$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa File: def21d29-3c57-3407-a3f2-98f21d026004.roa (raw, json) Hash identifier: T7frv+bNk3XpOJumCJ75wCM+QuRORapl+em8oos5NA4= Subject key identifier: 9D:81:DB:CE:E8:BE:D4:E6:31:CA:6B:82:5D:CE:F4:51:B3:93:5A:97 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F432858473FF08CD448026E4E0F8C9D80 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 16509 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:8c:d4:48:02:6e:4e:0f:8c:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=60083708-ace6-4da3-8208-481d94838848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:63:fb:7a:b8:88:a1:c8:b5:86:a8:b0:c7: a5:ae:29:57:ca:24:86:a6:af:c3:16:98:26:5c:64: 0f:12:0b:8e:32:fe:31:08:a9:2c:b3:19:d9:a7:92: c9:3d:55:98:80:f3:fd:58:9e:c4:07:d5:53:35:11: 92:3a:ef:43:18:07:db:a2:9c:ec:21:e2:24:ad:14: b6:76:fa:fc:a3:43:88:88:3b:2d:c1:ef:11:d8:8c: 88:a7:09:30:14:42:b6:1b:fe:38:75:25:66:f3:7a: d4:eb:95:ef:e0:b2:50:9b:10:cf:3b:cb:f2:2f:a5: c5:e7:31:d7:c9:c4:7f:4e:74:87:ba:e7:a9:68:c4: 50:59:89:06:5d:c9:ea:26:ca:af:52:04:00:7a:bb: f0:47:95:e7:77:2a:81:cd:56:c5:7a:dc:1e:58:75: d7:7b:70:3e:20:73:f1:72:99:bf:c2:c7:e1:73:13: d1:be:85:66:79:7c:f2:1d:e0:ed:5a:4d:82:76:44: ff:bd:0c:bc:3f:d5:3d:d8:61:04:c1:30:2d:01:d6: 72:89:d0:4a:f1:9f:18:38:7e:a7:8f:13:78:ea:30: e9:ab:14:0b:f1:82:7b:ec:d7:59:b8:9f:97:b8:23: 25:18:52:96:3d:6c:9e:3b:52:e1:96:58:18:72:1b: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:DB:CE:E8:BE:D4:E6:31:CA:6B:82:5D:CE:F4:51:B3:93:5A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:47:17:89:e7:8e:9d:a0:72:83:a3:39:87:10:8e:34:53:06: 5a:bf:6c:90:fd:ef:fe:48:69:dd:79:99:1b:74:31:c2:91:88: 85:89:71:de:8f:ba:5b:4a:3a:c8:d4:b7:ac:55:62:36:da:20: ed:bc:74:ae:ff:6f:79:fe:8a:a2:d3:52:14:6e:d3:b7:d2:9a: f2:fe:76:99:4b:36:38:61:d5:7c:0f:6d:68:50:e0:61:85:3e: e2:03:f0:08:7f:21:e7:c5:77:28:30:69:1b:84:ae:b2:1b:56: 18:1d:34:cd:e9:68:e9:57:f8:fb:5a:c7:9e:ce:df:d4:33:e4: 4d:95:c4:a8:f7:12:a5:0d:a6:dd:a4:ca:f2:be:59:c4:cf:a2: 4e:4f:7b:d9:0d:64:aa:95:ae:d2:c7:e3:33:70:ae:55:51:fc: 80:65:d7:ac:5e:92:5c:2c:21:fb:a9:b2:a4:de:c8:63:1e:ed: f9:f2:d9:68:ae:bb:44:49:7d:e6:fe:e2:05:17:2c:92:ab:d5: db:2b:13:6c:a6:97:ec:5b:95:c8:c8:7c:7d:44:c2:a2:92:e5: f3:e6:b2:e0:77:1f:85:9e:22:1d:68:57:dc:65:de:f7:d9:ff: f0:b3:83:54:15:f9:f5:ae:22:a7:8d:9b:9a:e3:c7:33:47:8c: f1:8d:aa:0b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEc/8IzUSAJuTg+MnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk NjAwODM3MDgtYWNlNi00ZGEzLTgyMDgtNDgxZDk0ODM4ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncNj+3q4iKHItYaosMelrilXyiSGpq/DFpgm XGQPEguOMv4xCKkssxnZp5LJPVWYgPP9WJ7EB9VTNRGSOu9DGAfbopzsIeIkrRS2 dvr8o0OIiDstwe8R2IyIpwkwFEK2G/44dSVm83rU65Xv4LJQmxDPO8vyL6XF5zHX ycR/TnSHuuepaMRQWYkGXcnqJsqvUgQAervwR5XndyqBzVbFetweWHXXe3A+IHPx cpm/wsfhcxPRvoVmeXzyHeDtWk2CdkT/vQy8P9U92GEEwTAtAdZyidBK8Z8YOH6n jxN46jDpqxQL8YJ77NdZuJ+XuCMlGFKWPWyeO1LhllgYcht1vQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJ2B287ovtTmMcprgl3O9FGzk1qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvZGVmMjFkMjktM2M1Ny0z NDA3LWEzZjItOThmMjFkMDI2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFkcXieeOnaByg6M5hxCONFMGWr9skP3v/khp3XmZG3Qx wpGIhYlx3o+6W0o6yNS3rFViNtog7bx0rv9vef6KotNSFG7Tt9Ka8v52mUs2OGHV fA9taFDgYYU+4gPwCH8h58V3KDBpG4SushtWGB00zelo6Vf4+1rHns7f1DPkTZXE qPcSpQ2m3aTK8r5ZxM+iTk972Q1kqpWu0sfjM3CuVVH8gGXXrF6SXCwh+6mypN7I Yx7t+fLZaK67REl95v7iBRcskqvV2ysTbKaX7FuVyMh8fUTCopLl8+ay4HcfhZ4i HWhX3GXe99n/8LODVBX59a4ip42bmuPHM0eM8Y2qCw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:06 2024 by rpki-client on console-ams.rpki-client.org