$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa File: 3baf912b-384b-3427-b752-a35aa9af6107.roa (raw, json) Hash identifier: Ylq2WzfVtfw+YKoSc9gqu/8TJY+nVEb2h/z6axAHpXk= Subject key identifier: 8C:97:8B:E2:76:51:73:3A:B1:88:8B:94:C5:B7:BA:1C:25:56:76:C2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DC649EF9299D09BBBF57D480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 852 IP address blocks: 172.219.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:9e:f9:29:9d:09:bb:bf:57:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=5c188389-e5d1-4825-ab7c-43f8d2d393a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:22:1a:77:f0:dd:e0:39:93:cc:06:95:14: fc:ba:93:dd:8b:0f:76:08:c0:9c:10:b4:90:b7:eb: df:33:65:fc:26:f0:65:42:7b:33:18:b4:45:c3:c6: a4:ad:f3:54:9b:bc:64:18:86:95:a4:f2:51:c5:5c: 91:b5:63:28:17:4a:70:7c:8b:4e:0b:96:54:da:17: a2:71:7a:a3:95:83:e9:d9:d6:fa:1a:08:20:db:38: 4c:9b:44:9a:0c:2f:00:d6:db:e8:41:52:fd:1f:1a: d2:89:36:18:98:87:1d:7f:b3:2c:f4:e0:3f:14:dc: 4b:23:ba:d8:98:27:35:70:68:41:77:37:c9:9c:d1: 6f:3b:38:f6:82:9e:53:b1:17:88:0b:f1:94:5b:c8: ec:a1:59:ae:61:96:51:fa:ea:3a:55:7e:d3:9d:a3: fa:8f:64:d7:70:68:3d:0c:86:02:da:c9:e7:52:5b: d5:66:8e:15:1b:41:5b:a3:57:83:28:e6:c8:49:9a: 5c:b6:c6:89:fd:72:24:27:f2:9e:13:4e:db:c8:d0: db:87:41:a6:4b:4c:02:32:0b:d2:ee:04:37:0a:12: e6:90:17:5d:66:ff:46:49:8d:64:83:aa:3b:f9:c9: 08:2c:3e:50:06:67:cc:a7:8d:11:fd:e3:59:1f:8d: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:8B:E2:76:51:73:3A:B1:88:8B:94:C5:B7:BA:1C:25:56:76:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 172.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ed:99:7b:d0:d5:78:aa:f3:11:9a:28:41:be:d2:fb:48:b7:bf: 1e:40:7f:63:37:46:4b:7c:07:40:5d:d5:3e:90:94:0a:b6:5e: 88:cd:e8:4a:8b:27:4c:16:77:19:41:d0:9a:c5:74:cf:c1:ca: f2:07:a6:cb:48:67:57:79:40:28:89:89:2c:76:2d:69:71:f5: a6:e7:24:f6:78:de:1f:ba:9f:c1:06:10:6d:5d:5f:7a:8d:59: 11:1b:3d:1b:12:97:dc:b9:a7:56:5b:9f:06:0e:26:5b:5f:04: 0c:a0:4d:3f:fb:d6:05:2e:9d:8e:8f:6c:1b:1b:83:17:73:d1: 52:56:8e:61:43:b8:6a:f3:94:52:f5:14:21:3c:ea:5f:a4:11: 28:94:27:c8:4a:fe:08:c1:07:29:62:f1:74:c1:69:91:95:4d: 23:43:d7:ef:b7:52:fa:a8:19:31:e0:27:a9:60:56:89:c7:0d: 1c:1f:7a:1b:28:08:c4:6c:de:b7:74:77:9f:d0:22:3d:a8:f1: ff:0e:64:a3:00:a3:32:48:c9:6b:bb:87:c7:56:85:aa:cf:d1: dc:17:c9:1f:7a:b2:da:a4:2c:13:06:4d:df:13:7b:81:c8:77: bb:32:e2:52:b5:02:65:e8:fa:05:db:55:e1:87:d5:8f:6c:a2: 10:e2:2a:98 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfcZJ75KZ0Ju79X1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk NWMxODgzODktZTVkMS00ODI1LWFiN2MtNDNmOGQyZDM5M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEgiGnfw3eA5k8wGlRT8upPdiw92CMCcELSQ t+vfM2X8JvBlQnszGLRFw8akrfNUm7xkGIaVpPJRxVyRtWMoF0pwfItOC5ZU2hei cXqjlYPp2db6Gggg2zhMm0SaDC8A1tvoQVL9HxrSiTYYmIcdf7Ms9OA/FNxLI7rY mCc1cGhBdzfJnNFvOzj2gp5TsReIC/GUW8jsoVmuYZZR+uo6VX7TnaP6j2TXcGg9 DIYC2snnUlvVZo4VG0Fbo1eDKObISZpctsaJ/XIkJ/KeE07byNDbh0GmS0wCMgvS 7gQ3ChLmkBddZv9GSY1kg6o7+ckILD5QBmfMp40R/eNZH41ZJQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIyXi+J2UXM6sYiLlMW3uhwlVnbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2JhZjkxMmItMzg0Yi0z NDI3LWI3NTItYTM1YWE5YWY2MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA7Zl70NV4qvMRmihBvtL7SLe/HkB/YzdGS3wHQF3VPpCUCrZeiM3oSosn TBZ3GUHQmsV0z8HK8gemy0hnV3lAKImJLHYtaXH1puck9njeH7qfwQYQbV1feo1Z ERs9GxKX3LmnVlufBg4mW18EDKBNP/vWBS6djo9sGxuDF3PRUlaOYUO4avOUUvUU ITzqX6QRKJQnyEr+CMEHKWLxdMFpkZVNI0PX77dS+qgZMeAnqWBWiccNHB96GygI xGzet3R3n9AiPajx/w5kowCjMkjJa7uHx1aFqs/R3BfJH3qy2qQsEwZN3xN7gch3 uzLiUrUCZej6BdtV4YfVj2yiEOIqmA== -----END CERTIFICATE-----Generated at Fri Nov 22 06:59:55 2024 by rpki-client on console-fra.rpki-client.org