$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa File: 8edc1a27-c324-3d26-be3c-15679ecee128.roa (raw, json) Hash identifier: iamsLcZBBfxI6LUL0RmG7Rma3hbaMPD/tbU8eofe8T0= Subject key identifier: E3:20:C7:A1:26:69:29:14:57:E2:E1:13:09:25:D1:4B:0B:3D:63:C8 Certificate issuer: /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Certificate serial: 010D0C9F43285847C4AA124F6D1A082FCE975E20 Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa Signing time: Mon 04 Nov 2024 14:00:48 +0000 ROA not before: Mon 04 Nov 2024 14:00:48 +0000 ROA not after: Sun 02 Feb 2025 14:00:48 +0000 asID: 398888 IP address blocks: 128.254.220.0/24 maxlen: 24 163.123.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c4:aa:12:4f:6d:1a:08:2f:ce:97:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Validity Not Before: Nov 4 14:00:48 2024 GMT Not After : Feb 2 14:00:48 2025 GMT Subject: CN=b3c0af88-158d-4ff3-94d4-8a5dfeecfa94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:dd:1e:66:0a:6f:68:91:46:8b:55:bc:bb: 16:67:9f:a6:c6:cb:cc:f5:41:66:80:ee:3d:ab:de: 44:1b:86:49:2b:d7:17:fe:c9:f1:e3:a1:15:57:76: f1:4a:2b:5c:ee:28:1e:12:f0:44:cc:8c:0a:b7:18: 3f:1d:2a:75:8a:fb:3e:da:23:6d:4b:fd:b9:49:a3: 1d:e0:53:ed:c4:1c:60:60:d4:2a:ef:0b:ca:ec:f6: 90:7c:cc:40:fe:27:60:64:98:5a:71:3a:a8:62:cd: 3f:62:b8:3a:ca:75:90:44:cb:56:d8:ef:c6:6c:72: 30:b3:43:61:ed:01:ac:9c:33:54:f6:90:29:7b:e8: ee:f7:be:da:89:cd:4a:73:ef:75:22:ed:11:bb:e3: 7c:79:0a:03:3c:80:4a:2c:b1:f7:0c:19:a4:3d:a2: c9:38:d8:96:b1:a8:c4:8b:06:a3:39:1c:7c:a5:85: fd:9c:44:fd:a6:0d:2d:19:db:0f:9a:2b:ed:92:0d: 41:0d:23:3d:c4:3e:d1:bc:1d:9a:16:bd:e5:a0:a7: 09:38:69:66:97:35:a3:63:7d:ee:56:85:ca:1c:40: a2:2b:21:a4:22:e2:dc:3f:c4:4d:53:fd:fc:47:f3: 55:98:b7:d2:c8:fb:6c:6b:b3:a5:af:25:2b:06:e7: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:C7:A1:26:69:29:14:57:E2:E1:13:09:25:D1:4B:0B:3D:63:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl X509v3 Authority Key Identifier: keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.220.0/24 163.123.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:3a:1c:e5:3a:07:4e:07:3a:9a:0a:ac:3e:5e:c7:d1:87:47: ec:e7:00:66:f5:80:47:50:d6:46:8b:21:41:ec:23:60:77:a7: 7b:8b:a2:d0:a3:64:7a:91:2d:a7:73:6e:db:e4:1c:11:11:ee: cd:88:e9:ae:48:f1:05:c0:98:79:a5:0d:e9:8b:50:45:8c:a2: fc:59:20:67:05:fb:3e:46:7e:08:07:c3:a5:8f:ba:9f:8e:3f: 75:23:ce:16:fa:f6:cf:a9:49:a1:0a:ec:56:cb:43:75:ce:ab: 3f:db:94:02:8b:7d:0c:fb:10:15:f4:96:a2:bb:eb:4e:b5:12: d6:3d:96:59:c7:4a:79:73:e7:ea:a6:25:0f:64:48:ae:a3:96: 30:f5:92:56:cf:0a:ba:5d:bc:53:c1:a0:ef:17:53:e6:7f:6a: 7c:66:02:79:7d:1e:06:d4:73:5a:58:4e:1a:c9:d2:62:f5:c5: 7c:b0:af:28:34:db:28:52:c1:c1:b5:72:d7:06:28:0e:0c:99: 1e:f2:3e:cc:1b:36:2c:a6:7b:75:d9:f0:94:82:f3:6e:00:8e: 00:ff:40:09:5f:e8:f3:fc:08:c7:a4:55:ec:ba:30:2f:07:b9: 88:44:9d:20:bf:90:f7:95:9a:16:07:18:6c:6c:a9:50:c3:40: 8a:fb:1a:a6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfEqhJPbRoIL86XXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMz MjNkMB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk YjNjMGFmODgtMTU4ZC00ZmYzLTk0ZDQtOGE1ZGZlZWNmYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOHdHmYKb2iRRotVvLsWZ5+mxsvM9UFmgO49 q95EG4ZJK9cX/snx46EVV3bxSitc7igeEvBEzIwKtxg/HSp1ivs+2iNtS/25SaMd 4FPtxBxgYNQq7wvK7PaQfMxA/idgZJhacTqoYs0/Yrg6ynWQRMtW2O/GbHIws0Nh 7QGsnDNU9pApe+ju977aic1Kc+91Iu0Ru+N8eQoDPIBKLLH3DBmkPaLJONiWsajE iwajORx8pYX9nET9pg0tGdsPmivtkg1BDSM9xD7RvB2aFr3loKcJOGlmlzWjY33u VoXKHECiKyGkIuLcP8RNU/38R/NVmLfSyPtsa7OlryUrBucMUwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOMgx6EmaSkUV+LhEwkl0UsLPWPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Rl NjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvOGVkYzFhMjctYzMyNC0z ZDI2LWJlM2MtMTU2NzllY2VlMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNkZTY4M2EtMDRiMS00ZTFjLTk0 YzUtY2I0NWU5ODMzMjNkL2QzZGU2ODNhLTA0YjEtNGUxYy05NGM1LWNiNDVlOTgz MzIzZC5jcmwwHwYDVR0jBBgwFoAUIf0rCB2hYHaj1ZCVi5hdPuCb8aQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1 ZTk4MzMyM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgP7cAwQA o3vYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMY6HOU6B04HOpoKrD5ex9GHR+znAGb1gEdQ1kaLIUHsI2B3 p3uLotCjZHqRLadzbtvkHBER7s2I6a5I8QXAmHmlDemLUEWMovxZIGcF+z5GfggH w6WPup+OP3Ujzhb69s+pSaEK7FbLQ3XOqz/blAKLfQz7EBX0lqK76061EtY9llnH Snlz5+qmJQ9kSK6jljD1klbPCrpdvFPBoO8XU+Z/anxmAnl9HgbUc1pYThrJ0mL1 xXywryg02yhSwcG1ctcGKA4MmR7yPswbNiyme3XZ8JSC824AjgD/QAlf6PP8CMek Vey6MC8HuYhEnSC/kPeVmhYHGGxsqVDDQIr7GqY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:40:41 2024 by rpki-client on console-ams.rpki-client.org