$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa File: 35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa (raw, json) Hash identifier: 0J7tKm2CI3GFM4NLs6Id0J7u6LSRBsmZ7p8jWmp7ra8= Subject key identifier: 4A:7B:94:86:61:82:BD:1C:7C:9F:30:6E:75:22:CD:8E:07:67:63:07 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F43285847AA068BBDAA04B220D40BE2C0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa Signing time: Sat 26 Oct 2024 01:00:31 +0000 ROA not before: Sat 26 Oct 2024 01:00:31 +0000 ROA not after: Fri 24 Jan 2025 02:00:31 +0000 asID: 21769 IP address blocks: 173.211.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:aa:06:8b:bd:aa:04:b2:20:d4:0b:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Oct 26 01:00:31 2024 GMT Not After : Jan 24 02:00:31 2025 GMT Subject: CN=0c23248d-13b2-4e4b-8f29-89770d624b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:cd:59:da:6d:f9:15:b3:04:11:58:70:0a: bb:6b:13:91:21:b3:17:ff:58:0b:78:2c:a8:ea:17: 2a:d7:bc:ed:e3:01:ca:bb:d6:e7:bb:6a:e2:63:87: 95:14:4a:fb:ee:07:35:1f:39:4c:80:c7:84:31:60: 0d:5d:fc:74:5c:c2:fb:98:8e:00:0f:55:ca:ac:af: 50:ca:64:63:fb:72:15:89:c9:55:a1:69:b9:fe:3c: 63:96:03:30:85:0f:5a:a6:a9:ed:52:6a:1d:f0:e7: 25:6f:04:68:f8:52:5e:1f:8d:c7:03:52:79:fe:85: d5:25:b7:5c:ca:11:e9:58:41:54:ce:63:2e:f7:4e: 50:22:93:4f:ba:dc:b4:6b:44:fe:ce:c1:04:c8:18: bc:a3:36:af:fa:31:d4:e0:29:63:dc:19:06:17:1d: cc:8f:53:4e:5d:5d:05:e2:e9:57:f3:83:34:da:7b: 93:a4:65:53:23:80:6e:9c:b5:e8:4e:d2:e8:bf:47: 49:2c:19:c9:7e:f9:fd:30:38:63:83:20:ba:ae:10: e3:55:39:43:72:e5:d1:e2:10:1d:ef:26:19:96:cc: af:6c:46:ab:7a:91:db:a9:92:f1:6a:65:06:21:3d: f8:87:35:db:7e:cb:83:2f:39:0f:c2:95:ac:22:bf: 5f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:94:86:61:82:BD:1C:7C:9F:30:6E:75:22:CD:8E:07:67:63:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ae:e3:3f:9b:c1:2a:41:29:b9:04:34:55:c1:0f:db:19:d0: d8:85:ea:44:e4:cb:7e:37:d4:39:78:aa:43:d4:90:a9:5c:91: 4a:03:2d:d3:bd:7d:ee:e7:b7:6b:45:75:e8:63:6a:42:f6:18: 87:bf:10:3c:c1:c7:0c:96:fb:56:72:8e:33:ad:73:ab:d1:7d: b3:6c:75:eb:47:05:71:4e:af:9a:68:ac:2c:12:3b:bc:e0:88: d3:72:33:fb:53:b5:56:ef:e4:ae:49:8b:f2:5c:f6:b2:51:0e: 48:a4:2e:75:a2:d6:bd:8b:c2:ff:bf:53:84:6a:92:12:a0:ad: f4:3b:3d:c1:b5:46:b3:8f:49:bb:12:e0:1f:1e:54:e6:a0:a1: e0:53:52:17:07:02:6f:05:84:05:c0:99:83:80:7e:de:fd:37: 8d:f0:d9:58:4d:ae:1c:66:99:40:48:f1:6c:25:9a:50:f4:bd: c9:a7:38:7d:d3:c7:a2:fd:ad:97:a7:c9:6c:65:15:41:95:4c: cb:59:1d:d9:d4:45:61:ca:17:60:7a:e1:fe:e7:3c:b2:a5:da: 83:26:ec:c1:fc:29:f1:43:44:07:d6:d7:f3:b3:dc:91:5d:48: 15:31:b6:c4:e9:28:97:f6:a7:fe:95:87:4b:ca:59:aa:05:5b: ea:fe:be:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeqBou9qgSyINQL4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI0MTAyNjAxMDAzMVoXDTI1MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk MGMyMzI0OGQtMTNiMi00ZTRiLThmMjktODk3NzBkNjI0YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUzNWdpt+RWzBBFYcAq7axORIbMX/1gLeCyo 6hcq17zt4wHKu9bnu2riY4eVFEr77gc1HzlMgMeEMWANXfx0XML7mI4AD1XKrK9Q ymRj+3IViclVoWm5/jxjlgMwhQ9apqntUmod8OclbwRo+FJeH43HA1J5/oXVJbdc yhHpWEFUzmMu905QIpNPuty0a0T+zsEEyBi8ozav+jHU4Clj3BkGFx3Mj1NOXV0F 4ulX84M02nuTpGVTI4BunLXoTtLov0dJLBnJfvn9MDhjgyC6rhDjVTlDcuXR4hAd 7yYZlsyvbEarepHbqZLxamUGIT34hzXbfsuDLzkPwpWsIr9fLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp7lIZhgr0cfJ8wbnUizY4HZ2MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMzVjN2FjYmItNGM1Yi0z ZjhlLTlkZWQtNGI0NzFkNzMzYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdN7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+u4z+bwSpBKbkENFXBD9sZ0NiF6kTky3431Dl4qkPUkKlckUoDLdO9 fe7nt2tFdehjakL2GIe/EDzBxwyW+1ZyjjOtc6vRfbNsdetHBXFOr5porCwSO7zg iNNyM/tTtVbv5K5Ji/Jc9rJRDkikLnWi1r2Lwv+/U4RqkhKgrfQ7PcG1RrOPSbsS 4B8eVOagoeBTUhcHAm8FhAXAmYOAft79N43w2VhNrhxmmUBI8WwlmlD0vcmnOH3T x6L9rZenyWxlFUGVTMtZHdnURWHKF2B64f7nPLKl2oMm7MH8KfFDRAfW1/Oz3JFd SBUxtsTpKJf2p/6Vh0vKWaoFW+r+vjY= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:26 2024 by rpki-client on console-fra.rpki-client.org