$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: 0B97CKmRJU7proRad+LEiGk4xdJkq+6KPExdXrk+PDE= Subject key identifier: 46:16:7F:8D:BF:65:26:E2:90:C0:38:28:BE:D7:7D:C5:81:BC:EB:AA Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285847E78F629ECDC5AC172A4BE300 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:62:9e:cd:c5:ac:17:2a:4b:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=91291deb-ed77-4817-bf0b-c069ca3548e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:76:d3:7c:23:f9:a2:e1:9e:5a:27:c9:59: f4:ab:32:27:1a:88:4a:b1:e1:04:71:58:58:cd:1f: 37:ec:39:eb:cb:c2:15:9a:4c:5b:58:8f:2c:e7:51: df:43:b7:41:a5:af:b9:8f:36:f8:13:06:df:bb:76: 80:9f:8e:4a:46:bf:e6:74:1b:b9:b8:10:75:b9:a6: 28:f3:55:c2:ab:0e:f9:9e:79:cb:fc:f5:4b:28:14: a8:b9:26:c2:af:8e:ae:89:89:35:7b:dc:c5:e9:ed: 4a:ce:43:c5:8d:0d:5c:77:c6:68:48:6d:03:c8:c4: f8:8e:94:d4:bd:24:52:0c:2b:89:35:b7:69:db:98: ed:53:59:ca:36:70:e6:70:5c:bb:a6:3c:d5:96:ca: 90:ce:dd:a6:f9:39:46:52:70:84:be:5a:79:e3:d8: d1:e7:b9:ad:20:18:51:96:d4:4e:f1:aa:12:94:d5: 48:c0:f4:02:b0:f1:5b:e0:f4:15:fa:79:b5:c6:2a: 21:ed:8e:69:e7:ee:4a:31:16:05:69:d9:4a:3d:6b: fa:05:a0:f5:d1:45:97:36:49:f1:c2:06:7f:d1:5e: ca:0d:66:bc:be:be:5f:91:7c:52:ea:4a:49:7c:0d: 35:70:0b:5d:57:ec:eb:c7:fa:ff:6d:1a:2a:ee:69: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:7F:8D:BF:65:26:E2:90:C0:38:28:BE:D7:7D:C5:81:BC:EB:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:40:67:ab:87:bb:f4:19:f8:86:3f:65:2e:ae:4d:8d:43:0f: 21:00:b1:a3:76:ca:9f:c8:83:a5:ba:de:49:3e:3f:47:c5:17: 48:78:ce:c7:c5:39:6d:19:32:1b:12:33:99:4f:ec:c6:ca:b7: 5d:11:df:16:8b:a5:e3:1f:f9:6f:a7:85:af:48:85:5d:44:fe: 72:52:b5:0e:3d:0f:1d:9e:72:ab:9d:ea:9f:2d:81:ec:76:04: 5b:79:61:15:ce:14:cc:20:40:db:ce:da:d8:1e:9c:2f:f4:e2: 17:68:7e:76:cd:6c:cd:ba:7e:2a:f7:1b:8b:1c:4f:53:dc:da: 4b:ca:fb:fa:d5:76:ff:5b:f4:6b:78:f2:ab:cd:cc:8f:87:39: 5e:25:04:13:06:6d:ce:ec:a5:cb:ab:e5:5a:0d:d5:ca:b7:27: 8c:fb:14:88:00:6f:53:bc:6b:96:b4:2f:7f:87:c5:ea:a3:7d: 6b:09:06:d0:77:4e:07:e6:a6:86:62:63:64:fc:57:e6:fb:58: 21:8c:7d:be:e4:5c:a3:92:23:fc:e3:04:81:a3:7d:38:7a:b5: 4e:98:82:44:56:b1:5c:f2:d7:c4:69:d6:00:3b:13:ad:4b:a1: 0c:84:72:41:db:c6:88:c6:14:db:41:e6:a8:98:0c:b8:80:0f: 9f:2a:dc:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj2KezcWsFypL4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk OTEyOTFkZWItZWQ3Ny00ODE3LWJmMGItYzA2OWNhMzU0OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1203wj+aLhnlonyVn0qzInGohKseEEcVhY zR837Dnry8IVmkxbWI8s51HfQ7dBpa+5jzb4Ewbfu3aAn45KRr/mdBu5uBB1uaYo 81XCqw75nnnL/PVLKBSouSbCr46uiYk1e9zF6e1KzkPFjQ1cd8ZoSG0DyMT4jpTU vSRSDCuJNbdp25jtU1nKNnDmcFy7pjzVlsqQzt2m+TlGUnCEvlp549jR57mtIBhR ltRO8aoSlNVIwPQCsPFb4PQV+nm1xioh7Y5p5+5KMRYFadlKPWv6BaD10UWXNknx wgZ/0V7KDWa8vr5fkXxS6kpJfA01cAtdV+zrx/r/bRoq7mlYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYWf42/ZSbikMA4KL7XfcWBvOuqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENAZ6uHu/QZ+IY/ZS6uTY1DDyEAsaN2yp/Ig6W63kk+P0fFF0h4zsfF OW0ZMhsSM5lP7MbKt10R3xaLpeMf+W+nha9IhV1E/nJStQ49Dx2ecqud6p8tgex2 BFt5YRXOFMwgQNvO2tgenC/04hdofnbNbM26fir3G4scT1Pc2kvK+/rVdv9b9Gt4 8qvNzI+HOV4lBBMGbc7spcur5VoN1cq3J4z7FIgAb1O8a5a0L3+HxeqjfWsJBtB3 TgfmpoZiY2T8V+b7WCGMfb7kXKOSI/zjBIGjfTh6tU6YgkRWsVzy18Rp1gA7E61L oQyEckHbxojGFNtB5qiYDLiAD58q3HU= -----END CERTIFICATE-----Generated at Sat Nov 23 18:54:06 2024 by rpki-client on console-fra.rpki-client.org