$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa File: 8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa (raw, json) Hash identifier: TJA3pAxQZY5Y/dOKeOZArMguXQ45xMQM4CP+0yzVHoM= Subject key identifier: 29:1E:AD:8A:A7:3F:F1:D2:D0:C8:DD:C4:89:4C:41:5E:D5:9F:30:B8 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285847E62AAC4E2E2174C31027F180 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36492 IP address blocks: 216.252.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:ac:4e:2e:21:74:c3:10:27:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=fd12cd2f-699e-4ca0-9961-80db44ca1b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:4b:81:f2:95:cd:a4:70:1f:ca:87:60:41: 8f:7a:c1:53:bf:5d:78:ea:65:ff:11:bb:9b:d2:67: ea:22:7f:0d:09:37:0d:86:e8:30:22:ed:33:d0:fc: da:8c:3c:b0:71:67:37:75:4a:d1:32:a7:13:ed:7e: 0f:d6:35:ef:41:c1:e9:c3:0c:8c:7e:98:53:a2:23: cc:5d:82:05:f2:9d:8e:6e:d3:19:82:08:5e:95:36: 5f:56:b6:3c:b3:63:fc:5a:c1:c7:8e:10:cd:c1:74: 1f:db:fe:f1:8b:03:ef:cd:cc:82:20:d0:4d:e8:d1: 39:17:fa:65:af:52:d0:e4:f2:dd:7b:16:80:05:cb: 1d:dc:2e:33:08:59:cd:6b:4e:9f:67:64:b5:b7:95: a6:3a:83:58:79:68:9f:55:82:97:ee:36:ff:b6:43: c1:e1:88:7a:ab:eb:e3:83:a6:69:e8:84:1f:30:de: 45:08:df:f5:8f:a9:ae:59:2c:09:54:66:6a:6e:eb: 3c:27:90:c4:db:2c:23:93:bb:93:e9:af:52:8a:7f: e1:66:e0:f9:78:36:66:14:5e:f1:33:06:15:64:69: ed:7d:a1:18:84:60:27:d7:c5:08:4c:00:d0:9e:6f: ed:5a:2c:e5:0b:fd:77:bf:3a:7b:e8:29:3c:04:2f: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1E:AD:8A:A7:3F:F1:D2:D0:C8:DD:C4:89:4C:41:5E:D5:9F:30:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:16:3b:6e:85:5c:33:0c:85:7a:70:10:88:73:3a:69:1e:49: 99:09:81:d8:a9:af:72:75:2a:a8:a9:2b:8c:51:1b:74:ad:6e: c6:3c:09:32:c1:e4:ea:50:62:0c:ba:98:e4:67:11:fd:f4:eb: c6:c1:4d:97:ca:98:41:19:62:de:55:b7:ff:d9:8c:7e:4e:18: ce:79:d0:b0:21:f2:84:5b:6c:57:bf:1a:2a:7b:91:bd:26:d3: d8:8a:dc:51:7e:78:94:bf:d7:b9:6a:74:73:bf:b2:d9:c8:8e: 35:c9:6c:33:d2:5e:20:b0:c7:2d:86:1f:2b:69:3e:a8:65:62: 36:34:ae:b2:74:47:71:30:6f:2a:f2:5c:c0:89:e1:a9:2e:d4: 6b:d1:ec:72:60:50:ac:5b:fb:4e:5d:cf:38:bf:8c:fe:37:f4: 90:8a:57:de:f8:fb:09:62:0a:2a:57:e7:21:85:76:46:8a:ce: 01:e1:68:b6:93:55:5c:5c:24:93:df:b8:45:12:b4:70:54:92: 8d:94:50:87:8b:11:f7:7a:de:c4:2c:42:2f:13:69:4b:42:e2: 80:b9:27:6b:1a:69:6e:36:a2:0b:13:5d:bf:8d:62:33:58:8c: b0:d4:ca:fb:22:d3:f2:02:ce:1a:1b:a8:84:3d:2d:27:09:54: 2f:37:f5:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqxOLiF0wxAn8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmQxMmNkMmYtNjk5ZS00Y2EwLTk5NjEtODBkYjQ0Y2ExYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNlLgfKVzaRwH8qHYEGPesFTv1146mX/Ebub 0mfqIn8NCTcNhugwIu0z0PzajDywcWc3dUrRMqcT7X4P1jXvQcHpwwyMfphToiPM XYIF8p2ObtMZgghelTZfVrY8s2P8WsHHjhDNwXQf2/7xiwPvzcyCINBN6NE5F/pl r1LQ5PLdexaABcsd3C4zCFnNa06fZ2S1t5WmOoNYeWifVYKX7jb/tkPB4Yh6q+vj g6Zp6IQfMN5FCN/1j6muWSwJVGZqbus8J5DE2ywjk7uT6a9Sin/hZuD5eDZmFF7x MwYVZGntfaEYhGAn18UITADQnm/tWizlC/13vzp76Ck8BC+hSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkerYqnP/HS0MjdxIlMQV7VnzC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvOGIzYWU1YWQtODllMy0z ZjVhLWIzNDYtMjU1YjlmMzRlOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0WO26FXDMMhXpwEIhzOmkeSZkJgdipr3J1KqipK4xRG3StbsY8CTLB 5OpQYgy6mORnEf3068bBTZfKmEEZYt5Vt//ZjH5OGM550LAh8oRbbFe/Gip7kb0m 09iK3FF+eJS/17lqdHO/stnIjjXJbDPSXiCwxy2GHytpPqhlYjY0rrJ0R3Ewbyry XMCJ4aku1GvR7HJgUKxb+05dzzi/jP439JCKV974+wliCipX5yGFdkaKzgHhaLaT VVxcJJPfuEUStHBUko2UUIeLEfd63sQsQi8TaUtC4oC5J2saaW42ogsTXb+NYjNY jLDUyvsi0/ICzhobqIQ9LScJVC839dA= -----END CERTIFICATE-----Generated at Sun Nov 24 17:22:35 2024 by rpki-client on console-fra.rpki-client.org