$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa File: 6bfd8c06-649d-344f-9311-8c34c244a748.roa (raw, json) Hash identifier: DlxsH28J4Rh7MgWdift2j688HuVopKPnKpuKUhGTCzY= Subject key identifier: A0:AE:58:3B:56:1D:A2:5A:60:40:AE:B8:56:95:9B:35:6D:6E:D1:51 Certificate issuer: /CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Certificate serial: 010D0C9F43285847F5060F28F49E637D58F571C0 Authority key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa Signing time: Thu 21 Nov 2024 21:45:12 +0000 ROA not before: Thu 21 Nov 2024 21:45:12 +0000 ROA not after: Wed 19 Feb 2025 21:45:12 +0000 asID: 22121 IP address blocks: 172.99.224.0/22 maxlen: 24 199.21.136.0/21 maxlen: 24 2604:14c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:06:0f:28:f4:9e:63:7d:58:f5:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Validity Not Before: Nov 21 21:45:12 2024 GMT Not After : Feb 19 21:45:12 2025 GMT Subject: CN=12b09245-df8a-43ae-b5b9-933cdc85169e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:e3:3a:66:cb:a7:ce:58:6f:e4:f5:77:55: 34:2c:2b:6c:e8:93:99:0d:86:f7:29:10:91:ee:21: a2:bb:48:a2:ac:eb:83:17:55:98:bd:da:01:a2:68: b0:fe:92:cf:c1:40:bb:78:ee:9c:90:c6:05:8f:78: 5a:08:a7:54:1d:f7:6d:f5:b2:5a:c7:7f:f7:2a:44: c8:3e:d6:1b:ca:32:78:4e:58:23:3f:df:62:c7:2c: 3d:f7:01:3b:23:fe:0a:bd:ee:d3:93:f8:54:44:c9: 96:e3:17:c5:a3:8c:fa:e3:92:4b:67:c7:2d:3f:62: 5e:c3:9c:a2:bf:78:0a:6a:6e:aa:ac:f7:80:3d:22: 25:c7:74:c1:df:ae:c0:59:15:9a:52:d1:d5:d5:2f: aa:06:40:d0:3d:87:bf:e7:12:30:d8:fc:a7:65:98: 45:3d:bc:c0:ce:c1:60:df:89:27:0d:96:4d:46:32: 46:2e:d5:69:b3:ea:3c:92:75:a5:55:5e:0e:0b:08: e5:1e:2a:2c:3b:d9:06:11:9c:4c:c7:d9:8d:ac:fb: 28:bd:1b:a0:ae:93:84:fc:da:c2:e6:be:3f:dd:78: a9:d2:94:4f:03:b0:67:8d:bd:93:bd:83:87:c2:d5: 0d:b8:46:fb:57:11:c7:be:6d:18:4f:7d:30:e1:3b: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AE:58:3B:56:1D:A2:5A:60:40:AE:B8:56:95:9B:35:6D:6E:D1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl X509v3 Authority Key Identifier: keyid:7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9e:b2:f3:b0:42:aa:1c:1d:aa:dc:f7:56:17:08:96:22:a3: 7d:69:c2:f4:f2:58:b8:87:a1:03:bd:c7:da:44:47:93:89:2c: 11:ed:93:4d:02:ae:b9:24:05:93:32:9c:54:9c:9c:c4:e4:7c: 2e:18:8f:76:98:79:c9:09:e7:9b:f8:9d:80:1c:ea:a6:b7:1e: 06:ee:29:d4:ef:54:e6:31:ab:e4:23:04:16:61:c7:b6:39:6c: bc:7d:e2:11:37:e5:75:ac:3b:9f:43:e6:92:0d:06:0d:1c:51: 9f:41:0b:43:48:1f:29:ad:57:41:fe:1b:2f:72:4b:78:d4:8c: 4d:aa:51:2e:b8:f3:a9:90:7c:a9:99:3f:3e:f6:e8:83:5b:f4: 51:62:02:ef:5b:7c:06:bd:09:f4:e6:94:e4:ca:3d:51:e7:f5: 57:f4:37:23:81:0c:db:31:0e:c8:0c:52:93:10:8a:61:de:ae: 69:11:ef:e3:f6:1e:35:14:cc:b6:eb:54:3e:50:ce:d2:bd:59: 1d:1a:22:48:06:3c:07:c7:8a:77:99:bc:99:28:9d:9f:f3:25: e4:d8:b2:59:69:75:7c:00:f5:f1:f8:bd:c6:0e:be:eb:4a:b0: 0c:ac:fa:58:5e:04:3c:1d:41:5e:32:57:02:d9:e9:ff:0d:1a: f2:d7:f4:f8 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEf1Bg8o9J5jfVj1ccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3 ODhhMB4XDTI0MTEyMTIxNDUxMloXDTI1MDIxOTIxNDUxMlowLzEtMCsGA1UEAxMk MTJiMDkyNDUtZGY4YS00M2FlLWI1YjktOTMzY2RjODUxNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA/jOmbLp85Yb+T1d1U0LCts6JOZDYb3KRCR 7iGiu0iirOuDF1WYvdoBomiw/pLPwUC7eO6ckMYFj3haCKdUHfdt9bJax3/3KkTI PtYbyjJ4TlgjP99ixyw99wE7I/4Kve7Tk/hURMmW4xfFo4z645JLZ8ctP2Jew5yi v3gKam6qrPeAPSIlx3TB367AWRWaUtHV1S+qBkDQPYe/5xIw2PynZZhFPbzAzsFg 34knDZZNRjJGLtVps+o8knWlVV4OCwjlHiosO9kGEZxMx9mNrPsovRugrpOE/NrC 5r4/3Xip0pRPA7Bnjb2TvYOHwtUNuEb7VxHHvm0YT30w4Tuv3wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFKCuWDtWHaJaYECuuFaVmzVtbtFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNjVi ZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvNmJmZDhjMDYtNjQ5ZC0z NDRmLTkzMTEtOGMzNGMyNDRhNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjY1YmUyZTAtNmE0MC00Y2YxLTgy MzQtNmViNGY0MGM3ODhhL2Y2NWJlMmUwLTZhNDAtNGNmMS04MjM0LTZlYjRmNDBj Nzg4YS5jcmwwHwYDVR0jBBgwFoAUfMog+isdj9R0lgqMSYi3VGCgxvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0 ZjQwYzc4OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCrGPgAwQD xxWIMA0EAgACMAcDBQAmBBTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHmesvOwQqocHarc91YXCJYio31p wvTyWLiHoQO9x9pER5OJLBHtk00CrrkkBZMynFScnMTkfC4Yj3aYeckJ55v4nYAc 6qa3HgbuKdTvVOYxq+QjBBZhx7Y5bLx94hE35XWsO59D5pINBg0cUZ9BC0NIHymt V0H+Gy9yS3jUjE2qUS6486mQfKmZPz726INb9FFiAu9bfAa9CfTmlOTKPVHn9Vf0 NyOBDNsxDsgMUpMQimHermkR7+P2HjUUzLbrVD5QztK9WR0aIkgGPAfHineZvJko nZ/zJeTYsllpdXwA9fH4vcYOvutKsAys+lheBDwdQV4yVwLZ6f8NGvLX9Pg= -----END CERTIFICATE-----Generated at Sat Nov 23 04:31:47 2024 by rpki-client on console-ams.rpki-client.org