$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa File: a3af340a-151f-3e65-b202-a86ab76e7ddc.roa (raw, json) Hash identifier: 5GKp8e98dt8fwoBDpbvtukQqmSYjFbdqzPXtvDeZBWU= Subject key identifier: 6A:F4:6C:18:78:EF:FB:9A:61:1D:15:C7:AE:A2:BD:77:35:2F:4D:53 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285847EBBF7A7F10B23431E67ECBC0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 16433 IP address blocks: 170.176.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:7a:7f:10:b2:34:31:e6:7e:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=c6adb97a-ed12-49d9-97f6-301abe9e006c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:7b:c9:90:fb:8e:db:be:44:d7:d8:6a:7b: 37:16:c3:5f:e3:67:98:77:a2:c2:bd:ca:0d:11:2b: ef:96:e6:fe:5b:43:4d:e3:bd:36:56:d3:d6:80:a3: 49:42:84:e7:6e:62:ef:ed:fc:84:0c:7a:92:c3:02: d5:15:16:ea:3c:a7:91:ac:99:6a:da:0e:d8:71:ed: f2:0e:46:d6:11:f2:bc:2d:a0:9b:1c:5d:a6:9c:77: 67:15:93:77:80:90:4a:e9:da:bf:36:fc:f7:ff:5c: 70:94:f6:81:d4:79:02:01:46:55:24:a2:f3:8c:fc: be:68:9c:65:fa:6a:43:a8:76:fd:97:d4:d5:0d:ab: 64:c1:65:4e:32:e2:50:30:37:45:15:32:34:fa:ad: e2:1f:bd:49:37:3c:9d:2a:5b:cf:8b:fa:a6:de:60: b1:5b:54:b7:ad:0f:7a:2a:f2:1e:0e:61:7a:7a:00: a4:95:20:67:6a:87:30:76:c8:19:a6:7f:96:c2:f1: 4a:ce:b2:d4:fb:97:ab:e7:d0:5f:f9:27:a9:f0:92: 71:e4:cf:82:b4:eb:3b:18:59:56:6e:b1:c0:40:2c: e1:97:db:51:8a:a9:ef:d0:3d:b7:7c:86:aa:66:8d: fe:3d:7d:34:99:93:8b:3f:7b:92:f6:43:80:50:b8: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F4:6C:18:78:EF:FB:9A:61:1D:15:C7:AE:A2:BD:77:35:2F:4D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a3af340a-151f-3e65-b202-a86ab76e7ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 170.176.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2c:81:b4:1f:26:f1:f4:96:15:aa:7c:65:f3:7f:d7:43:b5: 05:d6:2f:f3:fb:04:1e:37:68:41:94:67:55:09:01:70:8b:21: 9d:a4:72:6a:4c:51:49:1c:95:77:fb:1d:a9:92:06:a3:37:07: a8:e0:5b:99:a2:2d:a5:66:2c:c9:d0:7c:b5:57:48:c1:5c:bc: fc:65:74:36:a8:61:7b:9f:19:28:53:00:e3:97:d5:4e:00:5b: d6:ee:bb:9a:c7:da:67:a5:1c:0f:3d:b6:fd:ab:eb:ec:ca:80: d5:78:46:29:88:d5:db:be:bd:05:4f:af:ed:e2:d5:43:8a:e2: 7f:be:60:68:d6:28:16:fa:e4:bf:39:10:3a:4d:a3:13:8b:3f: f5:78:b3:cd:6d:be:9b:f0:b0:7e:63:a7:26:e2:cd:4a:5b:b0: ce:9d:0f:a6:1e:59:68:02:f7:dd:f5:9b:58:78:a0:98:67:c8: 10:3f:90:8d:49:60:53:b6:78:eb:c3:9e:25:cb:f2:fb:13:c8: 05:51:87:4c:00:a6:f8:46:5b:9c:b1:98:c9:05:41:54:9e:46: 63:63:af:8b:68:1f:aa:a4:1b:30:ca:55:7a:0f:76:eb:47:e9: 7b:e8:1e:7f:44:18:d6:fa:99:11:12:90:e6:ed:6d:d2:ef:27: cf:19:af:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv3p/ELI0MeZ+y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk YzZhZGI5N2EtZWQxMi00OWQ5LTk3ZjYtMzAxYWJlOWUwMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSJ7yZD7jtu+RNfYans3FsNf42eYd6LCvcoN ESvvlub+W0NN4702VtPWgKNJQoTnbmLv7fyEDHqSwwLVFRbqPKeRrJlq2g7Yce3y DkbWEfK8LaCbHF2mnHdnFZN3gJBK6dq/Nvz3/1xwlPaB1HkCAUZVJKLzjPy+aJxl +mpDqHb9l9TVDatkwWVOMuJQMDdFFTI0+q3iH71JNzydKlvPi/qm3mCxW1S3rQ96 KvIeDmF6egCklSBnaocwdsgZpn+WwvFKzrLU+5er59Bf+Sep8JJx5M+CtOs7GFlW brHAQCzhl9tRiqnv0D23fIaqZo3+PX00mZOLP3uS9kOAULjLhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr0bBh47/uaYR0Vx66ivXc1L01TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYTNhZjM0MGEtMTUxZi0z ZTY1LWIyMDItYTg2YWI3NmU3ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqrD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQsgbQfJvH0lhWqfGXzf9dDtQXWL/P7BB43aEGUZ1UJAXCLIZ2kcmpM UUkclXf7HamSBqM3B6jgW5miLaVmLMnQfLVXSMFcvPxldDaoYXufGShTAOOX1U4A W9buu5rH2melHA89tv2r6+zKgNV4RimI1du+vQVPr+3i1UOK4n++YGjWKBb65L85 EDpNoxOLP/V4s81tvpvwsH5jpybizUpbsM6dD6YeWWgC9931m1h4oJhnyBA/kI1J YFO2eOvDniXL8vsTyAVRh0wApvhGW5yxmMkFQVSeRmNjr4toH6qkGzDKVXoPdutH 6XvoHn9EGNb6mRESkObtbdLvJ88Zr6M= -----END CERTIFICATE-----Generated at Sat Nov 23 20:22:48 2024 by rpki-client on console-ams.rpki-client.org