$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6f3eee94-4b98-3b97-a072-fe291ceb8692.roa File: 6f3eee94-4b98-3b97-a072-fe291ceb8692.roa (raw, json) Hash identifier: dOa1HqNr0GPW0nLl+PWlZgDXYOkXNM/cA1kPPqBXirM= Subject key identifier: 15:40:B2:87:1F:1F:A8:21:1A:1F:EE:91:73:7B:E5:06:BA:0A:B3:17 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858477C48DBB346AFE0890BDF65C0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6f3eee94-4b98-3b97-a072-fe291ceb8692.roa Signing time: Wed 09 Oct 2024 15:46:59 +0000 ROA not before: Wed 09 Oct 2024 15:46:59 +0000 ROA not after: Tue 07 Jan 2025 16:46:59 +0000 asID: 5065 IP address blocks: 216.24.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7c:48:db:b3:46:af:e0:89:0b:df:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 9 15:46:59 2024 GMT Not After : Jan 7 16:46:59 2025 GMT Subject: CN=90bdd701-979f-4530-96cc-a9d412552506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:87:0d:48:e3:9d:e0:d6:41:73:21:02:63:f2: b3:20:87:1a:84:eb:3d:98:fb:1d:f6:df:00:a2:57: 2e:bf:18:b9:98:30:7e:5e:04:07:91:fb:d3:31:ad: c9:0a:10:44:ac:9d:f4:d6:5a:eb:8f:e9:59:c0:38: b3:fe:9e:a1:4a:8b:df:f4:b0:d8:13:1f:63:de:7c: d9:d0:c6:0f:be:d1:51:be:ae:3f:6a:49:96:7a:b9: 1a:a9:f0:f4:cf:b9:59:a7:1b:bf:d3:38:ff:5a:67: 1b:8d:39:b5:39:01:3f:90:2f:ee:ee:3c:be:89:0b: 5a:14:ac:dd:19:5c:62:c2:a0:ab:9c:78:d0:1e:34: 3b:e6:81:c8:83:00:12:ec:26:7e:05:0b:87:bb:50: ab:b5:6a:bf:d9:2d:a7:de:15:c8:9b:09:2e:e9:a0: 04:35:2c:ab:95:48:77:01:55:16:d8:02:6c:6e:b6: b1:34:b5:e7:0f:db:1c:7e:93:f7:54:7f:26:83:80: ca:ad:d0:1e:b6:cf:55:14:d8:0f:ec:bd:f3:39:40: f3:88:0d:c9:8f:cc:93:ea:f8:c4:3f:19:0b:53:66: 5e:20:94:d0:fb:d2:a6:0d:46:1a:6f:40:16:87:6c: f8:7b:77:bc:db:ea:b9:53:e2:7c:58:ec:fb:12:d2: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:B2:87:1F:1F:A8:21:1A:1F:EE:91:73:7B:E5:06:BA:0A:B3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6f3eee94-4b98-3b97-a072-fe291ceb8692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ce:45:2e:a2:93:76:90:1b:ab:f5:e0:cc:64:2f:39:61:4b: af:0d:9c:8e:8d:5a:c0:52:e1:9b:6c:50:57:ab:d6:43:c2:07: 8c:58:3a:2d:9d:c7:3f:42:fe:ce:a7:c8:47:7a:76:13:06:45: 6f:19:25:e7:ba:03:a8:b5:f1:d1:1f:72:bf:8a:30:9f:9b:93: eb:09:33:66:20:fe:39:ab:40:3c:8d:ca:15:90:43:e3:f1:9b: 3d:ed:0a:46:db:7a:f8:87:fb:1c:89:ab:b9:09:b3:d2:2b:f2: 2a:45:8f:15:2a:06:87:52:57:d2:79:11:3a:7a:e7:fe:97:3b: 69:74:59:69:81:7c:9c:f0:45:74:14:55:31:87:f9:86:84:40: bf:da:1f:f3:bf:3b:36:f4:e2:79:2c:6a:5e:fd:2c:a6:dd:e9: f4:1e:c7:c2:2d:6c:e1:f0:b9:2c:cf:2b:b3:fa:54:2d:6f:c4: d9:95:a9:85:97:a0:ad:14:6a:8b:7d:d6:61:ee:a6:c8:fb:58: 64:a7:d1:ea:ca:cf:b9:af:98:8b:03:6c:f4:01:1d:0b:23:17: df:b5:d8:f1:d1:8f:21:3f:09:ca:78:3c:7f:9a:a0:62:9c:dd: 36:1b:03:5e:4a:90:b8:e0:ef:49:a2:f6:88:48:d1:0e:5c:b8: 46:22:f7:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd8SNuzRq/giQvfZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI0MTAwOTE1NDY1OVoXDTI1MDEwNzE2NDY1OVowLzEtMCsGA1UEAxMk OTBiZGQ3MDEtOTc5Zi00NTMwLTk2Y2MtYTlkNDEyNTUyNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54cNSOOd4NZBcyECY/KzIIcahOs9mPsd9t8A olcuvxi5mDB+XgQHkfvTMa3JChBErJ301lrrj+lZwDiz/p6hSovf9LDYEx9j3nzZ 0MYPvtFRvq4/akmWerkaqfD0z7lZpxu/0zj/WmcbjTm1OQE/kC/u7jy+iQtaFKzd GVxiwqCrnHjQHjQ75oHIgwAS7CZ+BQuHu1CrtWq/2S2n3hXImwku6aAENSyrlUh3 AVUW2AJsbraxNLXnD9scfpP3VH8mg4DKrdAets9VFNgP7L3zOUDziA3Jj8yT6vjE PxkLU2ZeIJTQ+9KmDUYab0AWh2z4e3e82+q5U+J8WOz7EtLeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVAsocfH6ghGh/ukXN75Qa6CrMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNmYzZWVlOTQtNGI5OC0z Yjk3LWEwNzItZmUyOTFjZWI4NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHORS6ik3aQG6v14MxkLzlhS68NnI6NWsBS4ZtsUFer1kPCB4xYOi2d xz9C/s6nyEd6dhMGRW8ZJee6A6i18dEfcr+KMJ+bk+sJM2Yg/jmrQDyNyhWQQ+Px mz3tCkbbeviH+xyJq7kJs9Ir8ipFjxUqBodSV9J5ETp65/6XO2l0WWmBfJzwRXQU VTGH+YaEQL/aH/O/Ozb04nksal79LKbd6fQex8ItbOHwuSzPK7P6VC1vxNmVqYWX oK0Uaot91mHupsj7WGSn0erKz7mvmIsDbPQBHQsjF9+12PHRjyE/Ccp4PH+aoGKc 3TYbA15KkLjg70mi9ohI0Q5cuEYi98E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:17 2024 by rpki-client on console-fra.rpki-client.org