$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa File: 1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa (raw, json) Hash identifier: 4pZQ5VfNHlGcSlKpIqw/V4WD8CSc4rp/9I88hsByr78= Subject key identifier: 4E:47:F8:6C:1B:09:AE:82:38:68:8E:12:CB:69:4D:A8:F9:14:D4:94 Certificate issuer: /CN=9dd784e6-1b7b-4aa8-8457-76bb387e1d98 Certificate serial: 010D0C9F43285847A68E77FBC429D1A68C5BD780 Authority key identifier: 09:E8:A2:01:3A:79:5E:3E:CB:23:2C:79:AF:64:B9:6A:85:E3:A1:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa Signing time: Thu 24 Oct 2024 19:11:12 +0000 ROA not before: Thu 24 Oct 2024 19:11:12 +0000 ROA not after: Wed 22 Jan 2025 20:11:12 +0000 asID: 25826 IP address blocks: 216.48.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:8e:77:fb:c4:29:d1:a6:8c:5b:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd784e6-1b7b-4aa8-8457-76bb387e1d98 Validity Not Before: Oct 24 19:11:12 2024 GMT Not After : Jan 22 20:11:12 2025 GMT Subject: CN=973adc66-12be-45e6-acd8-76ac141c9e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:92:45:1f:b4:e0:cf:b4:82:98:b3:23:6a: fb:a7:47:ef:7f:0a:36:63:09:2a:98:e7:35:29:b1: d7:86:b8:86:f2:88:d9:3f:f8:28:55:87:01:d2:67: 7f:e6:41:f7:4d:2c:63:e2:79:a1:83:0f:7a:c0:ee: 18:f6:c4:d4:4c:d4:2f:29:1a:58:d5:c1:7a:31:11: 2d:36:ee:89:79:98:84:e3:4e:7f:3b:23:06:46:6c: 7d:d1:ec:3c:f6:b9:83:bd:db:e4:83:3e:bd:ff:65: 61:59:43:bb:a4:67:97:2b:0b:ad:be:65:a3:ef:86: 41:02:43:9b:de:a6:aa:0b:28:c2:4a:a4:28:d7:47: c8:67:02:17:ce:5b:cb:f4:04:10:00:99:1e:67:dd: d7:48:f5:01:50:37:fd:04:b6:dd:d0:cb:7d:bf:b9: 66:fd:8f:18:01:81:c6:d1:3f:07:ba:c8:15:0c:47: a8:41:72:25:96:9e:85:4c:98:86:28:94:66:f0:88: d0:b7:57:54:4c:1f:c6:f8:e5:2d:52:66:da:69:c0: 11:86:1b:0a:1f:06:b8:86:0b:d5:b5:f8:69:ae:d0: 81:f7:c5:be:29:3b:e0:00:2a:a1:6c:0f:05:b4:60: 9f:2d:99:5a:ce:45:74:e3:f7:d3:76:b0:15:ac:9e: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:47:F8:6C:1B:09:AE:82:38:68:8E:12:CB:69:4D:A8:F9:14:D4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/1a6cb8fc-cc6c-33e5-9e36-7349f28620bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.crl X509v3 Authority Key Identifier: keyid:09:E8:A2:01:3A:79:5E:3E:CB:23:2C:79:AF:64:B9:6A:85:E3:A1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9dd784e6-1b7b-4aa8-8457-76bb387e1d98.cer sbgp-ipAddrBlock: critical IPv4: 216.48.