$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa File: 0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa (raw, json) Hash identifier: TnRm1c/IHL+AkA9WGPPLIQHAv9l1Go3lIXdIL51uYco= Subject key identifier: 63:14:E4:56:B2:8D:15:41:9C:07:F3:13:F9:94:DB:1D:7C:86:79:8F Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584754E0CBE12367D145829945A0 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 394111 IP address blocks: 216.213.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:cb:e1:23:67:d1:45:82:99:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=2a3f8638-a9af-43ff-9edf-5b546ca6dbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:68:34:bb:c2:d2:a8:ed:06:cb:ba:79:41: b3:4b:a4:74:3a:28:fa:a8:31:ad:c0:c4:36:5c:4c: 7f:e2:bb:a3:ea:53:86:90:1b:bd:9b:67:e9:c0:b0: a8:02:ef:e5:ec:63:61:d2:13:6a:0c:d3:4c:07:0d: b9:df:b2:7a:e9:4e:fa:bd:dd:fe:ae:31:d3:62:fd: 2c:f5:ed:b5:db:74:17:42:da:10:b9:8e:05:ee:b4: 64:de:24:c9:d0:9f:19:65:d1:12:27:4b:01:f0:c6: 9a:41:30:cf:36:04:44:fe:f3:58:3c:22:f7:db:f3: d3:18:ac:23:ef:a4:79:67:5c:90:87:c2:99:d1:ca: 7a:7f:35:02:98:e2:2c:b4:74:e9:6c:9f:59:79:ae: 13:67:26:a4:08:46:b8:75:a4:6e:f4:d0:9c:00:9d: ed:2e:a4:07:bf:a9:97:8d:40:d1:fa:75:a3:d8:dc: b7:04:e0:43:70:85:c5:56:58:8e:3d:d8:03:56:48: 58:6d:3d:01:94:90:af:f6:15:c2:e0:36:6f:28:41: 18:55:df:6e:53:7b:22:60:3c:f0:c7:a5:d4:89:72: ef:3d:09:b8:b6:5e:b1:a5:4c:32:dd:bd:a3:8b:de: 37:c3:00:d8:00:a5:e2:a7:df:51:60:e5:0a:0c:56: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:14:E4:56:B2:8D:15:41:9C:07:F3:13:F9:94:DB:1D:7C:86:79:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/0ed1469f-de30-3a23-b0d4-761cc1186a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 216.213.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:68:4d:b9:c3:e3:bf:14:c2:df:b6:35:4f:65:13:33:ee:78: 6b:fc:69:12:d3:23:a2:3c:c8:72:a0:5b:24:2f:6b:41:fc:e7: 2f:60:f1:53:dd:1c:7a:fa:52:15:79:65:8d:ed:e3:34:43:d2: cf:a2:97:e9:43:10:db:fa:33:db:f3:5e:b5:cd:8a:ed:97:f3: 72:d5:01:58:b9:0c:07:d9:b2:1a:88:17:2f:74:68:0f:6a:e3: c6:db:ff:93:bd:f9:b4:7d:7e:ba:b4:3d:98:41:9c:9e:4d:39: 11:4f:fa:07:4c:79:5a:bc:14:c7:14:5b:9b:1e:7d:91:e9:fa: f4:1d:35:90:8d:c1:f1:4b:c5:04:f2:c6:d5:23:45:c3:27:21: f6:34:71:16:83:72:07:62:dc:bd:b3:1f:31:74:78:fa:b8:bb: b9:d2:af:4b:25:a5:44:2f:36:1b:04:de:ab:3b:87:c1:99:98: 7b:45:55:c5:12:90:0a:af:db:cb:39:97:b6:d5:e5:1a:20:ba: 8e:1b:bb:47:40:76:1b:c3:b2:a0:e8:b7:e0:eb:8e:4b:42:29: 67:80:b3:65:55:10:50:2a:9a:78:aa:f5:41:87:0a:59:20:32: fe:2a:24:6f:f3:ec:b5:bf:81:36:07:91:df:10:a6:66:af:fa: 77:e0:84:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4MvhI2fRRYKZRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MmEzZjg2MzgtYTlhZi00M2ZmLTllZGYtNWI1NDZjYTZkYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLdoNLvC0qjtBsu6eUGzS6R0Oij6qDGtwMQ2 XEx/4ruj6lOGkBu9m2fpwLCoAu/l7GNh0hNqDNNMBw2537J66U76vd3+rjHTYv0s 9e2123QXQtoQuY4F7rRk3iTJ0J8ZZdESJ0sB8MaaQTDPNgRE/vNYPCL32/PTGKwj 76R5Z1yQh8KZ0cp6fzUCmOIstHTpbJ9Zea4TZyakCEa4daRu9NCcAJ3tLqQHv6mX jUDR+nWj2Ny3BOBDcIXFVliOPdgDVkhYbT0BlJCv9hXC4DZvKEEYVd9uU3siYDzw x6XUiXLvPQm4tl6xpUwy3b2ji943wwDYAKXip99RYOUKDFZBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMU5FayjRVBnAfzE/mU2x18hnmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvMGVkMTQ2OWYtZGUzMC0z YTIzLWIwZDQtNzYxY2MxMTg2YTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2NUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpoTbnD478Uwt+2NU9lEzPueGv8aRLTI6I8yHKgWyQva0H85y9g8VPd HHr6UhV5ZY3t4zRD0s+il+lDENv6M9vzXrXNiu2X83LVAVi5DAfZshqIFy90aA9q 48bb/5O9+bR9frq0PZhBnJ5NORFP+gdMeVq8FMcUW5sefZHp+vQdNZCNwfFLxQTy xtUjRcMnIfY0cRaDcgdi3L2zHzF0ePq4u7nSr0slpUQvNhsE3qs7h8GZmHtFVcUS kAqv28s5l7bV5Roguo4bu0dAdhvDsqDot+DrjktCKWeAs2VVEFAqmniq9UGHClkg Mv4qJG/z7LW/gTYHkd8Qpmav+nfghDg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:11 2024 by rpki-client on console-ams.rpki-client.org