$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa File: a71bf399-4b1b-3700-8996-65eac6cc402a.roa (raw, json) Hash identifier: QWBuYGaZ2Nhv0MiGlrl8xJv9SYg0ZyXIw5xPnRKXEnk= Subject key identifier: 5D:B5:75:E8:42:A2:24:65:9B:AE:40:45:1A:40:A4:9F:D9:74:73:DB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858474585E816DEEB60EBDEABC080 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa Signing time: Fri 20 Sep 2024 01:00:31 +0000 ROA not before: Fri 20 Sep 2024 01:00:31 +0000 ROA not after: Thu 19 Dec 2024 02:00:31 +0000 asID: 13536 IP address blocks: 66.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:85:e8:16:de:eb:60:eb:de:ab:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 20 01:00:31 2024 GMT Not After : Dec 19 02:00:31 2024 GMT Subject: CN=9274b443-281c-4149-a16b-587163bdc82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:d0:3e:21:22:45:47:06:7f:b2:34:9c:0f: 5b:7e:df:66:2f:15:79:ac:37:bf:1d:2b:05:29:27: 74:bb:01:11:02:0c:f5:b4:b0:ef:8d:89:47:da:eb: fb:32:4a:7a:9b:d1:9e:df:0c:b1:ee:7c:1a:f3:6d: db:ed:91:08:06:72:96:b0:cc:c5:32:1c:8d:43:f1: 96:a0:50:a8:f4:54:08:59:f8:e6:fd:b6:1d:b5:0c: f4:d7:eb:a3:a3:d0:46:78:4c:97:d8:4f:fd:9b:7a: ab:c2:e3:11:09:96:81:51:af:ac:9a:01:8f:30:f8: fa:bb:87:e4:6e:c2:e0:45:5c:f0:9a:42:4e:39:76: fa:07:16:3d:c3:1c:c6:2c:a8:03:22:a8:a3:89:25: 15:fc:ea:8d:05:49:70:a8:ee:35:b7:5b:33:70:a6: 24:c3:55:62:1a:7d:a2:4e:82:37:57:6a:a5:1e:23: 12:b9:b8:a8:03:92:db:38:f6:3c:1a:37:20:69:3d: 5c:3c:52:5b:48:2e:68:80:94:32:53:84:27:6a:28: fa:bd:76:33:88:ff:c3:6f:56:f2:d5:0d:e7:fa:b6: 9f:3c:99:60:3c:93:76:88:21:dd:7d:9a:dc:3a:53: 45:89:fb:49:19:00:da:b6:63:af:3e:d8:6d:55:0c: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B5:75:E8:42:A2:24:65:9B:AE:40:45:1A:40:A4:9F:D9:74:73:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/a71bf399-4b1b-3700-8996-65eac6cc402a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.231.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d3:fd:5a:47:a9:2a:e1:b7:1c:21:d0:28:c2:9b:5a:79:54: 6f:42:be:a2:2b:79:cd:d3:2f:26:80:01:ef:1e:92:08:5c:91: 47:f0:d0:20:90:94:80:2b:5d:1f:b8:4a:63:11:b4:6a:63:5c: 44:86:ae:f6:dc:73:dc:08:0b:3c:a4:43:e1:fe:7f:f9:a1:30: e8:fd:37:aa:09:3e:a2:eb:25:56:a0:f2:25:24:cd:30:37:75: a7:64:e5:0c:4c:0e:76:41:e9:53:31:5e:12:d4:1f:ee:8d:2f: 26:ce:5d:c1:23:c8:40:d5:cd:dd:45:4f:3f:b6:20:4e:38:03: 5c:6c:0f:ef:2d:50:d4:b0:de:4b:7f:f1:b9:9e:de:59:91:65: 03:18:48:4a:76:9f:66:82:be:6d:74:31:36:94:dd:ae:fb:79: 23:78:41:e4:49:c7:8c:8d:a2:bb:90:9c:93:b7:e0:6c:af:24: 65:d8:db:85:e3:8b:0d:10:20:26:da:b3:90:1d:d6:d6:8e:03: d0:95:7a:cf:b8:f5:6e:77:a4:23:71:cf:ee:05:1d:39:dd:a7: ca:e6:33:0e:f6:d7:59:b0:97:a9:14:75:0d:1d:c8:07:79:d6: 1c:7d:b3:b6:52:5f:33:8a:e8:68:c5:8e:00:ad:68:5a:00:e7: 73:34:31:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhegW3utg696rwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk OTI3NGI0NDMtMjgxYy00MTQ5LWExNmItNTg3MTYzYmRjODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokHQPiEiRUcGf7I0nA9bft9mLxV5rDe/HSsF KSd0uwERAgz1tLDvjYlH2uv7Mkp6m9Ge3wyx7nwa823b7ZEIBnKWsMzFMhyNQ/GW oFCo9FQIWfjm/bYdtQz01+ujo9BGeEyX2E/9m3qrwuMRCZaBUa+smgGPMPj6u4fk bsLgRVzwmkJOOXb6BxY9wxzGLKgDIqijiSUV/OqNBUlwqO41t1szcKYkw1ViGn2i ToI3V2qlHiMSubioA5LbOPY8GjcgaT1cPFJbSC5ogJQyU4Qnaij6vXYziP/Db1by 1Q3n+rafPJlgPJN2iCHdfZrcOlNFiftJGQDatmOvPthtVQxlCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF21dehCoiRlm65ARRpApJ/ZdHPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYTcxYmYzOTktNGIxYi0z NzAwLTg5OTYtNjVlYWM2Y2M0MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQufYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXT/VpHqSrhtxwh0CjCm1p5VG9CvqIrec3TLyaAAe8ekghckUfw0CCQ lIArXR+4SmMRtGpjXESGrvbcc9wICzykQ+H+f/mhMOj9N6oJPqLrJVag8iUkzTA3 dadk5QxMDnZB6VMxXhLUH+6NLybOXcEjyEDVzd1FTz+2IE44A1xsD+8tUNSw3kt/ 8bme3lmRZQMYSEp2n2aCvm10MTaU3a77eSN4QeRJx4yNoruQnJO34GyvJGXY24Xj iw0QICbas5Ad1taOA9CVes+49W53pCNxz+4FHTndp8rmMw7211mwl6kUdQ0dyAd5 1hx9s7ZSXzOK6GjFjgCtaFoA53M0MV0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:17 2024 by rpki-client on console-ams.rpki-client.org