$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa File: 424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa (raw, json) Hash identifier: 54pRc5qcdnnmDHiPZzkhMGOdiWIadLJJ595pC1XoEck= Subject key identifier: C0:BC:AB:E3:DF:87:FD:14:5B:38:B6:E9:7C:57:70:0E:FD:00:CC:F1 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F43285847299B2C3CE75710945FFEAA00 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 393231 IP address blocks: 216.68.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:2c:3c:e7:57:10:94:5f:fe:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=be979b7c-f8f3-47e4-9a67-f57cfa564f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:02:05:ab:21:e1:a3:39:cc:dc:fd:ac:c7: c9:7c:d3:67:e4:59:02:45:6f:55:66:72:d9:e4:25: 3f:6f:09:00:10:f3:13:af:88:96:61:89:67:29:fd: 65:c1:fe:6c:a1:a3:c1:e3:9a:7b:04:1f:e9:53:6a: 99:e4:39:d1:fb:68:50:09:7e:66:61:7d:4d:eb:82: 94:2d:4c:ce:ec:fd:90:b3:36:1f:c7:0e:96:50:d9: ec:85:d8:0e:ca:df:ad:33:82:de:81:8c:fd:fd:53: 2b:94:96:99:1e:a5:88:e8:b5:07:4a:38:32:e1:38: da:d7:28:db:b9:c3:39:b8:81:5d:aa:e1:bd:47:ce: fe:9e:d5:75:b8:fa:ab:63:45:8e:13:46:d5:e0:78: e0:00:29:aa:e5:d6:58:ec:82:2d:c2:56:d5:30:52: d2:43:a7:0e:ce:08:13:e3:64:6c:1b:4a:e4:5b:ff: 63:2d:26:e2:30:0a:12:ba:36:e7:7e:0a:91:59:2e: a5:f2:91:eb:eb:d2:d9:bf:13:16:02:56:8c:e8:ee: 4e:37:c2:11:77:b4:c9:7b:70:3c:dc:84:f8:01:f4: 25:94:95:92:3b:37:12:1a:c3:3d:0b:67:fc:3d:a8: 3a:8f:f0:78:cf:27:36:c4:44:3e:23:ab:cf:b6:22: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BC:AB:E3:DF:87:FD:14:5B:38:B6:E9:7C:57:70:0E:FD:00:CC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b4:51:30:13:45:01:dd:72:50:89:dc:83:e8:1b:2e:b9:31: 26:d0:be:64:27:b5:5b:25:08:1a:4f:02:6e:31:b9:8f:de:18: 05:cd:bf:03:5a:78:e2:59:97:56:5a:5e:be:c4:e5:68:88:64: a8:e0:63:fb:da:40:02:c8:f3:43:e5:60:0e:94:23:c3:7c:61: 83:12:4a:5b:68:c9:49:68:47:f6:76:f0:88:98:51:90:b6:42: b7:6e:9e:82:71:b8:da:74:01:2d:2d:a3:91:b9:f5:f4:28:17: da:9a:09:f0:82:75:f5:75:4b:e8:99:8f:b4:34:56:b5:c0:76: b9:32:a8:72:96:d1:46:7c:b2:be:53:e4:5d:6b:95:53:61:92: 61:f6:e2:cc:8b:3a:09:26:f1:37:de:19:6b:45:de:7b:a9:0a: ad:cc:11:3b:c1:07:b7:ba:47:b4:6d:e1:6b:1c:eb:98:6d:5c: 44:2a:34:05:a1:75:1f:04:88:b3:fc:69:0d:78:f1:5c:94:3f: 80:d2:80:e3:a9:3d:e7:0c:e9:c3:62:f1:54:eb:0b:bb:2a:ef: f0:32:55:fc:9b:68:e0:4d:b5:1f:60:92:57:92:c3:9f:a6:3a: 02:ef:5f:ba:55:2b:9b:11:45:f7:1c:f9:dc:55:32:3a:62:72: 41:1f:45:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyw851cQlF/+qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmU5NzliN2MtZjhmMy00N2U0LTlhNjctZjU3Y2ZhNTY0ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju0CBash4aM5zNz9rMfJfNNn5FkCRW9VZnLZ 5CU/bwkAEPMTr4iWYYlnKf1lwf5soaPB45p7BB/pU2qZ5DnR+2hQCX5mYX1N64KU LUzO7P2QszYfxw6WUNnshdgOyt+tM4LegYz9/VMrlJaZHqWI6LUHSjgy4Tja1yjb ucM5uIFdquG9R87+ntV1uPqrY0WOE0bV4HjgACmq5dZY7IItwlbVMFLSQ6cOzggT 42RsG0rkW/9jLSbiMAoSujbnfgqRWS6l8pHr69LZvxMWAlaM6O5ON8IRd7TJe3A8 3IT4AfQllJWSOzcSGsM9C2f8Pag6j/B4zyc2xEQ+I6vPtiLlRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC8q+Pfh/0UWzi26XxXcA79AMzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvNDI0YTRiNjYtYzBjMi0z YTBhLTk1MzAtOWFjYTQ3NGIwMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ETNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe0UTATRQHdclCJ3IPoGy65MSbQvmQntVslCBpPAm4xuY/eGAXNvwNa eOJZl1ZaXr7E5WiIZKjgY/vaQALI80PlYA6UI8N8YYMSSltoyUloR/Z28IiYUZC2 QrdunoJxuNp0AS0to5G59fQoF9qaCfCCdfV1S+iZj7Q0VrXAdrkyqHKW0UZ8sr5T 5F1rlVNhkmH24syLOgkm8TfeGWtF3nupCq3METvBB7e6R7Rt4Wsc65htXEQqNAWh dR8EiLP8aQ148VyUP4DSgOOpPecM6cNi8VTrC7sq7/AyVfybaOBNtR9gkleSw5+m OgLvX7pVK5sRRfcc+dxVMjpickEfRcU= -----END CERTIFICATE-----Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org