$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa File: b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa (raw, json) Hash identifier: 0QH0vDOzaRdhCy+rq0MQEMmUQZz9feZlcKoa30PVqek= Subject key identifier: 52:B5:1A:98:98:BB:14:CE:AC:B9:16:B4:2F:6C:F2:22:11:7F:AD:74 Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F43285847537B56FC84F9C40210AC7B80 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 16509 IP address blocks: 216.169.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:56:fc:84:f9:c4:02:10:ac:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=3a883139-f80f-41ad-bc3f-9fdd6f7b61b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:9c:24:85:a7:48:1d:77:dc:76:1a:d9:fe: 77:1d:e9:78:82:dd:f4:71:a7:eb:28:fc:07:e7:71: 8d:c6:28:da:9e:8f:07:42:32:32:c0:f1:79:93:ef: 69:73:8d:69:d2:34:4e:57:dd:8c:71:40:f6:fa:dc: 22:63:8d:6e:a8:ba:76:7a:54:bb:8e:e6:fe:44:ce: 4c:71:d1:6f:76:e7:8d:43:fd:c4:36:16:0d:0c:36: f6:25:28:8e:b1:d4:6c:72:84:2e:09:46:91:6e:c8: 1f:22:18:01:22:c2:ab:e2:87:54:cf:6e:4f:55:b4: 0f:ed:9f:51:43:09:95:c9:85:a9:06:6c:21:89:c3: 76:da:b2:74:e7:88:84:6a:04:35:eb:5f:30:00:37: 72:97:ee:e2:6b:16:a2:be:c5:2a:6d:c4:24:c4:15: 5a:12:eb:d9:31:f6:9a:96:59:ef:1e:0d:b7:5b:04: 95:9b:d9:a3:ec:24:90:d6:c7:e5:76:b2:ef:31:1a: 98:87:1e:3f:f6:dc:c8:f9:93:28:f1:f9:5d:b8:fa: 70:cc:88:79:1c:8b:fd:20:21:d6:ac:50:79:9f:d1: 6c:64:ca:50:1a:e3:a5:9f:3c:08:37:71:74:d8:d6: 79:4d:e1:32:97:5c:3a:0e:0b:12:57:a5:ab:86:aa: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B5:1A:98:98:BB:14:CE:AC:B9:16:B4:2F:6C:F2:22:11:7F:AD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/b1b637d3-1237-3b23-aec5-e6f0f8b16d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv4: 216.169.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:be:38:8c:d2:9d:cf:6b:fa:2d:5a:f3:34:81:06:0f:ba:52: 47:19:6c:82:f1:a9:c5:b5:d1:5c:17:38:97:e5:30:b1:8a:eb: 96:32:31:0c:bc:76:00:ce:e9:5d:a2:6d:b7:62:62:68:25:88: 5b:6e:05:66:6e:7a:2e:99:d9:03:90:ab:ad:01:46:9b:52:e9: 4c:a4:4e:e2:29:b6:bd:26:3b:01:06:e7:2e:66:4c:6b:12:73: 42:6a:69:fe:43:f5:8c:26:7d:82:47:8c:41:32:14:a9:06:53: 72:4a:db:96:ae:d3:a8:33:4a:aa:92:3f:d4:58:a2:2c:b5:18: 74:e7:4b:09:8f:ec:f9:03:6e:bc:58:f1:b9:be:01:79:00:2d: 18:9f:f7:7e:74:03:75:13:00:10:b5:f6:1f:6b:b1:87:7e:51: df:f2:a5:4f:5c:27:53:ed:d0:8b:82:a4:bf:51:13:53:da:fd: 69:b1:03:eb:f0:18:63:19:21:af:1f:87:28:8b:d9:d5:62:f9: bf:36:bf:1e:a8:71:a6:e5:23:2b:f8:66:34:d1:ba:72:8b:37: fc:2e:4e:b1:22:80:48:fa:6c:c6:89:92:8b:77:c0:b2:1a:af: ed:0d:4b:0b:c8:38:b7:65:a8:a8:f6:d5:be:8a:e1:d5:d5:1d: 00:5c:7e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe1b8hPnEAhCse4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk M2E4ODMxMzktZjgwZi00MWFkLWJjM2YtOWZkZDZmN2I2MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9WcJIWnSB133HYa2f53Hel4gt30cafrKPwH 53GNxijano8HQjIywPF5k+9pc41p0jROV92McUD2+twiY41uqLp2elS7jub+RM5M cdFvdueNQ/3ENhYNDDb2JSiOsdRscoQuCUaRbsgfIhgBIsKr4odUz25PVbQP7Z9R QwmVyYWpBmwhicN22rJ054iEagQ1618wADdyl+7iaxaivsUqbcQkxBVaEuvZMfaa llnvHg23WwSVm9mj7CSQ1sfldrLvMRqYhx4/9tzI+ZMo8flduPpwzIh5HIv9ICHW rFB5n9FsZMpQGuOlnzwIN3F02NZ5TeEyl1w6DgsSV6WrhqqtRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK1GpiYuxTOrLkWtC9s8iIRf610MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvYjFiNjM3ZDMtMTIzNy0z YjIzLWFlYzUtZTZmMGY4YjE2ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa+OIzSnc9r+i1a8zSBBg+6UkcZbILxqcW10VwXOJflMLGK65YyMQy8 dgDO6V2ibbdiYmgliFtuBWZuei6Z2QOQq60BRptS6UykTuIptr0mOwEG5y5mTGsS c0Jqaf5D9YwmfYJHjEEyFKkGU3JK25au06gzSqqSP9RYoiy1GHTnSwmP7PkDbrxY 8bm+AXkALRif9350A3UTABC19h9rsYd+Ud/ypU9cJ1Pt0IuCpL9RE1Pa/WmxA+vw GGMZIa8fhyiL2dVi+b82vx6ocablIyv4ZjTRunKLN/wuTrEigEj6bMaJkot3wLIa r+0NSwvIOLdlqKj21b6K4dXVHQBcfog= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:09 2024 by rpki-client on console-fra.rpki-client.org