$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/5e92e144-756e-3d55-94a2-0e992de2522a.roa File: 5e92e144-756e-3d55-94a2-0e992de2522a.roa (raw, json) Hash identifier: vWPv533swQpiYd9vUDDcTWO/BdNqbSaagfHea/mOm80= Subject key identifier: 69:43:7E:FC:1D:11:18:A6:B5:75:B8:07:A8:86:84:F2:14:07:0E:F0 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858479D76C3727BCF49645E099E10 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/5e92e144-756e-3d55-94a2-0e992de2522a.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 14511 IP address blocks: 216.196.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c3:72:7b:cf:49:64:5e:09:9e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=a56e7daf-a73e-4669-9f67-33a11d22faa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:da:52:1b:61:04:dc:58:1d:90:66:56:2e: cf:04:b1:1c:cc:69:23:72:50:e8:91:81:90:ea:8a: c1:3c:1e:0c:88:6f:50:e0:ee:05:9a:6c:60:68:e4: dc:3b:ec:bd:10:63:82:0d:1f:ec:1b:c9:da:42:03: d0:07:aa:6a:72:e9:54:2f:60:4b:b2:77:9c:a3:91: 44:81:e6:65:a8:84:01:f7:5a:ec:30:2b:d1:91:05: d6:1d:57:ce:f1:00:96:bb:ab:1a:36:58:93:f8:ea: 12:74:e6:2c:5a:d9:d0:be:fe:d0:db:80:87:2f:05: 61:b8:7e:cf:50:26:3c:3e:05:dc:7e:e7:b1:59:35: a5:8c:3b:de:d4:8b:e4:14:b1:0c:75:cc:60:0b:f8: b4:fd:df:87:cf:c6:0e:cb:ab:0b:a8:0a:a3:13:03: 97:05:aa:ed:d4:3a:ce:01:c5:c7:ca:6b:a7:81:78: c2:17:d9:a9:56:61:cc:23:0c:1a:dc:63:e8:0e:15: 1e:b2:4c:b1:e9:96:69:68:12:e2:5a:83:27:8d:47: 6c:7c:83:32:3a:3a:9a:c6:db:6a:02:73:f1:36:28: 23:72:7e:82:64:f2:ce:bf:eb:85:36:6d:2b:05:b5: 1b:c1:b9:71:78:5b:ab:b1:3e:57:2a:34:d3:ab:ef: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:7E:FC:1D:11:18:A6:B5:75:B8:07:A8:86:84:F2:14:07:0E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/5e92e144-756e-3d55-94a2-0e992de2522a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1a:41:1d:57:cb:e1:c5:4c:4b:f8:5b:aa:e1:ff:88:42:a4: b2:2c:0f:cd:f6:cf:f2:48:94:c9:ff:90:11:89:16:22:9c:29: 01:79:f4:49:75:5f:89:e4:3e:69:00:58:67:4e:0e:ac:f8:c4: bb:4c:c6:89:4b:4c:d2:f5:81:45:3e:80:83:0b:90:f1:af:54: 78:05:37:99:e5:79:03:b3:5a:54:0e:05:92:46:07:ac:8a:22: 18:60:64:ab:36:0b:14:52:da:e3:56:24:ec:9a:a0:e9:28:da: 6d:7c:5d:58:39:d1:e1:29:c7:46:29:ec:5c:eb:f2:cc:ba:02: 55:94:4f:f9:56:34:e1:67:5a:98:1f:95:bb:62:7b:eb:54:00: b3:30:6f:f2:0c:de:94:be:b1:eb:cd:f8:4d:f7:5b:15:b7:08: f6:8f:6a:d3:2c:85:88:08:c1:77:70:6a:75:5e:c1:0c:7f:c8: 59:84:cb:90:67:3c:c6:63:59:47:24:d3:96:b8:d4:92:9b:1b: 47:19:0a:fd:db:b0:09:b0:6b:37:de:9f:7d:de:1b:d9:dc:c7: f5:e5:fc:55:ef:00:1f:3c:b5:be:37:2a:98:da:8f:66:c6:1d: 61:4d:10:3d:e1:51:69:e2:77:94:49:7f:f7:d4:90:1b:92:72: d3:6d:95:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsNye89JZF4JnhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk YTU2ZTdkYWYtYTczZS00NjY5LTlmNjctMzNhMTFkMjJmYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt/aUhthBNxYHZBmVi7PBLEczGkjclDokYGQ 6orBPB4MiG9Q4O4FmmxgaOTcO+y9EGOCDR/sG8naQgPQB6pqculUL2BLsneco5FE geZlqIQB91rsMCvRkQXWHVfO8QCWu6saNliT+OoSdOYsWtnQvv7Q24CHLwVhuH7P UCY8PgXcfuexWTWljDve1IvkFLEMdcxgC/i0/d+Hz8YOy6sLqAqjEwOXBart1DrO AcXHymungXjCF9mpVmHMIwwa3GPoDhUeskyx6ZZpaBLiWoMnjUdsfIMyOjqaxttq AnPxNigjcn6CZPLOv+uFNm0rBbUbwblxeFursT5XKjTTq+9KtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlDfvwdERimtXW4B6iGhPIUBw7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvNWU5MmUxNDQtNzU2ZS0z ZDU1LTk0YTItMGU5OTJkZTI1MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2MRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMaQR1Xy+HFTEv4W6rh/4hCpLIsD832z/JIlMn/kBGJFiKcKQF59El1 X4nkPmkAWGdODqz4xLtMxolLTNL1gUU+gIMLkPGvVHgFN5nleQOzWlQOBZJGB6yK IhhgZKs2CxRS2uNWJOyaoOko2m18XVg50eEpx0Yp7Fzr8sy6AlWUT/lWNOFnWpgf lbtie+tUALMwb/IM3pS+sevN+E33WxW3CPaPatMshYgIwXdwanVewQx/yFmEy5Bn PMZjWUck05a41JKbG0cZCv3bsAmwazfen33eG9ncx/Xl/FXvAB88tb43Kpjaj2bG HWFNED3hUWnid5RJf/fUkBuSctNtlXs= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org