$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa File: b9395f62-c1cf-3e94-8786-53a487982b1e.roa (raw, json) Hash identifier: HUQLb0ecNMNE1NxZjg2+XAOnpNMXeAtAAjSfTcL7Akw= Subject key identifier: 51:49:2E:EE:3E:5D:76:73:9A:79:30:6B:D5:4D:87:16:7B:36:2E:8E Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285847BEF6D6769FE1D0C546563040 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 13536 IP address blocks: 216.238.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d6:76:9f:e1:d0:c5:46:56:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=78be3e07-e20e-4a29-9bfc-30cf64bfe244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:8e:43:67:50:f5:87:77:b5:c1:62:de:c4: 62:48:80:ea:7d:fa:b8:23:d7:46:04:67:dd:40:f5: 57:97:dc:a0:b2:01:1b:06:e1:75:35:44:0a:09:31: e2:70:7d:24:1e:42:65:c9:a4:45:99:6d:8a:5c:6e: df:eb:42:13:ae:0b:96:83:9c:d1:12:09:77:e1:14: 49:d1:26:04:01:90:96:01:ad:ce:9e:02:e7:85:0b: 9c:c0:80:35:2e:c3:6a:a1:6a:50:9c:92:f7:68:91: bd:aa:9a:0b:ae:c2:10:54:58:b2:13:88:48:94:ee: 44:61:e4:36:e3:8f:6f:78:e5:6a:61:45:17:ac:96: 39:66:ed:75:35:8d:4a:89:dc:20:ab:8d:2e:70:59: ce:a7:9c:bd:2f:e8:b0:10:a6:fc:a6:bd:29:d6:45: 4f:8e:5a:73:03:2f:24:25:0f:24:72:23:36:63:c7: 42:99:37:c9:e4:76:b2:68:ca:8d:45:cf:bd:8d:6b: 30:86:64:fd:de:e6:08:f7:7e:82:0e:13:84:fb:77: cb:06:b9:90:84:55:75:c7:8a:f4:0e:75:ed:78:c3: d0:6c:43:65:60:d1:1b:cb:0e:3d:b9:8c:e1:6a:b1: 28:eb:87:26:e9:b8:ab:06:b9:89:6c:1d:92:77:c7: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:49:2E:EE:3E:5D:76:73:9A:79:30:6B:D5:4D:87:16:7B:36:2E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:37:de:a8:fb:be:9e:26:19:84:24:84:19:80:ac:5c:d1:c2: ea:a7:18:9e:e6:04:f4:56:f2:85:4c:b9:ec:27:bc:d3:25:1a: 13:8d:64:e2:2d:46:2b:4b:1f:49:fc:8d:5c:de:0e:80:e1:09: 87:17:95:92:f9:eb:63:f1:d2:7d:8b:20:cb:c5:b6:33:f3:89: 94:68:8b:a8:5a:b7:85:dd:2f:4e:e7:06:0a:70:a4:b5:71:a8: 0d:56:a5:43:d4:b1:2a:32:08:2c:c5:0a:1d:84:f1:fd:0a:09: e3:d2:7a:97:87:97:ef:41:30:49:1a:b0:84:bc:12:ce:c6:0e: 0c:0e:5d:52:33:3a:93:6c:fc:d2:15:f5:b5:34:3b:fe:0e:ea: ba:0e:2e:94:68:d5:f9:2d:e8:ac:92:c7:a0:15:e9:af:23:65: b4:06:85:10:02:2e:8f:0a:4f:a6:df:c6:70:d3:50:7a:fa:a8: ab:74:54:08:f5:fe:28:0c:e5:cb:5c:c3:f1:8e:a2:5b:49:95: c4:4f:b0:f0:27:96:23:9e:08:5b:d8:57:a4:ec:92:62:8e:62: a6:06:d7:f9:18:c8:e9:a2:ca:5e:2d:3d:6f:bf:7a:7f:79:b6: 92:3c:9b:4f:f1:8d:2b:3c:90:6e:bb:82:d6:02:75:e7:3d:7e: 08:ac:03:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tZ2n+HQxUZWMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NzhiZTNlMDctZTIwZS00YTI5LTliZmMtMzBjZjY0YmZlMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPOOQ2dQ9Yd3tcFi3sRiSIDqffq4I9dGBGfd QPVXl9ygsgEbBuF1NUQKCTHicH0kHkJlyaRFmW2KXG7f60ITrguWg5zREgl34RRJ 0SYEAZCWAa3OngLnhQucwIA1LsNqoWpQnJL3aJG9qpoLrsIQVFiyE4hIlO5EYeQ2 449veOVqYUUXrJY5Zu11NY1Kidwgq40ucFnOp5y9L+iwEKb8pr0p1kVPjlpzAy8k JQ8kciM2Y8dCmTfJ5HayaMqNRc+9jWswhmT93uYI936CDhOE+3fLBrmQhFV1x4r0 DnXteMPQbENlYNEbyw49uYzharEo64cm6birBrmJbB2Sd8dFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFJLu4+XXZzmnkwa9VNhxZ7Ni6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYjkzOTVmNjItYzFjZi0z ZTk0LTg3ODYtNTNhNDg3OTgyYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ33qj7vp4mGYQkhBmArFzRwuqnGJ7mBPRW8oVMuewnvNMlGhONZOIt RitLH0n8jVzeDoDhCYcXlZL562Px0n2LIMvFtjPziZRoi6hat4XdL07nBgpwpLVx qA1WpUPUsSoyCCzFCh2E8f0KCePSepeHl+9BMEkasIS8Es7GDgwOXVIzOpNs/NIV 9bU0O/4O6roOLpRo1fkt6KySx6AV6a8jZbQGhRACLo8KT6bfxnDTUHr6qKt0VAj1 /igM5ctcw/GOoltJlcRPsPAnliOeCFvYV6TskmKOYqYG1/kYyOmiyl4tPW+/en95 tpI8m0/xjSs8kG67gtYCdec9fgisA28= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:17 2024 by rpki-client on console-ams.rpki-client.org