$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa File: 1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa (raw, json) Hash identifier: foN5+zccRx0PSBT+3U8Xta1APh0YYQypLj3Tacq0d+c= Subject key identifier: 00:89:89:84:F5:FC:21:E7:65:1F:12:04:46:4A:90:B8:8F:B0:19:72 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584761718BEB6FA1076E379B8940 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa Signing time: Mon 30 Sep 2024 01:00:31 +0000 ROA not before: Mon 30 Sep 2024 01:00:31 +0000 ROA not after: Sun 29 Dec 2024 02:00:31 +0000 asID: 400238 IP address blocks: 216.87.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:61:71:8b:eb:6f:a1:07:6e:37:9b:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Sep 30 01:00:31 2024 GMT Not After : Dec 29 02:00:31 2024 GMT Subject: CN=ee639b2b-c0eb-4566-b3e0-eec297d63dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:3f:29:28:3d:fb:28:da:7e:bc:f9:16:a9: 4c:a0:a4:be:a4:f0:8c:60:06:d4:ec:73:0d:f7:c3: cf:e7:5e:34:d3:21:33:62:aa:66:93:36:ea:aa:00: 33:3c:bf:2f:7e:c3:2d:63:03:be:b1:8f:c3:da:7e: 59:16:e5:74:f1:03:b3:26:06:90:ca:23:2d:95:8c: d4:a5:e8:38:b4:5f:86:46:2b:d2:00:7d:29:02:56: 1b:67:32:d3:9d:b6:c2:c3:1a:95:43:42:d7:a0:3f: 9b:8c:cb:90:15:96:89:f2:e4:31:ec:bf:2f:b7:5e: d7:37:7b:a7:65:bd:c8:1f:2d:03:2f:77:ec:50:35: 0c:df:1a:ae:d7:6b:e0:4c:83:19:47:4d:99:ee:4f: e5:2a:8c:1c:f9:50:64:a8:8f:12:17:db:bf:db:59: 62:d3:27:65:cc:e6:01:91:87:d1:e6:0f:d2:97:72: bf:a3:8b:a1:ed:09:c3:fc:01:22:5f:20:5b:43:5a: 97:d2:7e:40:b6:fa:6c:09:f6:ec:a0:e4:27:42:00: be:d9:ad:8e:c5:da:fd:ec:c8:ba:a9:8b:f1:e7:51: 46:da:2a:be:b5:93:3a:3b:f7:c4:0b:4f:20:a0:54: f7:71:13:0f:fd:71:ad:e1:1f:22:e9:7e:89:c1:d2: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:89:89:84:F5:FC:21:E7:65:1F:12:04:46:4A:90:B8:8F:B0:19:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 216.87.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:27:34:07:ae:2b:ae:2d:24:f5:56:68:b2:c0:9e:72:65:cd: b3:3c:85:95:4a:c3:6b:1b:dc:9a:b4:82:d6:44:0f:6a:de:be: 9f:3a:dd:76:01:3d:9e:79:b4:0a:d8:15:7b:ca:6f:0b:ce:6a: a2:6e:da:a5:9a:ac:64:01:01:cc:80:c5:94:b4:2f:0f:da:73: b3:be:91:7b:a9:11:70:65:6a:8e:54:1c:fe:d3:ec:da:8b:03: d4:8c:3f:8b:d1:64:c4:4a:4d:9f:84:1c:fc:c7:b0:55:6a:3c: 35:00:37:28:79:e2:7f:32:78:f5:00:74:50:a8:bc:bb:8a:8b: 53:7e:fc:b4:26:4b:1a:fa:d9:cf:a7:a3:a0:5c:fb:41:74:b6: d2:a2:d4:47:9e:6f:7b:fd:d5:cc:7a:bd:8e:41:f6:0c:b6:0a: 36:ed:cc:a0:01:3b:f5:b3:c1:f6:71:58:c7:c2:f0:a5:8e:76: 5d:28:a8:07:6e:70:2f:f4:42:d2:ae:bb:b0:a2:21:af:b0:8a: a2:3a:3b:ba:22:43:f6:cf:c4:2a:38:1e:a1:45:dc:a9:50:e0: 1b:12:ad:eb:fc:56:36:cb:4e:62:6a:3e:6d:e5:4a:09:9a:70: 49:17:8a:2e:a6:ac:a7:e2:7a:dd:50:f3:e9:01:82:36:08:93: 76:64:b8:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdhcYvrb6EHbjebiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZWU2MzliMmItYzBlYi00NTY2LWIzZTAtZWVjMjk3ZDYzZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9o/KSg9+yjafrz5FqlMoKS+pPCMYAbU7HMN 98PP51400yEzYqpmkzbqqgAzPL8vfsMtYwO+sY/D2n5ZFuV08QOzJgaQyiMtlYzU peg4tF+GRivSAH0pAlYbZzLTnbbCwxqVQ0LXoD+bjMuQFZaJ8uQx7L8vt17XN3un Zb3IHy0DL3fsUDUM3xqu12vgTIMZR02Z7k/lKowc+VBkqI8SF9u/21li0ydlzOYB kYfR5g/Sl3K/o4uh7QnD/AEiXyBbQ1qX0n5AtvpsCfbsoOQnQgC+2a2Oxdr97Mi6 qYvx51FG2iq+tZM6O/fEC08goFT3cRMP/XGt4R8i6X6JwdLWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACJiYT1/CHnZR8SBEZKkLiPsBlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvMWQzMzIyYTAtMDk2NS0z N2E3LWI1MzgtOGQ0ZDRlY2Y5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMnNAeuK64tJPVWaLLAnnJlzbM8hZVKw2sb3Jq0gtZED2revp863XYB PZ55tArYFXvKbwvOaqJu2qWarGQBAcyAxZS0Lw/ac7O+kXupEXBlao5UHP7T7NqL A9SMP4vRZMRKTZ+EHPzHsFVqPDUANyh54n8yePUAdFCovLuKi1N+/LQmSxr62c+n o6Bc+0F0ttKi1Eeeb3v91cx6vY5B9gy2CjbtzKABO/WzwfZxWMfC8KWOdl0oqAdu cC/0QtKuu7CiIa+wiqI6O7oiQ/bPxCo4HqFF3KlQ4BsSrev8VjbLTmJqPm3lSgma cEkXii6mrKfiet1Q8+kBgjYIk3ZkuJM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org