$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/29337e97-2bc3-342e-a96e-80aec57d00a1.roa File: 29337e97-2bc3-342e-a96e-80aec57d00a1.roa (raw, json) Hash identifier: R+g3EJPFU0s0D+5eCd2lRAsAb75LoPUcoLVN6XV32YI= Subject key identifier: 61:C5:36:0B:2C:C6:E3:16:69:FA:9D:93:D4:50:89:D2:8C:30:17:53 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285847E62B65CEC1E8A5EEF6E1E6C0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/29337e97-2bc3-342e-a96e-80aec57d00a1.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36492 IP address blocks: 216.252.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:65:ce:c1:e8:a5:ee:f6:e1:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=a94d46bb-2d1f-48e8-b1d8-3a1f786dba25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4b:89:39:29:74:4b:50:f8:2d:44:bf:0e:85: e7:ba:d9:7c:ee:69:82:48:d3:69:25:d4:eb:d2:4c: 58:0d:31:c1:10:d4:1f:89:77:f2:49:c1:c0:13:79: dc:e4:72:5e:fd:af:c2:b6:34:f2:5f:be:e7:13:fa: f3:e7:4e:2f:50:f1:15:76:d5:81:82:82:5a:0b:f8: 02:23:06:b1:3d:db:7c:63:78:45:34:5b:b7:ef:a9: fc:df:13:36:11:99:88:7e:99:21:26:60:f7:ec:d8: 53:22:3e:be:d1:e4:f5:a2:95:c4:e3:ac:1d:f8:85: 43:5c:19:72:cc:25:f5:5a:3d:a4:4b:f8:62:93:3f: 83:ea:58:a1:76:33:5f:aa:2f:ec:8e:a1:2b:e5:8f: 73:e7:6f:04:4a:bb:74:a0:a8:54:f0:8f:17:86:6b: 06:69:f9:64:96:26:7a:a7:74:62:d9:5d:4c:71:a2: 2d:77:45:a8:2c:ce:3f:ef:9f:a7:56:e0:04:ee:01: 9b:0d:f5:fb:e0:25:a7:1b:9e:ee:e2:88:85:3e:f8: 00:7e:df:74:cf:f2:db:17:82:ec:ab:ed:f5:1e:d5: a7:45:c9:95:8b:29:30:d5:1c:b6:7f:0a:8c:0b:54: 46:35:26:3e:34:52:81:75:42:05:43:9e:b5:cb:86: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:36:0B:2C:C6:E3:16:69:FA:9D:93:D4:50:89:D2:8C:30:17:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/29337e97-2bc3-342e-a96e-80aec57d00a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f7:1a:eb:be:70:e5:7d:98:7a:96:a5:b4:f3:ca:1d:7c:28: c7:49:a6:c0:58:7d:6b:97:ae:63:ba:53:df:68:18:dd:5e:00: 33:df:b3:e1:de:a3:14:b3:1d:70:d9:59:23:32:9c:c9:ae:56: 84:75:df:0e:fe:78:0f:c1:6b:25:20:fb:8c:03:40:83:e6:79: 65:c9:34:77:e9:7e:8c:b8:60:02:c6:37:54:54:92:74:2c:27: 54:b7:0a:ae:bd:84:58:f0:2a:fb:18:c8:75:02:c4:f9:86:0a: 50:b4:84:c2:1d:29:c5:88:60:71:ed:c8:41:e5:2f:c2:45:82: 62:12:bd:b6:51:39:62:1c:03:4b:96:90:1a:3b:68:2c:6f:cb: c8:91:66:98:6c:f8:29:a2:dc:8d:fe:f9:23:be:9f:c6:4b:84: b5:ab:ff:08:86:1e:f2:9f:f5:4c:4a:c4:29:03:9c:60:ce:83: 24:4b:39:6d:38:7e:10:ac:21:a8:1d:ae:09:0a:2c:fc:ab:09: f7:25:62:ab:3a:bb:89:01:63:5f:36:e0:66:ad:df:c1:65:69: 1d:4d:fd:63:9e:65:f9:11:50:86:a8:6f:73:39:75:66:a0:55: 6e:74:3f:81:38:76:80:89:ec:a8:38:08:29:04:24:9e:06:77: c6:46:8a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK2XOweil7vbh5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YTk0ZDQ2YmItMmQxZi00OGU4LWIxZDgtM2ExZjc4NmRiYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kuJOSl0S1D4LUS/DoXnutl87mmCSNNpJdTr 0kxYDTHBENQfiXfyScHAE3nc5HJe/a/CtjTyX77nE/rz504vUPEVdtWBgoJaC/gC IwaxPdt8Y3hFNFu376n83xM2EZmIfpkhJmD37NhTIj6+0eT1opXE46wd+IVDXBly zCX1Wj2kS/hikz+D6lihdjNfqi/sjqEr5Y9z528ESrt0oKhU8I8XhmsGaflkliZ6 p3Ri2V1McaItd0WoLM4/75+nVuAE7gGbDfX74CWnG57u4oiFPvgAft90z/LbF4Ls q+31HtWnRcmViykw1Ry2fwqMC1RGNSY+NFKBdUIFQ561y4YnFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHFNgssxuMWafqdk9RQidKMMBdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMjkzMzdlOTctMmJjMy0z NDJlLWE5NmUtODBhZWM1N2QwMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr3Guu+cOV9mHqWpbTzyh18KMdJpsBYfWuXrmO6U99oGN1eADPfs+He oxSzHXDZWSMynMmuVoR13w7+eA/BayUg+4wDQIPmeWXJNHfpfoy4YALGN1RUknQs J1S3Cq69hFjwKvsYyHUCxPmGClC0hMIdKcWIYHHtyEHlL8JFgmISvbZROWIcA0uW kBo7aCxvy8iRZphs+Cmi3I3++SO+n8ZLhLWr/wiGHvKf9UxKxCkDnGDOgyRLOW04 fhCsIagdrgkKLPyrCfclYqs6u4kBY1824Gat38FlaR1N/WOeZfkRUIaob3M5dWag VW50P4E4doCJ7Kg4CCkEJJ4Gd8ZGijU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:32 2024 by rpki-client on console-fra.rpki-client.org