$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa File: 861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa (raw, json) Hash identifier: QPkutxGWr0YBgqXgbUQcyqU47ssjSZnhC3rXoa8fMsg= Subject key identifier: FA:A5:54:D7:38:64:9E:95:CC:CF:72:EA:55:D3:B9:4C:50:5C:83:58 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858479D76C36350454857445E4180 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 14511 IP address blocks: 216.196.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c3:63:50:45:48:57:44:5e:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=03522a94-a037-4600-8c2e-ce787de3fd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:1b:5c:22:e2:85:8f:4f:ba:b8:95:a4:27: 3e:50:4b:26:44:8c:50:ea:be:1f:13:62:b0:79:fe: 57:06:1b:8b:84:c2:76:b7:57:98:78:ed:30:80:ab: 5d:e6:23:1b:31:7e:1d:c0:e3:f5:a1:07:91:10:96: e7:f3:88:c6:5a:f8:f1:85:c9:27:21:b7:d2:7d:ac: 53:32:2d:f0:3d:26:53:56:de:c1:3e:ce:d5:53:92: a6:6b:da:89:f7:8a:87:fe:6c:af:64:d8:37:8e:c2: e9:c0:7f:e2:df:4a:4b:1d:ca:0a:97:4f:21:ab:f5: 28:5f:24:43:52:3f:9b:83:60:99:bc:95:72:c2:32: a1:8e:58:77:a1:a8:6b:f3:de:2c:18:fe:a7:88:db: 17:b0:01:d3:36:0f:e2:ef:4a:6b:a8:77:ee:ea:8a: 43:a3:3a:70:ae:d1:1a:9d:2b:05:c8:e0:65:ca:41: 0d:02:1c:b3:e9:58:06:75:19:6b:71:55:da:51:5c: e0:9b:a1:8c:92:da:9a:7f:ab:40:e9:61:47:c9:f1: 51:cb:6e:a7:b3:73:7c:67:18:d0:c1:e2:93:b8:cb: 51:2c:2c:dc:bc:c5:52:40:66:d0:9b:1c:04:e1:9f: c2:5e:5f:d8:4d:ab:84:3a:20:61:ad:88:87:23:f2: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A5:54:D7:38:64:9E:95:CC:CF:72:EA:55:D3:B9:4C:50:5C:83:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:4c:20:f2:2a:f6:8b:9e:5e:96:73:a5:be:0f:19:9a:0b:e7: 40:43:04:21:17:9d:de:e3:e2:f6:74:68:b5:81:b3:06:fe:2e: 95:c9:26:43:d8:a3:83:7e:02:32:91:94:a0:2d:d0:34:23:11: 09:f6:bf:a1:83:db:e7:94:5d:dc:aa:cd:8d:01:d0:95:5b:f6: 45:91:c0:29:86:2d:1a:7c:ef:26:a1:79:12:99:92:77:68:aa: 20:56:9e:75:7d:38:f5:a3:cb:9b:d6:cf:0f:a7:4b:23:e7:a4: 7b:3d:e9:5d:4f:b2:80:78:c6:5e:87:2f:d5:e7:e3:86:ac:29: 3b:83:2f:40:09:b1:f8:d0:52:1e:de:aa:16:ec:17:17:b6:fa: c1:5a:3c:eb:fe:b7:d7:71:19:4c:ed:b1:14:84:50:5c:f3:49: 83:4e:61:ef:73:d7:7a:24:14:c8:d4:50:80:2a:55:93:4d:0f: 8c:6b:ca:28:5d:2d:53:ec:9e:c6:67:f8:97:43:7a:f8:1c:6e: fe:b8:c7:77:fa:84:db:7d:7f:5a:ae:37:18:a8:a3:2a:77:9b: b3:9e:49:ec:e1:df:2c:91:9c:82:ec:e5:a8:73:cd:06:d8:14: 8b:e8:7f:88:77:95:d9:1e:d4:09:0d:46:5f:ca:1d:67:f4:28: d4:b2:07:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsNjUEVIV0ReQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MDM1MjJhOTQtYTAzNy00NjAwLThjMmUtY2U3ODdkZTNmZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowQbXCLihY9PuriVpCc+UEsmRIxQ6r4fE2Kw ef5XBhuLhMJ2t1eYeO0wgKtd5iMbMX4dwOP1oQeREJbn84jGWvjxhcknIbfSfaxT Mi3wPSZTVt7BPs7VU5Kma9qJ94qH/myvZNg3jsLpwH/i30pLHcoKl08hq/UoXyRD Uj+bg2CZvJVywjKhjlh3oahr894sGP6niNsXsAHTNg/i70prqHfu6opDozpwrtEa nSsFyOBlykENAhyz6VgGdRlrcVXaUVzgm6GMktqaf6tA6WFHyfFRy26ns3N8ZxjQ weKTuMtRLCzcvMVSQGbQmxwE4Z/CXl/YTauEOiBhrYiHI/K9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqlVNc4ZJ6VzM9y6lXTuUxQXINYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvODYxZjJiMzAtM2E2NC0z YzY3LThhYjEtNWZmYzhhNjE3ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpMIPIq9oueXpZzpb4PGZoL50BDBCEXnd7j4vZ0aLWBswb+LpXJJkPY o4N+AjKRlKAt0DQjEQn2v6GD2+eUXdyqzY0B0JVb9kWRwCmGLRp87yaheRKZkndo qiBWnnV9OPWjy5vWzw+nSyPnpHs96V1PsoB4xl6HL9Xn44asKTuDL0AJsfjQUh7e qhbsFxe2+sFaPOv+t9dxGUztsRSEUFzzSYNOYe9z13okFMjUUIAqVZNND4xryihd LVPsnsZn+JdDevgcbv64x3f6hNt9f1quNxiooyp3m7OeSezh3yyRnILs5ahzzQbY FIvof4h3ldke1AkNRl/KHWf0KNSyBys= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org