$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa File: 4ef1567d-c5cc-328b-9777-c38749d3e355.roa (raw, json) Hash identifier: D9AVTKiBqcJreQYgJgc3Z81RpLdlNNb8hXkkhTKJ/Q8= Subject key identifier: F8:51:9D:6D:6E:CD:8D:21:E9:F9:2D:DC:A9:43:97:15:6F:42:6A:F5 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584793B148AE78419562CA93F180 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 151.101.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:48:ae:78:41:95:62:ca:93:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=6ffa6e20-a1c8-4273-a2cc-f1627027e543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:46:aa:c9:b2:d0:4f:5d:8d:ed:59:ca:8a: 5c:ac:66:a1:b8:07:87:b0:b8:4c:20:b4:f6:18:dc: 8b:82:9e:ca:78:2d:fc:52:df:c5:08:31:ea:a3:51: 49:2a:1a:7f:2f:91:67:49:8f:cc:ed:3c:34:81:d5: bd:a3:5a:fc:13:9c:ac:9f:07:23:0b:f4:8c:d9:20: 48:ee:ad:b9:26:90:47:3f:56:21:20:13:16:e4:8d: f9:9a:ce:9f:be:19:41:86:34:13:6f:6d:98:43:e7: 56:1c:08:32:f4:00:69:0c:e2:88:07:b3:6c:38:86: 5e:24:82:b9:dd:21:1d:55:4a:8c:e1:1d:5f:5d:83: 19:b7:c7:4b:c6:f5:2f:af:75:57:eb:57:8d:38:b6: b9:1d:40:15:3b:81:12:ae:1b:cc:0d:2a:02:15:bd: d6:6b:ab:02:a7:42:a7:7f:8e:8b:53:8f:99:ad:17: 51:30:0d:55:13:d2:b9:10:c7:0c:5e:d9:c1:79:93: 2a:4f:eb:7f:44:88:01:f7:93:37:b6:c4:a8:03:0c: af:79:47:c8:b7:b1:3b:cb:fd:88:d2:f5:60:9f:94: 77:0b:36:8d:7f:d7:f3:0e:be:9d:14:70:4f:81:da: 9e:68:a3:3d:11:e3:e0:4c:17:e4:01:f9:40:91:eb: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:51:9D:6D:6E:CD:8D:21:E9:F9:2D:DC:A9:43:97:15:6F:42:6A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4ef1567d-c5cc-328b-9777-c38749d3e355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:02:ad:ca:96:72:bc:30:06:d3:43:a4:0c:74:d7:23:8c:e4: c7:07:b2:e9:02:aa:55:13:dd:4f:b2:12:c7:c2:6f:21:28:8e: ed:78:e0:3c:52:7a:05:3c:ba:4e:b7:fc:ea:e4:a3:fe:eb:b3: 72:e9:67:89:db:96:30:b3:72:5e:83:61:ab:87:d6:98:b3:92: 03:b3:ef:a9:48:22:81:a5:6d:70:cd:56:27:fe:0f:62:08:93: 1d:dd:3a:e3:b1:df:0b:86:51:d9:ec:6c:f3:67:2b:a9:38:12: c7:73:4f:48:50:69:11:a6:e2:e2:ad:34:17:5c:80:6a:52:3d: 50:fc:1c:cd:65:4e:85:b3:7f:4b:41:25:5a:d5:9c:f5:3c:7e: a0:4b:e0:4b:a3:46:4d:d5:41:50:c9:a1:8f:68:ce:3a:95:7d: 08:42:61:d9:92:ed:12:db:5a:07:d5:5d:e0:ab:fb:25:af:6a: 42:bd:a4:6b:b5:b4:e0:b7:68:e9:2c:aa:8a:60:da:f6:6c:59: 4d:f6:26:0f:28:ed:0b:b7:8f:f7:24:9d:96:b5:ca:60:08:76: 2d:34:5c:37:7c:c9:8d:a0:93:03:b1:27:67:6d:95:53:72:2c: c7:9d:94:4c:18:f5:90:a8:98:49:a9:fb:e0:f1:39:d6:55:68: 5d:51:27:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsUiueEGVYsqT8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk NmZmYTZlMjAtYTFjOC00MjczLWEyY2MtZjE2MjcwMjdlNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkftGqsmy0E9dje1ZyopcrGahuAeHsLhMILT2 GNyLgp7KeC38Ut/FCDHqo1FJKhp/L5FnSY/M7Tw0gdW9o1r8E5ysnwcjC/SM2SBI 7q25JpBHP1YhIBMW5I35ms6fvhlBhjQTb22YQ+dWHAgy9ABpDOKIB7NsOIZeJIK5 3SEdVUqM4R1fXYMZt8dLxvUvr3VX61eNOLa5HUAVO4ESrhvMDSoCFb3Wa6sCp0Kn f46LU4+ZrRdRMA1VE9K5EMcMXtnBeZMqT+t/RIgB95M3tsSoAwyveUfIt7E7y/2I 0vVgn5R3CzaNf9fzDr6dFHBPgdqeaKM9EePgTBfkAflAkeuhfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhRnW1uzY0h6fkt3KlDlxVvQmr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGVmMTU2N2QtYzVjYy0z MjhiLTk3NzctYzM4NzQ5ZDNlMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQCrcqWcrwwBtNDpAx01yOM5McHsukCqlUT3U+yEsfCbyEoju144DxS egU8uk63/Orko/7rs3LpZ4nbljCzcl6DYauH1pizkgOz76lIIoGlbXDNVif+D2II kx3dOuOx3wuGUdnsbPNnK6k4EsdzT0hQaRGm4uKtNBdcgGpSPVD8HM1lToWzf0tB JVrVnPU8fqBL4EujRk3VQVDJoY9ozjqVfQhCYdmS7RLbWgfVXeCr+yWvakK9pGu1 tOC3aOksqopg2vZsWU32Jg8o7Qu3j/cknZa1ymAIdi00XDd8yY2gkwOxJ2dtlVNy LMedlEwY9ZComEmp++DxOdZVaF1RJ/k= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:29 2024 by rpki-client on console-ams.rpki-client.org