$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa File: 680d15e7-a36c-3758-9cb4-c1ea5f325659.roa (raw, json) Hash identifier: ICL0JJ7PQbHqqoiiTJ+RjxT3wm42b34kBzjrFtGqAws= Subject key identifier: 85:67:7A:86:21:9E:C1:DA:21:DF:EE:5C:7E:FB:C0:86:ED:CF:10:F3 Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F43285847EE8A2FE9A5BF07E6521F6946 Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 63178 IP address blocks: 216.229.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:2f:e9:a5:bf:07:e6:52:1f:69:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=10c4741c-7ba5-45ff-a8ae-c96fa122cd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:8e:ac:49:e3:a3:df:d8:1e:65:71:ec:e5: 0c:5e:4e:2a:a6:78:5f:1b:94:b1:aa:b5:b2:7a:df: a3:c5:26:6b:78:cd:73:6e:28:13:ed:fc:73:e2:06: 90:1f:2d:14:9b:0d:b7:4c:a2:86:89:ec:72:3e:5a: 60:42:c6:4b:5f:c4:ba:bd:32:1a:ef:31:dd:fa:47: dc:22:3f:49:14:7a:d4:8c:d8:5c:12:02:63:33:26: 4f:86:8a:bc:47:06:3a:c0:f4:d6:40:53:0e:1f:64: cb:c2:ed:6e:04:25:7e:c0:67:34:52:02:27:92:9e: f0:36:35:58:11:fa:d0:7c:9f:3e:35:3c:31:c1:8f: ed:9a:3c:02:4f:6e:53:69:82:82:be:18:c3:93:db: 87:c6:92:38:5d:38:48:1d:3c:6e:d2:65:f7:5f:65: df:04:e8:9a:eb:6e:4f:5c:fd:2d:0c:ac:6b:f6:d4: 6d:28:4a:02:be:c1:8e:32:3f:74:a0:c0:e4:8d:0c: 2e:b4:c7:02:2e:87:5a:00:ef:76:9d:8c:32:9e:bd: 1c:9d:3e:52:34:f6:b3:7c:93:4a:6c:f7:6d:26:57: 02:64:51:aa:f3:1d:3a:75:f5:eb:1d:92:8b:e7:43: a3:5e:07:be:d1:b4:ab:d2:77:fb:89:dd:bb:1a:2e: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:7A:86:21:9E:C1:DA:21:DF:EE:5C:7E:FB:C0:86:ED:CF:10:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv4: 216.229.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d4:1a:86:ce:67:88:bd:c2:b5:f8:b3:f1:de:ce:62:fa:bc: a7:9b:47:3e:49:b6:ef:1c:91:d9:d8:c9:9b:83:e9:60:35:f9: 8c:76:05:26:10:ad:2e:29:0a:67:a2:03:69:2b:be:58:fa:87: 62:5c:a2:66:a2:e3:36:61:5a:2c:d6:6c:25:26:49:30:35:cc: 97:15:30:24:f8:62:3c:ba:c4:73:ff:50:48:fc:9c:ce:12:b1: 32:da:a4:52:53:3c:d7:d2:83:65:37:00:48:46:36:a7:62:4d: 49:36:f4:4a:ab:35:a3:fc:84:ea:68:40:23:85:6c:7f:5e:aa: 6b:ca:23:59:32:98:35:3f:e3:9b:bb:1c:01:43:bb:63:3d:8e: e2:9d:1d:b5:66:4d:50:90:87:9d:09:f5:90:7f:5d:13:20:8d: 46:41:49:00:5d:11:3b:59:ed:f6:6a:c0:d1:6b:f3:48:38:f2: cf:01:32:07:74:df:6f:0c:4a:4f:39:03:10:b9:12:76:98:71: f9:3a:33:92:0d:0c:95:84:6b:f7:21:b2:7b:89:c3:91:26:f6: 31:f9:fa:11:f4:f3:8c:75:4c:9a:68:53:4f:85:1b:83:46:81: d5:cc:18:43:d7:d6:d9:e5:e7:51:9c:ee:f4:ff:9e:44:d7:0e: c0:f8:1a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuii/ppb8H5lIfaUYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk MTBjNDc0MWMtN2JhNS00NWZmLWE4YWUtYzk2ZmExMjJjZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9aOrEnjo9/YHmVx7OUMXk4qpnhfG5SxqrWy et+jxSZreM1zbigT7fxz4gaQHy0Umw23TKKGiexyPlpgQsZLX8S6vTIa7zHd+kfc Ij9JFHrUjNhcEgJjMyZPhoq8RwY6wPTWQFMOH2TLwu1uBCV+wGc0UgInkp7wNjVY EfrQfJ8+NTwxwY/tmjwCT25TaYKCvhjDk9uHxpI4XThIHTxu0mX3X2XfBOia625P XP0tDKxr9tRtKEoCvsGOMj90oMDkjQwutMcCLodaAO92nYwynr0cnT5SNPazfJNK bPdtJlcCZFGq8x06dfXrHZKL50OjXge+0bSr0nf7id27Gi6BWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVneoYhnsHaId/uXH77wIbtzxDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvNjgwZDE1ZTctYTM2Yy0z NzU4LTljYjQtYzFlYTVmMzI1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXUGobOZ4i9wrX4s/HezmL6vKebRz5Jtu8ckdnYyZuD6WA1+Yx2BSYQ rS4pCmeiA2krvlj6h2Jcomai4zZhWizWbCUmSTA1zJcVMCT4Yjy6xHP/UEj8nM4S sTLapFJTPNfSg2U3AEhGNqdiTUk29EqrNaP8hOpoQCOFbH9eqmvKI1kymDU/45u7 HAFDu2M9juKdHbVmTVCQh50J9ZB/XRMgjUZBSQBdETtZ7fZqwNFr80g48s8BMgd0 328MSk85AxC5EnaYcfk6M5INDJWEa/chsnuJw5Em9jH5+hH084x1TJpoU0+FG4NG gdXMGEPX1tnl51Gc7vT/nkTXDsD4GtM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:48 2024 by rpki-client on console-fra.rpki-client.org