$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa File: 3401e74f-a936-383a-95be-c5719615d9b9.roa (raw, json) Hash identifier: wTbe8z4o6NzsPFKWzqsqK7Lk0Dfyrln2McwRSRUFau8= Subject key identifier: FA:13:56:CF:37:1B:53:36:68:87:6C:6B:65:DA:1E:2A:9B:B3:D8:F1 Certificate issuer: /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad Certificate serial: 010D0C9F4328584769D0D104A43CFE774A5E13C0 Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 13959 IP address blocks: 216.150.32.0/24 maxlen: 24 216.150.33.0/24 maxlen: 24 216.150.34.0/24 maxlen: 24 216.150.35.0/24 maxlen: 24 216.150.36.0/24 maxlen: 24 216.150.37.0/24 maxlen: 24 216.150.38.0/24 maxlen: 24 216.150.39.0/24 maxlen: 24 216.150.40.0/24 maxlen: 24 216.150.41.0/24 maxlen: 24 216.150.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d1:04:a4:3c:fe:77:4a:5e:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=d0243e29-3c97-4491-ac75-e08511e17a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:41:6b:05:0a:e8:15:26:8b:dc:86:cb:d4: 86:b0:24:b7:24:a0:14:11:8a:1e:9f:36:53:43:c7: ef:f8:d2:72:32:32:cc:ee:5c:fb:67:c1:7f:ce:41: 4f:39:9e:2b:d1:13:b9:90:53:a7:7b:5b:e6:2a:d4: 99:14:a6:e6:b0:85:a8:5c:e0:1c:c3:21:7c:5e:f7: 7c:29:ae:12:dd:cb:fb:84:76:71:7d:ce:1b:bc:c9: ed:fc:66:00:c6:32:d5:6f:23:df:e3:30:71:7a:7b: 04:66:40:46:c9:bf:b9:57:a6:ea:a1:c3:5b:7d:eb: 67:10:be:46:92:16:a3:93:31:7f:d9:f2:d6:e1:bb: d4:6f:05:d1:d7:22:c9:18:f0:e5:2f:ba:b4:43:58: 3c:ac:dc:2a:36:e9:bd:27:ff:7d:f9:e7:d4:78:63: f4:4b:68:3c:c4:c0:47:d1:f0:60:20:a6:69:5f:4c: 65:8c:1d:b2:5f:38:7f:8c:b5:1f:b3:88:05:79:21: 1f:de:75:3b:d0:f7:f0:98:91:f7:64:87:3b:e7:91: cb:10:ae:db:f9:a5:27:0e:f6:68:7f:86:e3:3a:71: f5:e1:9a:fd:7b:f7:3b:5b:db:f1:f5:c5:28:37:1e: 05:57:23:68:64:c1:e3:26:a1:c1:05:b7:52:00:fa: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:13:56:CF:37:1B:53:36:68:87:6C:6B:65:DA:1E:2A:9B:B3:D8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl X509v3 Authority Key Identifier: keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer sbgp-ipAddrBlock: critical IPv4: 216.150.32.0-216.150.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ca:d8:3e:24:01:96:3e:a5:4b:f4:9e:b0:c6:10:d9:ba:25: f6:fa:15:17:8c:f2:35:55:57:7d:d8:52:ef:47:d2:f5:71:bc: 41:1b:b9:5e:3d:ee:4b:a3:df:76:3b:0f:78:a3:34:09:73:8c: 06:11:8d:0c:ad:62:f9:37:18:7f:be:de:fc:d9:0b:63:0c:02: 8f:61:3d:95:08:f3:15:6f:54:b9:ec:31:82:8e:40:ad:31:0b: 71:5d:b7:94:0a:40:03:22:43:2f:66:0d:2c:a3:ab:12:84:6e: c7:79:13:61:69:e4:f9:e3:9d:d6:ce:21:88:66:00:22:c4:9a: 67:72:51:5c:9a:1c:3b:74:4d:54:7b:62:05:dc:f1:b1:f8:7d: ee:fe:fa:b9:c0:9a:c2:00:6f:10:42:f3:f2:7e:4b:38:d6:0e: 8c:64:04:46:7c:b1:31:c6:29:d7:92:af:2c:73:87:52:b7:09: 87:2c:8c:91:b6:6a:2c:e9:c1:2a:fd:94:cc:21:42:32:dc:8a: ed:4b:83:35:fd:78:6a:54:b4:e6:1c:90:cc:87:29:8c:06:c8: db:f5:e5:42:26:b5:5e:45:36:b8:1c:58:9a:bb:95:03:17:a4: ac:03:8d:89:32:d3:c4:61:99:2a:5f:75:bb:ab:da:f3:f7:46: fc:9c:2b:88 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEdp0NEEpDz+d0peE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZlOGE5NDItNWFjMi00MWU4LWFhODktN2RkY2ZkMGJi NmFkMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDAyNDNlMjktM2M5Ny00NDkxLWFjNzUtZTA4NTExZTE3YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvhBawUK6BUmi9yGy9SGsCS3JKAUEYoenzZT Q8fv+NJyMjLM7lz7Z8F/zkFPOZ4r0RO5kFOne1vmKtSZFKbmsIWoXOAcwyF8Xvd8 Ka4S3cv7hHZxfc4bvMnt/GYAxjLVbyPf4zBxensEZkBGyb+5V6bqocNbfetnEL5G khajkzF/2fLW4bvUbwXR1yLJGPDlL7q0Q1g8rNwqNum9J/99+efUeGP0S2g8xMBH 0fBgIKZpX0xljB2yXzh/jLUfs4gFeSEf3nU70PfwmJH3ZIc755HLEK7b+aUnDvZo f4bjOnH14Zr9e/c7W9vx9cUoNx4FVyNoZMHjJqHBBbdSAPqqvQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPoTVs83G1M2aIdsa2XaHiqbs9jxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4 YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRjZmQwYmI2YWQvMzQwMWU3NGYtYTkzNi0z ODNhLTk1YmUtYzU3MTk2MTVkOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWZlOGE5NDItNWFjMi00MWU4LWFh ODktN2RkY2ZkMGJiNmFkL2FmZThhOTQyLTVhYzItNDFlOC1hYTg5LTdkZGNmZDBi YjZhZC5jcmwwHwYDVR0jBBgwFoAUX9vLCQSsI6jASrDynFopVAP/iRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRj ZmQwYmI2YWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXYliAD BADYliowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAH8rYPiQBlj6lS/SesMYQ2bol9voVF4zyNVVXfdhS70fS 9XG8QRu5Xj3uS6PfdjsPeKM0CXOMBhGNDK1i+TcYf77e/NkLYwwCj2E9lQjzFW9U uewxgo5ArTELcV23lApAAyJDL2YNLKOrEoRux3kTYWnk+eOd1s4hiGYAIsSaZ3JR XJocO3RNVHtiBdzxsfh97v76ucCawgBvEELz8n5LONYOjGQERnyxMcYp15KvLHOH UrcJhyyMkbZqLOnBKv2UzCFCMtyK7UuDNf14alS05hyQzIcpjAbI2/XlQia1XkU2 uBxYmruVAxekrAONiTLTxGGZKl91u6va8/dG/JwriA== -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:23 2024 by rpki-client on console-fra.rpki-client.org