$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa File: 17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa (raw, json) Hash identifier: c1dLyV21z8ltAC1bhGMl6xgBGzpwgXDftm264isjQSM= Subject key identifier: 21:28:29:DA:61:0B:91:AE:24:70:3E:30:0D:51:00:31:80:92:5C:7E Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285847967BC387A193D89AD8CCFB00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 4540 IP address blocks: 74.221.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:c3:87:a1:93:d8:9a:d8:cc:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=edeb5bb7-6b85-429e-9a13-0c37b6f20214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:a4:a6:7f:ba:0e:76:42:fc:df:fc:7f:af: cb:80:9d:c5:c2:6c:26:7e:1e:68:f2:ec:61:36:0a: 45:99:85:49:e0:a0:88:b8:f5:d0:07:92:01:b4:bf: fa:fe:81:ac:ed:4d:8f:5a:8e:dc:ad:fd:e1:30:ab: 79:36:43:7d:7c:3c:fa:51:0c:31:35:03:44:22:7e: 3e:60:60:6a:83:69:c4:ee:c7:38:80:53:e3:a0:04: 5b:2e:b0:30:7f:e8:51:a2:77:c3:67:d9:e1:97:70: e8:b8:50:da:2f:9e:18:e8:f6:22:18:fa:36:cf:1b: 2a:2f:67:2f:3a:55:3b:60:41:3d:f1:e3:e6:26:b4: 8d:53:dd:e5:23:62:ec:51:ff:31:a5:5e:86:57:eb: 74:14:d2:8b:43:8c:0f:e2:13:2f:c6:aa:a3:c6:a8: a6:45:72:c7:45:49:65:b8:20:9e:43:4b:c5:01:65: 07:0b:3e:ea:2c:3a:98:3e:ea:5b:bb:bb:44:9e:dc: 91:74:19:35:83:17:bd:cf:e2:71:92:82:52:12:7f: 1f:88:c4:e1:bf:32:23:5f:91:a8:c5:8a:99:47:ee: a3:a3:03:81:55:38:08:3b:2b:27:14:74:f7:cf:53: cd:7c:b4:a5:50:93:fa:e7:21:95:ad:b5:9f:67:99: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:28:29:DA:61:0B:91:AE:24:70:3E:30:0D:51:00:31:80:92:5C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8e:42:56:7d:bb:76:65:f7:6c:c3:fd:2c:f3:51:8d:e7:81: 72:82:85:88:6c:f2:6c:a8:63:51:fe:7d:15:ac:8a:18:4e:53: e1:e1:48:5b:e8:f8:17:fb:24:b7:59:0d:b5:1a:4e:33:90:e6: 7d:dc:fd:e5:3d:a9:15:1f:47:7d:6e:ae:f7:d2:c2:0c:7b:cf: ff:42:c4:f0:2b:63:24:7b:e2:e6:f1:1e:81:3d:6b:f2:23:79: a3:4a:aa:cf:90:27:f5:27:2f:6f:d0:8a:1a:28:66:1a:12:5f: cc:13:92:a1:94:e1:74:f8:8f:cd:b5:9a:8f:bd:11:5e:42:36: 1d:61:8a:ce:b1:2b:f0:36:86:58:e7:e9:5b:d0:5b:01:ca:a1: 89:52:2e:a9:23:a5:03:38:95:52:39:6d:c6:b4:15:f3:1c:1c: af:17:5a:d4:78:1c:18:22:fd:a8:0f:d7:4c:1d:ac:ea:11:4a: 64:8b:16:7a:7c:85:06:11:14:de:96:2e:53:d6:15:29:46:6c: f0:0a:ca:15:08:a8:5b:ef:fe:ec:bf:9f:ab:a3:a9:b0:a2:49: 26:ed:76:b1:55:7a:9a:4a:1f:3e:89:d3:84:b6:38:d1:ef:78: 59:ea:8a:43:a1:f4:61:d8:95:81:08:f1:ca:d1:79:9a:48:89: a7:61:09:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8OHoZPYmtjM+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWRlYjViYjctNmI4NS00MjllLTlhMTMtMGMzN2I2ZjIwMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRKkpn+6DnZC/N/8f6/LgJ3Fwmwmfh5o8uxh NgpFmYVJ4KCIuPXQB5IBtL/6/oGs7U2PWo7crf3hMKt5NkN9fDz6UQwxNQNEIn4+ YGBqg2nE7sc4gFPjoARbLrAwf+hRonfDZ9nhl3DouFDaL54Y6PYiGPo2zxsqL2cv OlU7YEE98ePmJrSNU93lI2LsUf8xpV6GV+t0FNKLQ4wP4hMvxqqjxqimRXLHRUll uCCeQ0vFAWUHCz7qLDqYPupbu7tEntyRdBk1gxe9z+JxkoJSEn8fiMThvzIjX5Go xYqZR+6jowOBVTgIOysnFHT3z1PNfLSlUJP65yGVrbWfZ5mZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEoKdphC5GuJHA+MA1RADGAklx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMTdmZmRkYjQtZjlmOC0z ODBiLWEyNDYtMGFhYTViNGMwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuOQlZ9u3Zl92zD/SzzUY3ngXKChYhs8myoY1H+fRWsihhOU+HhSFvo +Bf7JLdZDbUaTjOQ5n3c/eU9qRUfR31urvfSwgx7z/9CxPArYyR74ubxHoE9a/Ij eaNKqs+QJ/UnL2/QihooZhoSX8wTkqGU4XT4j821mo+9EV5CNh1his6xK/A2hljn 6VvQWwHKoYlSLqkjpQM4lVI5bca0FfMcHK8XWtR4HBgi/agP10wdrOoRSmSLFnp8 hQYRFN6WLlPWFSlGbPAKyhUIqFvv/uy/n6ujqbCiSSbtdrFVeppKHz6J04S2ONHv eFnqikOh9GHYlYEI8crReZpIiadhCTg= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:39 2024 by rpki-client on console-fra.rpki-client.org