F:6F:55:D6:96:FA:5E:28:4F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:24:58:ca:d9:f7:ea:4e:e3:52:ca:2b:fa:a0:f8:9b:96:cb: 5a:e0:8c:91:73:5a:4a:5f:f3:55:b5:8a:f0:78:f2:59:df:09: aa:6a:87:93:39:39:a4:0c:5f:14:06:5a:3c:d1:67:bd:33:3c: a3:83:80:81:29:85:6c:ca:98:4f:74:9e:7d:41:4e:41:36:17: e8:10:7d:99:ac:11:ba:70:19:56:c3:20:ca:db:f7:74:e0:3b: 1d:88:d6:a3:67:28:dc:ce:ae:47:ea:19:19:f0:57:84:25:e1: a8:fe:99:77:e8:25:5b:2d:61:9e:63:19:c8:54:76:ad:8b:de: b7:7c:0f:a5:3c:69:86:fa:93:6f:cd:2f:16:83:1d:07:84:ff: 63:20:2f:29:01:ee:3c:de:f4:f4:8a:f7:7e:4e:ed:c6:93:14: 41:34:d7:93:5d:a9:ee:29:dc:c2:31:c2:13:e1:af:83:f1:47: f6:d7:aa:17:b6:f5:4c:7e:d7:cb:79:56:29:41:2c:17:4b:be: 05:8d:0c:79:e4:e0:e4:80:68:c0:f0:4a:a6:0d:5b:4d:ec:0d: 8c:43:70:54:66:7d:84:c7:1c:3c:7f:a0:32:ec:e5:6f:c0:f9: 07:76:e0:2e:dc:d4:3a:8a:8d:f5:d7:d0:0f:78:82:b8:e6:c4: aa:42:8e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdb23qBUyboz4nZcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZjI1YWMxNzQtYWQwZS00OTllLTkyMDEtMmUwMmZhNzA0YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvgXCU0Yc0yztcnpkClI4fHtxPtHvXgyABdu OYGljbuVROHiFBEYzjUxxhcIjVWh9DG/K+j1HWoNOt0yxz6CA3nTcbpKLQPcV4Ig jFPrtf0ei61Shkw5hMQno0wNiGG7A3mhwDr1dyhM68BbQtv0ai1vCJ3NlX5mbPke EWJlMdPB0k41xj98cUH8xwwIlL0v3hiA5hiuf0e44yYvCSSxw/mIc2jkh8Gw9WAx 4Ny7BjJXSP5OGDbBsaNqrtBAhkR7CDK6xgRXvWa3wzS8E6xWmpUPAgCElRfIdBBq WgixlP/WFhJNlW5zO0qt5eCE5f1iKWK3OjH6xM6hIoPM+M1IMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBn6U9cyqTD2ogvb1XWlvpeKE+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZjU5MWMzZjgtZmU2Mi0z Y2VhLThiNGUtNDZlMmVjYTMyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYkWMrZ9+pO41LKK/qg+JuWy1rgjJFzWkpf81W1ivB48lnfCapqh5M5 OaQMXxQGWjzRZ70zPKODgIEphWzKmE90nn1BTkE2F+gQfZmsEbpwGVbDIMrb93Tg Ox2I1qNnKNzOrkfqGRnwV4Ql4aj+mXfoJVstYZ5jGchUdq2L3rd8D6U8aYb6k2/N LxaDHQeE/2MgLykB7jze9PSK935O7caTFEE015Ndqe4p3MIxwhPhr4PxR/bXqhe2 9Ux+18t5VilBLBdLvgWNDHnk4OSAaMDwSqYNW03sDYxDcFRmfYTHHDx/oDLs5W/A +Qd24C7c1DqKjfXX0A94grjmxKpCjus= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:32 2024 by rpki-client on console-fra.rpki-client.org