$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa File: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json) Hash identifier: qVP5qlI1tS1Lz0x7BCxP8BXNnKEA9OV8NbGs+m6zyiQ= Subject key identifier: 5C:EF:C3:7E:EA:AE:40:FF:70:19:D2:0D:47:FE:A0:0F:78:70:99:7A Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584769D0D0CE789D8DFD3E43CF00 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 33040 IP address blocks: 199.48.216.0/21 maxlen: 21 2605:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d0:ce:78:9d:8d:fd:3e:43:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=3b142aa6-8501-4651-8de5-780fd0c7b150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:6f:3b:79:65:64:05:01:45:c4:37:81:95: cb:23:cf:c5:ca:d4:c4:f9:63:af:f2:8e:d3:b3:75: c8:4e:bc:42:7f:88:f5:4c:98:da:f8:f5:2b:c7:37: 95:b1:a4:82:8d:9a:87:8b:63:b6:cf:f3:a0:39:fd: 6b:0f:d4:56:b1:3f:06:f9:69:02:db:50:94:e3:7c: 56:f0:ce:c3:f9:7e:a8:e6:e7:99:98:30:5a:2d:a7: 46:49:f7:38:36:5a:78:7f:74:a7:5d:3f:26:eb:1d: 75:1e:33:2a:d5:9a:68:ba:03:a7:ab:31:c9:96:95: 36:0f:57:32:49:89:3d:87:12:27:69:66:7e:6f:d0: 19:d2:69:ef:ea:12:a1:f9:7b:05:46:c7:07:37:8b: ee:c1:1e:a5:45:b7:8a:30:9f:2d:e5:a6:66:21:4e: 2e:0c:44:25:34:e7:41:bb:6a:ab:64:51:b3:be:08: d5:9b:32:15:a3:fa:af:9d:fd:ca:da:f9:ab:67:47: c2:1b:4b:f4:b4:a0:8c:99:bd:27:58:66:9e:22:0d: 36:97:81:94:2d:82:3f:a2:8f:30:20:38:99:77:e6: 0a:a3:3d:5f:4b:40:ae:3d:69:a2:77:8e:48:b6:15: 57:20:7b:6e:d9:d2:ee:2a:b0:16:3d:26:80:a4:dd: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EF:C3:7E:EA:AE:40:FF:70:19:D2:0D:47:FE:A0:0F:78:70:99:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:38:86:8e:94:e4:e6:3b:45:86:ee:e3:ab:75:b5:c5:76:bd: 73:73:ce:a5:a1:3f:c2:a8:e7:3c:3f:61:dc:48:34:0b:17:c4: a5:97:85:97:d9:80:9a:73:b9:8e:84:a7:44:97:15:57:91:27: a4:43:b2:14:4b:26:5f:09:d5:29:5f:15:ae:35:ff:be:f8:25: 28:68:23:60:ac:1c:cd:85:80:70:cb:c5:f0:fe:8b:fa:45:96: 70:b9:83:2e:01:04:82:22:93:67:1f:50:e4:cf:a9:5c:17:d2: 57:d5:fd:9e:da:a9:d4:ec:a1:a8:44:b0:2e:a4:63:c8:57:96: 86:4d:11:a2:73:69:a4:de:9d:2b:24:c1:d2:15:55:96:07:4e: d8:48:cc:38:5b:f4:f8:c9:c8:35:a9:87:88:67:c9:e5:2d:15: 33:6a:ef:91:5c:dd:d2:91:cd:50:c3:f5:a5:fd:c9:7f:5c:7d: 5a:ff:35:f3:36:0e:36:12:9c:f5:c7:fc:89:0f:55:7a:ec:b7: a5:13:67:13:f5:54:ac:4e:71:13:fd:d5:4e:90:a9:fc:c5:35: 2c:63:e4:21:46:50:eb:cb:3a:52:94:eb:9c:d5:48:2e:3f:a5: 5d:98:f2:8e:f7:86:3d:2c:01:92:12:99:b2:98:43:d3:76:0e: 4b:83:cd:cd -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEdp0NDOeJ2N/T5DzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk M2IxNDJhYTYtODUwMS00NjUxLThkZTUtNzgwZmQwYzdiMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44RvO3llZAUBRcQ3gZXLI8/FytTE+WOv8o7T s3XITrxCf4j1TJja+PUrxzeVsaSCjZqHi2O2z/OgOf1rD9RWsT8G+WkC21CU43xW 8M7D+X6o5ueZmDBaLadGSfc4Nlp4f3SnXT8m6x11HjMq1ZpougOnqzHJlpU2D1cy SYk9hxInaWZ+b9AZ0mnv6hKh+XsFRscHN4vuwR6lRbeKMJ8t5aZmIU4uDEQlNOdB u2qrZFGzvgjVmzIVo/qvnf3K2vmrZ0fCG0v0tKCMmb0nWGaeIg02l4GULYI/oo8w IDiZd+YKoz1fS0CuPWmid45IthVXIHtu2dLuKrAWPSaApN1cjwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFFzvw37qrkD/cBnSDUf+oA94cJl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjM4NDllOGEtMzc5YS0z MGU3LWFhZWYtOGQ4NzQ2Yjk5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxzDYMA0E AgACMAcDBQAmBT1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAc4ho6U5OY7RYbu46t1tcV2vXNzzqWhP8Ko 5zw/YdxINAsXxKWXhZfZgJpzuY6Ep0SXFVeRJ6RDshRLJl8J1SlfFa41/774JSho I2CsHM2FgHDLxfD+i/pFlnC5gy4BBIIik2cfUOTPqVwX0lfV/Z7aqdTsoahEsC6k Y8hXloZNEaJzaaTenSskwdIVVZYHTthIzDhb9PjJyDWph4hnyeUtFTNq75Fc3dKR zVDD9aX9yX9cfVr/NfM2DjYSnPXH/IkPVXrst6UTZxP1VKxOcRP91U6QqfzFNSxj 5CFGUOvLOlKU65zVSC4/pV2Y8o73hj0sAZISmbKYQ9N2DkuDzc0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:27 2024 by rpki-client on console-ams.rpki-client.org