$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa File: 42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa (raw, json) Hash identifier: 57yXZGpwegIuvTPzXTc6xsbasXtHgl7vEmucBbfJO/A= Subject key identifier: 1A:7B:77:6F:4D:73:9C:69:8F:10:E4:53:A6:16:3E:F4:96:ED:7D:DA Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285847B961765649DF7D6F589CD780 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 13536 IP address blocks: 207.136.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:76:56:49:df:7d:6f:58:9c:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=0d4ddbc0-61e6-42fc-a0dc-a2598a1da9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:ac:cb:09:70:13:4c:9f:7d:19:11:3a:75: 47:bf:2c:ca:5f:15:10:0e:92:53:bd:43:81:a6:2b: 77:eb:e8:7d:37:5c:d3:1a:d6:72:24:26:49:58:ff: bb:58:df:5e:fa:4b:3b:6c:9e:fa:a4:2a:f4:23:5e: d3:98:72:20:3a:02:9e:7e:f9:9a:6a:f2:13:ee:34: 56:ac:98:47:9e:46:3d:45:ff:dc:e8:d8:7c:1b:ce: 91:3b:11:00:0f:cf:5e:13:55:40:2d:bd:b8:6c:a2: d7:6a:ec:da:df:27:64:44:5a:69:a1:27:49:0f:a3: 7b:23:8b:33:32:74:1b:19:e6:32:75:83:bd:4b:fc: 0d:32:3a:da:ad:f0:2d:ca:bb:85:df:1d:e6:59:31: e6:41:8e:10:4a:26:87:d7:5c:ab:62:6d:15:a1:cf: 60:3a:c2:8e:7f:1b:1d:1c:98:2a:15:18:d3:a1:d4: 03:4f:91:24:7b:23:31:a1:a6:19:db:b6:e7:f4:6d: 49:ba:39:14:c3:e3:b5:9c:d0:90:8d:33:2f:c4:34: be:18:01:59:2a:bf:72:73:4e:99:d2:90:04:ab:ce: 83:f8:4a:7a:4b:92:ae:9f:b6:49:bb:d2:63:69:c9: d9:40:09:9c:50:0e:d6:01:58:15:41:e5:40:d0:a5: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7B:77:6F:4D:73:9C:69:8F:10:E4:53:A6:16:3E:F4:96:ED:7D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 207.136.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:68:6e:81:36:03:e7:c2:e3:21:47:4b:7e:1c:30:95:80:a2: a1:40:4b:33:b2:5b:09:cd:d0:b8:46:df:7e:bd:d7:f4:c1:7c: 1d:bc:94:ba:07:f9:70:fb:68:d7:39:2c:78:3d:e8:7a:b3:c4: 4f:f9:ad:36:40:eb:59:fb:bf:80:8a:84:17:6c:e2:ca:8e:ee: 77:76:7f:30:38:77:a0:88:06:50:00:e2:70:9c:d0:78:b5:5a: d5:11:65:54:84:25:8c:a1:d7:5f:c0:f1:bc:42:c4:d2:cc:5f: 08:6d:37:b0:1c:99:ca:62:0e:91:e6:d1:b8:ec:5f:b7:cb:57: 1b:28:82:bd:2f:b2:a6:4f:6a:0e:92:40:33:bc:0c:57:9d:b3: b3:7d:2d:4d:59:ff:20:38:a2:e3:31:fb:ac:eb:17:62:cd:eb: 0a:fc:71:70:e1:ca:cb:8e:b2:db:6d:96:31:3a:bf:aa:20:db: 67:1f:d5:82:5c:15:8a:72:a9:a3:1f:8b:a4:89:bf:b9:26:fa: ee:34:ba:07:b7:2f:45:05:08:2f:7d:52:7f:3b:0d:16:2b:be: a6:80:85:b5:cc:5c:ae:4c:4b:91:e4:61:1f:38:ed:39:ad:94: 1b:a5:08:12:07:3a:2f:fc:a6:47:a6:7f:62:e1:22:c5:8a:8a: 0e:75:4f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXZWSd99b1ic14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk MGQ0ZGRiYzAtNjFlNi00MmZjLWEwZGMtYTI1OThhMWRhOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFKsywlwE0yffRkROnVHvyzKXxUQDpJTvUOB pit36+h9N1zTGtZyJCZJWP+7WN9e+ks7bJ76pCr0I17TmHIgOgKefvmaavIT7jRW rJhHnkY9Rf/c6Nh8G86ROxEAD89eE1VALb24bKLXauza3ydkRFppoSdJD6N7I4sz MnQbGeYydYO9S/wNMjrarfAtyruF3x3mWTHmQY4QSiaH11yrYm0Voc9gOsKOfxsd HJgqFRjTodQDT5EkeyMxoaYZ27bn9G1JujkUw+O1nNCQjTMvxDS+GAFZKr9yc06Z 0pAEq86D+Ep6S5Kun7ZJu9JjacnZQAmcUA7WAVgVQeVA0KUaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp7d29Nc5xpjxDkU6YWPvSW7X3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDJhYmI4ZmUtNmI0Zi0z MGU5LWE3M2EtODhkNjI0NzQyMmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALloboE2A+fC4yFHS34cMJWAoqFASzOyWwnN0LhG33691/TBfB28lLoH +XD7aNc5LHg96HqzxE/5rTZA61n7v4CKhBds4sqO7nd2fzA4d6CIBlAA4nCc0Hi1 WtURZVSEJYyh11/A8bxCxNLMXwhtN7AcmcpiDpHm0bjsX7fLVxsogr0vsqZPag6S QDO8DFeds7N9LU1Z/yA4ouMx+6zrF2LN6wr8cXDhysuOstttljE6v6og22cf1YJc FYpyqaMfi6SJv7km+u40uge3L0UFCC99Un87DRYrvqaAhbXMXK5MS5HkYR847Tmt lBulCBIHOi/8pkemf2LhIsWKig51T40= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:22 2024 by rpki-client on console-fra.rpki-client.org