$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa File: 56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa (raw, json) Hash identifier: /vyEFx4CiJirUswhDjUsRq4F1DdL1dthvgR1vC9RKd0= Subject key identifier: 76:AE:BE:86:EF:C9:53:EA:07:F2:69:2C:8F:1D:8D:47:7A:F7:51:44 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584780265094457F1181A3A47180 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 400317 IP address blocks: 204.117.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:50:94:45:7f:11:81:a3:a4:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=6e8dab0b-99ca-4e99-a5cc-527152ab8db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:ad:06:f3:21:f8:49:9e:cc:53:73:1a:53: ba:00:65:2d:55:0f:20:cb:f5:91:19:b9:13:3a:55: 23:a7:09:c7:c5:5f:db:15:5e:3a:62:ae:eb:fa:33: fc:e0:c7:c2:1f:53:0c:2a:1c:32:df:06:1b:b2:d8: 36:3f:a5:ec:d0:d0:24:be:08:d4:68:7f:41:0c:9b: c1:62:7c:9f:05:db:24:0d:82:15:6e:0b:3e:c0:3c: ef:9d:a5:46:37:d8:50:69:d9:06:ed:ac:23:45:31: 2f:e9:87:f7:13:dd:aa:93:74:db:5b:c6:b0:be:c8: 61:ee:1c:bd:d8:6f:02:68:cd:11:57:e9:7b:e3:92: 8d:51:8e:80:6c:6d:57:f5:ad:64:b9:d2:dc:63:da: 27:29:e7:c3:4f:0b:59:c0:9e:13:36:d1:64:93:07: ad:cd:b2:da:9e:ca:b2:33:06:db:7e:f3:46:e2:33: f4:39:13:32:c6:e4:b5:78:2e:73:34:29:d9:60:87: ad:32:b9:3d:35:81:4c:fb:4e:49:ba:0f:73:09:0c: 66:82:51:b1:cd:e8:85:23:c8:e2:6c:34:c6:89:c3: 25:b7:0b:32:86:64:f8:a2:2e:b4:6f:b2:65:4c:3e: 9b:3d:80:4e:dd:e0:0d:42:c8:29:08:a7:2b:34:c1: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AE:BE:86:EF:C9:53:EA:07:F2:69:2C:8F:1D:8D:47:7A:F7:51:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.117.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4f:6e:31:1f:a9:c9:ac:91:08:a7:7f:1d:41:03:39:8f:a0: 3f:87:80:f5:5d:aa:aa:d2:69:0b:9f:95:97:94:c3:7d:d1:6e: 0c:c0:59:92:f4:dd:da:db:98:e9:7c:be:8b:a0:12:b1:33:ab: 7d:5e:10:01:90:00:99:e2:92:da:1a:25:e7:c0:0b:ca:f5:2d: d5:d7:04:f1:5b:ab:b3:29:b5:df:e1:e5:47:b2:d9:19:31:99: 46:0c:0a:a0:f8:b5:e0:c6:3f:05:0d:2c:5d:a1:85:e4:cb:8f: a8:bc:4a:92:8f:3a:4e:77:63:a2:a8:10:ac:6c:a7:a9:37:72: 6c:aa:e7:0d:a9:04:5e:9d:53:35:c9:b2:d9:ba:50:49:41:13: bc:b7:23:11:c5:83:77:90:7c:10:c0:de:60:cb:f1:ac:df:38: 13:06:4c:f3:9e:8a:32:bc:fc:da:55:c5:dd:cd:bf:61:5d:4d: 75:da:48:d9:57:56:d5:0d:c0:c0:2b:a0:b1:3b:5b:d5:ae:36: 86:c3:cd:6f:97:3c:e6:30:4f:8f:0a:39:3d:95:fb:4f:29:d1: 99:6a:c8:58:f2:e8:b3:10:ac:09:8b:06:7b:2d:d4:54:5c:25: fe:16:ae:da:4d:73:d2:07:26:f5:52:a1:a1:ef:5e:eb:88:c3: aa:b4:24:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJlCURX8RgaOkcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk NmU4ZGFiMGItOTljYS00ZTk5LWE1Y2MtNTI3MTUyYWI4ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbetBvMh+EmezFNzGlO6AGUtVQ8gy/WRGbkT OlUjpwnHxV/bFV46Yq7r+jP84MfCH1MMKhwy3wYbstg2P6Xs0NAkvgjUaH9BDJvB YnyfBdskDYIVbgs+wDzvnaVGN9hQadkG7awjRTEv6Yf3E92qk3TbW8awvshh7hy9 2G8CaM0RV+l745KNUY6AbG1X9a1kudLcY9onKefDTwtZwJ4TNtFkkwetzbLansqy MwbbfvNG4jP0ORMyxuS1eC5zNCnZYIetMrk9NYFM+05Jug9zCQxmglGxzeiFI8ji bDTGicMltwsyhmT4oi60b7JlTD6bPYBO3eANQsgpCKcrNMHQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHauvobvyVPqB/JpLI8djUd691FEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNTZhMmVmZTItYmY2YS0z MTE2LTgyZDAtNWFiODM4N2JiZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9PbjEfqcmskQinfx1BAzmPoD+HgPVdqqrSaQuflZeUw33RbgzAWZL0 3drbmOl8vougErEzq31eEAGQAJniktoaJefAC8r1LdXXBPFbq7Mptd/h5Uey2Rkx mUYMCqD4teDGPwUNLF2hheTLj6i8SpKPOk53Y6KoEKxsp6k3cmyq5w2pBF6dUzXJ stm6UElBE7y3IxHFg3eQfBDA3mDL8azfOBMGTPOeijK8/NpVxd3Nv2FdTXXaSNlX VtUNwMAroLE7W9WuNobDzW+XPOYwT48KOT2V+08p0ZlqyFjy6LMQrAmLBnst1FRc Jf4WrtpNc9IHJvVSoaHvXuuIw6q0JLQ= -----END CERTIFICATE-----Generated at Mon Nov 25 03:14:55 2024 by rpki-client on console-ams.rpki-client.org