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:86:8f:52:5a:d0:64:f0:75:54:94:91:50:e8:be:45:65:3a: f2:92:0f:fe:80:b3:de:11:56:9b:de:93:21:02:1a:88:07:b7: c9:a7:ae:bc:61:09:b2:46:1f:3b:13:48:2e:22:46:b5:6c:0d: 7c:76:43:a9:f0:74:09:0f:0b:d9:b9:c8:92:f5:83:98:4d:8c: 5b:91:46:60:f4:ea:26:7c:2c:8c:04:3f:7b:7c:31:5a:f4:99: 23:1f:63:9f:b0:1c:f5:fa:44:64:e1:bf:b7:c9:5d:84:f1:b1: 8f:5b:1e:2d:a6:77:ef:70:66:f7:be:15:49:d5:7b:b4:5a:e1: 8f:dc:95:d1:9e:41:4e:60:cc:be:e5:47:1e:74:ee:3a:a2:1d: 9f:a1:e3:e2:6d:f2:ad:00:e2:38:90:d4:a0:b7:54:7a:8d:2a: 7e:e2:a5:c0:26:35:b5:ab:51:c5:d8:e9:5c:66:fb:02:77:a6: 54:fa:2d:8f:b1:27:1d:f7:3f:e3:64:41:3f:1d:ca:24:84:0d: f8:f5:a6:15:7e:e2:cd:ed:f1:cf:6c:82:10:99:2f:2c:c7:16: 2b:61:b2:6b:eb:85:7a:e7:4c:68:c5:81:d5:6f:16:61:ff:b6: 69:9f:c2:c3:cb:ee:96:48:8f:a6:69:4a:63:8d:81:72:f4:6d: ca:00:4f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEemjnf7xCnRpoxb14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRkNzg0ZTYtMWI3Yi00YWE4LTg0NTctNzZiYjM4N2Ux ZDk4MB4XDTI0MTAyNDE5MTExMloXDTI1MDEyMjIwMTExMlowLzEtMCsGA1UEAxMk OTczYWRjNjYtMTJiZS00NWU2LWFjZDgtNzZhYzE0MWM5ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmemSRR+04M+0gpizI2r7p0fvfwo2YwkqmOc1 KbHXhriG8ojZP/goVYcB0md/5kH3TSxj4nmhgw96wO4Y9sTUTNQvKRpY1cF6MREt Nu6JeZiE405/OyMGRmx90ew89rmDvdvkgz69/2VhWUO7pGeXKwutvmWj74ZBAkOb 3qaqCyjCSqQo10fIZwIXzlvL9AQQAJkeZ93XSPUBUDf9BLbd0Mt9v7lm/Y8YAYHG 0T8HusgVDEeoQXIllp6FTJiGKJRm8IjQt1dUTB/G+OUtUmbaacARhhsKHwa4hgvV tfhprtCB98W+KTvgACqhbA8FtGCfLZlazkV04/fTdrAVrJ4KrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5H+GwbCa6COGiOEstpTaj5FNSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85ZGQ3 ODRlNi0xYjdiLTRhYTgtODQ1Ny03NmJiMzg3ZTFkOTgvMWE2Y2I4ZmMtY2M2Yy0z M2U1LTllMzYtNzM0OWYyODYyMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWRkNzg0ZTYtMWI3Yi00YWE4LTg0 NTctNzZiYjM4N2UxZDk4LzlkZDc4NGU2LTFiN2ItNGFhOC04NDU3LTc2YmIzODdl MWQ5OC5jcmwwHwYDVR0jBBgwFoAUCeiiATp5Xj7LIyx5r2S5aoXjoTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85ZGQ3ODRlNi0xYjdiLTRhYTgtODQ1Ny03NmJi Mzg3ZTFkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2DBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuGj1Ja0GTwdVSUkVDovkVlOvKSD/6As94RVpvekyECGogHt8mnrrxh CbJGHzsTSC4iRrVsDXx2Q6nwdAkPC9m5yJL1g5hNjFuRRmD06iZ8LIwEP3t8MVr0 mSMfY5+wHPX6RGThv7fJXYTxsY9bHi2md+9wZve+FUnVe7Ra4Y/cldGeQU5gzL7l Rx507jqiHZ+h4+Jt8q0A4jiQ1KC3VHqNKn7ipcAmNbWrUcXY6Vxm+wJ3plT6LY+x Jx33P+NkQT8dyiSEDfj1phV+4s3t8c9sghCZLyzHFithsmvrhXrnTGjFgdVvFmH/ tmmfwsPL7pZIj6ZpSmONgXL0bcoAT+g= -----END CERTIFICATE-----Generated at Sun Nov 24 20:11:24 2024 by rpki-client on console-ams.rpki-client.org