$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa File: cf8140ef-63de-3420-af2d-b86be24b6d5a.roa (raw, json) Hash identifier: tS0Y3wLhV3W10cEeXixU3kXqidpkROYYRFn2C01ueGc= Subject key identifier: 3A:28:5B:0F:11:53:69:57:7E:32:E9:A7:6F:C4:1C:00:12:BD:74:73 Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F432858474585F7979B060078C0ADC000 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa Signing time: Fri 20 Sep 2024 01:00:31 +0000 ROA not before: Fri 20 Sep 2024 01:00:31 +0000 ROA not after: Thu 19 Dec 2024 02:00:31 +0000 asID: 26946 IP address blocks: 216.159.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:85:f7:97:9b:06:00:78:c0:ad:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Sep 20 01:00:31 2024 GMT Not After : Dec 19 02:00:31 2024 GMT Subject: CN=9ec73f5d-ceba-441e-8518-324f57cee7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3c:72:78:37:71:8f:ec:42:a4:36:57:89:4d: b9:ca:4c:d4:f5:0d:c4:e0:99:03:8e:2a:2c:63:d8: 87:93:b4:02:c9:0e:46:23:69:2c:04:f4:1a:5c:3b: 68:21:c1:fb:8a:e1:d0:01:fa:da:76:67:2a:04:37: 6c:62:4e:2d:66:08:a7:1b:48:d6:68:af:2b:92:3d: 81:40:9d:65:84:de:78:04:8e:f2:ca:90:a1:ef:23: fd:4c:1f:1c:37:7c:81:66:72:5d:db:cf:04:6d:48: 70:61:db:82:56:51:2e:8a:80:d4:85:0b:2e:00:58: cd:d9:1f:61:c8:1a:ba:2e:d0:37:99:f6:e3:1e:e4: e5:db:bf:86:4a:24:51:c4:bd:56:93:39:f1:41:10: 2b:27:d5:ac:aa:44:f4:ce:a3:ac:43:e4:55:5c:b6: 42:e4:68:79:c2:11:a0:b4:64:b9:e3:99:e7:ad:59: 92:bd:29:a9:8a:a5:25:11:06:67:91:08:05:65:9c: 8e:39:ca:af:4a:22:e5:03:c0:63:31:ea:a5:57:fe: 0c:80:c1:73:8e:16:8a:d9:ee:fb:bc:a1:5f:8f:3e: db:df:23:58:a6:dd:f4:f3:37:9e:f8:95:87:29:11: b7:b7:4a:dc:ec:41:73:25:dc:5b:a4:86:53:24:20: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:5B:0F:11:53:69:57:7E:32:E9:A7:6F:C4:1C:00:12:BD:74:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 216.159.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b2:ad:4e:c6:61:a6:66:ef:45:a4:84:ce:a3:c2:8b:bc:80: 60:70:f1:63:46:a4:ee:93:14:0d:67:5b:d4:d3:dd:db:6b:d5: 65:b5:9a:52:56:0e:1a:14:1d:f5:f8:ad:34:62:f3:29:1b:dd: 1d:1d:63:a5:cd:77:9e:79:c9:e9:9f:02:db:fd:d5:64:b8:4c: 63:06:08:34:22:74:dc:45:6a:05:b1:1a:bf:37:da:8a:83:25: ac:29:dd:f0:ef:54:65:a8:64:44:1e:76:c3:48:3a:21:82:e5: d8:f0:d7:fd:55:67:e2:73:7a:41:a2:49:79:9e:99:11:af:8e: 86:c5:da:12:85:13:f9:50:a3:95:cc:3f:f5:35:15:b2:68:5b: 8b:71:50:50:f6:21:03:8f:18:90:0a:09:cf:a0:c5:85:5a:8a: 4e:64:06:e6:68:a4:f0:ea:71:79:be:11:eb:ba:70:1d:73:1b: 18:da:2f:3b:31:1e:de:bc:cb:1b:c7:d7:70:b7:5e:ec:49:57: 44:a3:15:b2:7d:52:92:5f:2f:ed:20:d7:3c:7f:2e:f4:e5:62: d8:2d:29:7f:3d:d8:5d:bc:0c:2f:86:b8:ab:2a:56:d6:63:a0: 74:89:9f:d6:cb:d5:b0:ca:39:f4:58:06:3b:cf:23:2e:df:05: b6:0d:6c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhfeXmwYAeMCtwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk OWVjNzNmNWQtY2ViYS00NDFlLTg1MTgtMzI0ZjU3Y2VlN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTxyeDdxj+xCpDZXiU25ykzU9Q3E4JkDjios Y9iHk7QCyQ5GI2ksBPQaXDtoIcH7iuHQAfradmcqBDdsYk4tZginG0jWaK8rkj2B QJ1lhN54BI7yypCh7yP9TB8cN3yBZnJd288EbUhwYduCVlEuioDUhQsuAFjN2R9h yBq6LtA3mfbjHuTl27+GSiRRxL1WkznxQRArJ9WsqkT0zqOsQ+RVXLZC5Gh5whGg tGS545nnrVmSvSmpiqUlEQZnkQgFZZyOOcqvSiLlA8BjMeqlV/4MgMFzjhaK2e77 vKFfjz7b3yNYpt308zee+JWHKRG3t0rc7EFzJdxbpIZTJCDf2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDooWw8RU2lXfjLpp2/EHAASvXRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvY2Y4MTQwZWYtNjNkZS0z NDIwLWFmMmQtYjg2YmUyNGI2ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J+1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2yrU7GYaZm70WkhM6jwou8gGBw8WNGpO6TFA1nW9TT3dtr1WW1mlJW DhoUHfX4rTRi8ykb3R0dY6XNd555yemfAtv91WS4TGMGCDQidNxFagWxGr832oqD Jawp3fDvVGWoZEQedsNIOiGC5djw1/1VZ+JzekGiSXmemRGvjobF2hKFE/lQo5XM P/U1FbJoW4txUFD2IQOPGJAKCc+gxYVaik5kBuZopPDqcXm+Eeu6cB1zGxjaLzsx Ht68yxvH13C3XuxJV0SjFbJ9UpJfL+0g1zx/LvTlYtgtKX892F28DC+GuKsqVtZj oHSJn9bL1bDKOfRYBjvPIy7fBbYNbBQ= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:17 2024 by rpki-client on console-ams.rpki-client.org