$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa File: 219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa (raw, json) Hash identifier: 2HqP9ESPqgtOd32/AhT8DFV0cMX6+rj4b0aGcKExcgs= Subject key identifier: E9:BC:F9:80:7E:F8:64:97:AF:B5:B9:94:6B:52:78:DB:FE:07:49:DC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285847BEF6D685D3EA68C112765700 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 19802 IP address blocks: 216.238.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d6:85:d3:ea:68:c1:12:76:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=8495d8b3-edee-4e21-92a9-402b852598d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:e3:da:9f:fe:26:0d:ea:85:ce:18:d4:f3: b4:2b:10:f7:3b:cb:cd:79:61:d8:b8:4a:dc:5c:8f: a1:fc:fc:e2:d2:c2:06:51:8a:2d:0b:da:45:50:5e: 5e:b1:75:b9:45:7b:9d:97:d8:b6:d1:14:fd:bd:0f: 96:44:ce:5c:3f:f5:fa:5e:e6:33:4d:4c:e3:eb:77: 70:cc:84:8b:31:81:e8:ce:f0:ef:69:98:c3:31:95: 9a:f6:c6:c6:7d:ac:43:6d:74:ab:57:2e:73:4b:2d: dc:ea:bf:f6:eb:4c:fb:09:a9:f7:f3:c4:54:74:c5: 52:67:4e:dc:93:d3:5b:ce:e3:b5:1c:42:86:b5:37: 55:c9:10:c0:18:05:bb:90:aa:fb:da:27:50:b0:15: 40:a9:49:4f:56:f0:a1:f0:ef:28:a7:70:c6:13:ed: 1e:05:86:55:ac:0a:77:cb:97:b0:23:3b:03:23:af: 86:fd:35:1e:d5:ce:47:38:4f:4e:42:71:33:ec:a0: 8f:c6:41:54:28:17:ef:9e:e8:dc:2f:9a:95:3b:23: 78:8f:34:7b:e6:68:ed:cb:8c:2f:6c:2f:29:e2:b8: 2a:dd:2f:32:ff:04:2b:57:9a:59:c3:50:1a:f0:0d: ad:89:e3:78:24:9e:a2:46:8a:94:01:5e:71:5b:ba: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BC:F9:80:7E:F8:64:97:AF:B5:B9:94:6B:52:78:DB:FE:07:49:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:69:cb:a3:7a:f4:f3:b8:87:d1:67:4d:18:ae:40:f3:69:70: 6c:62:a7:a7:f1:6f:72:fb:fa:bc:17:2b:ea:60:59:5f:85:bd: 28:5e:93:db:e0:e8:ec:79:5c:0a:b1:30:94:61:97:eb:63:b5: 36:37:fb:01:06:71:24:97:ee:da:fc:c5:94:7b:07:3b:0d:24: cc:66:fc:ae:68:27:a9:e5:91:c2:71:b1:29:a3:16:61:18:2b: b7:ad:5e:ac:9f:d3:8a:92:4e:f0:0f:66:7c:34:89:0d:9a:72: 29:f7:97:a7:df:35:6d:9d:09:3e:c3:98:8e:cd:77:d4:bd:8e: 08:c5:0b:4d:74:05:bf:73:7b:07:cd:7f:4f:ff:46:94:ba:e6: 52:e0:70:17:0d:94:24:b5:a4:e6:2a:20:25:e2:1e:1b:54:bc: 52:e1:eb:aa:85:ea:c1:e3:c4:34:5a:6b:13:f1:37:ae:c3:51: be:bb:f1:8d:11:38:39:e0:6a:b8:dc:c8:16:84:20:8b:ee:43: 87:76:4d:9c:89:87:84:85:49:bb:aa:27:9a:cd:7f:39:7b:5a: a9:bc:89:c3:79:be:ff:28:88:fb:b5:17:c0:0e:bc:90:cc:5e: 66:c7:f7:30:bf:a6:2a:88:e7:10:f5:c7:2a:4d:bc:8b:e4:a7: b1:0a:8d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9taF0+powRJ2VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk ODQ5NWQ4YjMtZWRlZS00ZTIxLTkyYTktNDAyYjg1MjU5OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbLj2p/+Jg3qhc4Y1PO0KxD3O8vNeWHYuErc XI+h/Pzi0sIGUYotC9pFUF5esXW5RXudl9i20RT9vQ+WRM5cP/X6XuYzTUzj63dw zISLMYHozvDvaZjDMZWa9sbGfaxDbXSrVy5zSy3c6r/260z7Can388RUdMVSZ07c k9NbzuO1HEKGtTdVyRDAGAW7kKr72idQsBVAqUlPVvCh8O8op3DGE+0eBYZVrAp3 y5ewIzsDI6+G/TUe1c5HOE9OQnEz7KCPxkFUKBfvnujcL5qVOyN4jzR75mjty4wv bC8p4rgq3S8y/wQrV5pZw1Aa8A2tieN4JJ6iRoqUAV5xW7q5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm8+YB++GSXr7W5lGtSeNv+B0ncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjE5ZDQ1OTYtNTY3NS0z MGVlLThjMjAtOGJkNmU2OWVjMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9py6N69PO4h9FnTRiuQPNpcGxip6fxb3L7+rwXK+pgWV+FvShek9vg 6Ox5XAqxMJRhl+tjtTY3+wEGcSSX7tr8xZR7BzsNJMxm/K5oJ6nlkcJxsSmjFmEY K7etXqyf04qSTvAPZnw0iQ2acin3l6ffNW2dCT7DmI7Nd9S9jgjFC010Bb9zewfN f0//RpS65lLgcBcNlCS1pOYqICXiHhtUvFLh66qF6sHjxDRaaxPxN67DUb678Y0R ODngarjcyBaEIIvuQ4d2TZyJh4SFSbuqJ5rNfzl7Wqm8icN5vv8oiPu1F8AOvJDM XmbH9zC/piqI5xD1xypNvIvkp7EKjQY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:17 2024 by rpki-client on console-ams.rpki-client.org