$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fd01d4f0-fe07-3d28-8d49-8d0106d9a17a.roa File: fd01d4f0-fe07-3d28-8d49-8d0106d9a17a.roa (raw, json) Hash identifier: iLzBbMl+yC7/FIAFCzsXrg+NPhCWpxKXqjruJE0h5K4= Subject key identifier: 0A:B8:AA:8F:EF:4F:02:24:EE:4B:9D:6A:23:0C:C5:D0:88:85:B4:AC Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F432858474F4B7C216F771A73FA316E00 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fd01d4f0-fe07-3d28-8d49-8d0106d9a17a.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 199925 IP address blocks: 173.211.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:7c:21:6f:77:1a:73:fa:31:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=273e6871-8dbc-46de-bed5-4b3ee5551e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:42:c5:a0:b5:96:df:23:d3:11:a0:01:ca: 6b:9d:99:9c:66:10:af:b8:dc:6a:01:0e:d2:7c:c6: 18:81:c2:bf:40:33:bf:26:60:8f:e0:a5:30:f2:db: 7d:81:dc:85:82:af:0d:0f:a0:3e:dd:43:b6:48:fd: d9:20:84:1d:9c:8d:d1:a0:67:30:0c:1a:d9:14:fe: a5:9f:0b:c5:bb:e6:16:b4:4f:f4:80:8d:f4:70:d3: 70:f2:53:49:29:39:75:be:2e:18:30:3f:bb:85:13: 10:70:90:69:15:9b:15:62:8a:c7:0a:f5:57:de:fb: e4:5b:96:a1:78:cb:d2:85:0c:7f:d3:65:8b:c8:c3: ae:b4:16:e1:84:62:ee:ce:f0:84:42:0a:3e:17:62: a4:cd:83:33:e8:94:68:63:5b:54:ae:48:36:f7:d8: 5b:12:35:b9:f6:57:bb:4d:da:3c:1b:73:e5:a4:ff: d4:db:6e:a9:b1:f1:d1:be:4e:59:05:be:9c:4e:e9: 09:fb:58:30:5c:7e:48:99:5c:21:07:67:3a:44:4c: 3e:66:3d:25:dc:30:bb:4d:cf:fe:88:1d:b6:6a:d0: 72:70:0c:57:19:18:36:ad:ac:bd:6e:f1:43:24:85: 9e:5a:d5:66:49:d2:2a:22:fd:06:3e:27:ab:29:74: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:AA:8F:EF:4F:02:24:EE:4B:9D:6A:23:0C:C5:D0:88:85:B4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fd01d4f0-fe07-3d28-8d49-8d0106d9a17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 173.211.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:04:3e:35:ec:89:c1:6e:7c:fb:c2:08:f9:fe:20:6b:58:d9: de:cb:4b:f0:62:29:c7:5d:6b:93:31:1d:ad:c8:e5:e9:e5:cb: 2e:67:9f:dc:c6:1b:66:d2:80:c9:b9:f2:0b:b5:f0:54:d2:05: 61:1f:b0:29:70:db:7a:fe:dd:d8:04:87:84:d8:49:c1:84:b1: c5:2a:88:a9:a1:cd:fd:de:4f:5d:c4:81:2f:7e:50:94:f0:76: 3e:7f:20:d0:83:25:6f:36:0b:ac:c0:4e:b8:21:21:05:c4:c8: 40:57:30:09:de:c2:ff:89:85:77:5a:5f:f4:2f:18:ff:b2:58: b3:8d:65:07:8e:bc:77:09:8b:06:9d:f9:be:db:73:c1:a4:fa: 8c:12:4d:85:25:31:61:93:32:c3:d3:8e:45:1b:8b:59:d6:8b: 69:bd:23:b9:e8:6c:35:e0:78:55:0c:c7:72:c3:22:29:10:a4: b2:f5:be:0b:cf:eb:46:76:3e:47:1b:c6:27:fc:29:b9:b5:4e: d6:4d:e4:bd:e9:46:83:4b:21:66:5f:8c:40:4f:33:51:60:5b: 10:08:44:18:78:23:65:f0:4b:dd:24:27:10:93:bf:35:f1:b7: 12:f6:04:e3:b7:55:e0:26:9e:51:a5:f4:ba:f9:ac:cf:9d:1e: b6:63:79:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS3whb3cac/oxbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MjczZTY4NzEtOGRiYy00NmRlLWJlZDUtNGIzZWU1NTUxZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8JCxaC1lt8j0xGgAcprnZmcZhCvuNxqAQ7S fMYYgcK/QDO/JmCP4KUw8tt9gdyFgq8ND6A+3UO2SP3ZIIQdnI3RoGcwDBrZFP6l nwvFu+YWtE/0gI30cNNw8lNJKTl1vi4YMD+7hRMQcJBpFZsVYorHCvVX3vvkW5ah eMvShQx/02WLyMOutBbhhGLuzvCEQgo+F2KkzYMz6JRoY1tUrkg299hbEjW59le7 Tdo8G3PlpP/U226psfHRvk5ZBb6cTukJ+1gwXH5ImVwhB2c6REw+Zj0l3DC7Tc/+ iB22atBycAxXGRg2ray9bvFDJIWeWtVmSdIqIv0GPierKXRE+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAq4qo/vTwIk7kudaiMMxdCIhbSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZmQwMWQ0ZjAtZmUwNy0z ZDI4LThkNDktOGQwMTA2ZDlhMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgEPjXsicFufPvCCPn+IGtY2d7LS/BiKcdda5MxHa3I5enlyy5nn9zG G2bSgMm58gu18FTSBWEfsClw23r+3dgEh4TYScGEscUqiKmhzf3eT13EgS9+UJTw dj5/INCDJW82C6zATrghIQXEyEBXMAnewv+JhXdaX/QvGP+yWLONZQeOvHcJiwad +b7bc8Gk+owSTYUlMWGTMsPTjkUbi1nWi2m9I7nobDXgeFUMx3LDIikQpLL1vgvP 60Z2Pkcbxif8Kbm1TtZN5L3pRoNLIWZfjEBPM1FgWxAIRBh4I2XwS90kJxCTvzXx txL2BOO3VeAmnlGl9Lr5rM+dHrZjeTc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org