$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa File: 6d40050b-c5d1-338c-9a5a-fd493e776beb.roa (raw, json) Hash identifier: tEtHEQCaULguChhpSW82v9KcSs9rw+Uc4fgJ9CzTBko= Subject key identifier: 3B:05:14:35:91:86:4C:28:C9:16:EE:27:EB:8F:58:C6:EC:0A:43:FA Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DF2F4DDACEBDE01275892E40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 216.123.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:4d:da:ce:bd:e0:12:75:89:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=45d68d45-f2c0-42db-8fdf-0acc3f960feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:7c:55:08:8d:69:87:25:bd:bc:60:67:97: 93:e8:c9:22:05:03:15:24:20:a4:4b:0c:6b:03:0f: 83:4d:ec:f7:f5:6b:c5:2e:63:51:e1:98:4b:35:de: 7e:13:6b:2d:aa:d8:ed:14:61:b5:ac:6b:53:2b:f7: 22:dd:fd:2a:a1:4b:34:74:05:01:c7:ac:cc:57:ae: 19:de:6c:6a:3f:4a:6b:d7:b4:64:a1:99:0a:5f:d8: cf:7a:7a:83:03:c3:e5:35:35:b0:f6:b3:fd:d3:ef: 84:81:3b:e0:a8:bd:ce:27:31:06:14:f3:5e:15:1a: 79:e0:97:63:93:96:7f:dc:40:9d:04:54:e1:b4:f4: 2b:74:86:91:57:75:55:f9:89:2e:ea:40:3c:17:b7: 87:74:a4:f7:ec:b0:22:ba:52:40:4d:6c:3e:8c:3a: 63:fa:ee:a0:3e:f3:84:29:00:0d:8a:55:43:61:0d: 20:bb:23:a9:92:ef:24:59:1b:eb:f6:bc:d6:51:01: 2a:c4:96:7e:4e:e4:bb:98:c4:c8:82:4a:66:86:16: d8:5a:1f:73:53:6f:8b:9d:b8:b0:20:4a:ff:9d:88: 85:b6:9f:d3:f5:b6:ed:79:1a:94:55:89:23:17:20: c0:67:f0:8d:12:2d:c3:e4:cc:a3:ec:05:ca:bc:bd: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:05:14:35:91:86:4C:28:C9:16:EE:27:EB:8F:58:C6:EC:0A:43:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.123.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f8:31:f3:a1:af:da:4b:6e:30:72:18:cd:41:62:cf:f5:d5:37: 50:ed:69:2b:fc:44:88:86:27:ed:93:6c:e1:28:68:15:3e:41: d1:3d:57:7b:e4:62:e7:cc:02:7c:21:1c:a7:19:ef:97:1f:ab: 9e:ce:10:77:6f:f5:d2:89:b0:5e:aa:10:ad:51:36:04:15:47: 1a:50:8f:bd:23:55:24:a1:da:cb:c7:51:2b:b2:eb:4d:80:0f: 05:3b:95:49:3f:5b:4b:f6:66:bf:06:e7:8c:44:53:0b:74:2b: ce:f1:ad:f9:64:d9:fa:c4:ce:66:a7:0d:7a:94:60:c3:18:c3: d6:51:68:09:c2:e5:99:98:58:33:fb:63:da:b7:57:7f:2a:77: ac:f2:33:44:c0:85:af:61:19:fa:ac:b7:57:46:07:9c:76:ce: ce:31:52:0c:e1:da:00:9d:3b:de:3c:b7:d1:b1:91:02:45:9b: 5b:ec:f6:ea:18:e1:00:56:3f:f4:08:e0:47:6a:87:00:92:10: 57:de:16:6a:55:35:09:61:78:50:30:1a:c8:b3:30:1f:d9:a1: 05:97:b1:59:3c:10:75:28:cf:8f:e7:94:80:43:bd:c3:63:49: db:ee:a1:13:f3:87:68:26:27:7e:6b:ae:90:41:63:4a:76:75: 87:31:fd:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL03azr3gEnWJLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk NDVkNjhkNDUtZjJjMC00MmRiLThmZGYtMGFjYzNmOTYwZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTh8VQiNaYclvbxgZ5eT6MkiBQMVJCCkSwxr Aw+DTez39WvFLmNR4ZhLNd5+E2stqtjtFGG1rGtTK/ci3f0qoUs0dAUBx6zMV64Z 3mxqP0pr17RkoZkKX9jPenqDA8PlNTWw9rP90++EgTvgqL3OJzEGFPNeFRp54Jdj k5Z/3ECdBFThtPQrdIaRV3VV+Yku6kA8F7eHdKT37LAiulJATWw+jDpj+u6gPvOE KQANilVDYQ0guyOpku8kWRvr9rzWUQEqxJZ+TuS7mMTIgkpmhhbYWh9zU2+Lnbiw IEr/nYiFtp/T9bbteRqUVYkjFyDAZ/CNEi3D5Myj7AXKvL2fRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsFFDWRhkwoyRbuJ+uPWMbsCkP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmQ0MDA1MGItYzVkMS0z MzhjLTlhNWEtZmQ0OTNlNzc2YmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPgx86Gv2ktuMHIYzUFiz/XVN1DtaSv8RIiGJ+2TbOEoaBU+QdE9V3vk YufMAnwhHKcZ75cfq57OEHdv9dKJsF6qEK1RNgQVRxpQj70jVSSh2svHUSuy602A DwU7lUk/W0v2Zr8G54xEUwt0K87xrflk2frEzmanDXqUYMMYw9ZRaAnC5ZmYWDP7 Y9q3V38qd6zyM0TAha9hGfqst1dGB5x2zs4xUgzh2gCdO948t9GxkQJFm1vs9uoY 4QBWP/QI4EdqhwCSEFfeFmpVNQlheFAwGsizMB/ZoQWXsVk8EHUoz4/nlIBDvcNj SdvuoRPzh2gmJ35rrpBBY0p2dYcx/YQ= -----END CERTIFICATE-----Generated at Fri Nov 22 14:29:17 2024 by rpki-client on console-ams.rpki-client.org