$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa File: abf67299-9e87-34a9-9b48-9475fd549597.roa (raw, json) Hash identifier: RgCfEChQoDuCw8u1Jm3Qdso+oDiG/3r8xhtsrFj/C7Q= Subject key identifier: 5E:85:91:E9:81:1B:B4:B7:0F:95:69:2D:7E:23:69:41:A9:15:51:59 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F432858471A406791502FAA7616665F60 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa Signing time: Wed 04 Sep 2024 13:00:41 +0000 ROA not before: Wed 04 Sep 2024 13:00:41 +0000 ROA not after: Tue 03 Dec 2024 14:00:41 +0000 asID: 398143 IP address blocks: 96.46.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:40:67:91:50:2f:aa:76:16:66:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Sep 4 13:00:41 2024 GMT Not After : Dec 3 14:00:41 2024 GMT Subject: CN=0c0fd588-e1cb-41c3-858d-d3847471a0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:f7:a0:de:e6:bb:9d:3f:21:2a:a3:b3:f3: ff:84:05:b4:9d:0b:1c:31:f0:0b:a7:5d:1d:b9:9b: 61:e5:c0:7d:7c:ba:26:e3:cd:45:df:1e:e2:c4:2b: 92:6f:8e:22:76:a8:8a:1d:11:dc:9b:17:a5:98:e9: bc:1b:d1:4d:92:96:38:8a:eb:89:c0:59:47:c6:78: 9e:77:76:3a:22:af:e0:ce:37:2e:8d:d9:d0:e5:c1: a1:9e:7c:7e:0e:42:24:63:af:04:0d:83:aa:dd:f8: 5c:f0:fc:84:0a:ef:2f:54:36:da:41:5a:68:26:73: 93:af:ad:c8:2b:1b:21:2e:c6:63:a1:b0:c8:9a:2c: ab:6f:ff:dd:79:a4:a2:c1:d8:9f:b6:56:de:83:93: 12:ee:89:06:ec:a0:89:19:cb:59:5a:ba:c2:07:be: c0:6f:d1:f4:08:23:f5:bf:4c:6e:53:00:26:64:f1: e8:37:63:a5:be:4b:3c:53:a9:04:29:28:ff:83:33: a5:84:19:d7:98:d1:9d:7d:17:b0:7c:76:f1:f5:56: 1b:cc:6c:28:ae:ac:ae:ca:ff:6b:08:90:b0:f2:80: 88:77:73:8d:93:01:18:f7:34:f9:11:c2:39:b3:97: 50:f4:2f:98:da:67:6a:df:b0:d8:cd:6f:1f:94:60: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:85:91:E9:81:1B:B4:B7:0F:95:69:2D:7E:23:69:41:A9:15:51:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 96.46.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8b:8c:07:c0:a8:8f:26:af:ba:14:5d:62:dc:e6:7c:46:d6: 1a:28:53:04:82:5e:fe:ad:45:99:c8:b1:3a:db:a5:cc:80:cf: dc:18:7e:97:6c:b2:13:5c:fa:d1:02:30:11:cc:f5:8c:75:05: 71:77:d0:2f:ea:95:55:a8:0e:94:4a:32:0c:8c:86:91:ee:b4: 39:69:dc:ff:01:d6:5e:ff:22:e0:2c:35:7b:22:af:d2:7c:0f: cd:a0:b4:11:ba:d2:ef:32:38:6e:26:b2:25:53:68:c3:5d:4f: 0f:64:b4:d7:e6:fb:c6:cf:ce:1b:33:b8:ac:9b:f8:bc:8e:11: 74:46:1b:4d:44:52:da:4e:0b:6f:a5:3e:01:8c:d3:14:c8:b9: 4e:b7:de:da:d6:d3:8d:44:57:84:81:30:e0:4e:c5:d5:08:e8: c1:af:9f:bb:10:cc:36:16:16:4a:5e:43:54:69:83:88:90:d9: ff:7b:93:2c:93:92:70:b5:cf:b9:82:d5:56:bd:a4:d6:b6:54: c6:f9:1b:eb:62:38:5f:83:c3:06:57:b2:82:d3:ed:20:2e:1b: 1c:d2:05:90:4d:77:58:f8:d0:59:94:a9:ce:f1:8a:ea:32:4e: 63:fb:52:0e:7f:7b:49:b9:41:f8:56:01:d1:27:97:3a:13:2d: 27:8a:4b:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcaQGeRUC+qdhZmX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI0MDkwNDEzMDA0MVoXDTI0MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MGMwZmQ1ODgtZTFjYi00MWMzLTg1OGQtZDM4NDc0NzFhMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC/3oN7mu50/ISqjs/P/hAW0nQscMfALp10d uZth5cB9fLom481F3x7ixCuSb44idqiKHRHcmxelmOm8G9FNkpY4iuuJwFlHxnie d3Y6Iq/gzjcujdnQ5cGhnnx+DkIkY68EDYOq3fhc8PyECu8vVDbaQVpoJnOTr63I KxshLsZjobDImiyrb//deaSiwdiftlbeg5MS7okG7KCJGctZWrrCB77Ab9H0CCP1 v0xuUwAmZPHoN2Olvks8U6kEKSj/gzOlhBnXmNGdfRewfHbx9VYbzGworqyuyv9r CJCw8oCId3ONkwEY9zT5EcI5s5dQ9C+Y2mdq37DYzW8flGDnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6FkemBG7S3D5VpLX4jaUGpFVFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvYWJmNjcyOTktOWU4Ny0z NGE5LTliNDgtOTQ3NWZkNTQ5NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGLjAfAqI8mr7oUXWLc5nxG1hooUwSCXv6tRZnIsTrbpcyAz9wYfpds shNc+tECMBHM9Yx1BXF30C/qlVWoDpRKMgyMhpHutDlp3P8B1l7/IuAsNXsir9J8 D82gtBG60u8yOG4msiVTaMNdTw9ktNfm+8bPzhszuKyb+LyOEXRGG01EUtpOC2+l PgGM0xTIuU633trW041EV4SBMOBOxdUI6MGvn7sQzDYWFkpeQ1Rpg4iQ2f97kyyT knC1z7mC1Va9pNa2VMb5G+tiOF+DwwZXsoLT7SAuGxzSBZBNd1j40FmUqc7xiuoy TmP7Ug5/e0m5QfhWAdEnlzoTLSeKSxA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:17 2024 by rpki-client on console-ams.rpki-client.org