$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa File: 34d3497e-f5b7-366d-a095-53a322d49a0c.roa (raw, json) Hash identifier: Te3trfMYI9Q3RK91Z1MBjudcWkxuDzSKcdwlkgKsfpQ= Subject key identifier: 49:5D:7E:08:A2:9C:3B:B9:53:D9:F1:53:A6:93:38:66:09:95:79:42 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285847C1DF606F36F272BC03991F60 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 30039 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:60:6f:36:f2:72:bc:03:99:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=88cf4948-c0a0-43e0-bc58-259a7b79f4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:ec:59:c1:cf:f7:b1:88:cf:e4:94:41:b2: 67:1e:69:67:a1:93:21:30:0d:37:39:25:dc:69:ce: 48:f0:06:94:93:41:9b:a4:0b:15:73:59:93:2f:b6: d4:d0:2b:78:ca:25:ed:68:9b:58:a4:90:88:c0:f2: cd:11:e7:93:f5:b7:4f:0b:c2:8b:cf:85:c0:00:08: 75:c9:be:0f:01:ea:c2:0d:a2:ac:6d:62:22:b7:6c: ef:3d:24:bb:38:b5:b0:57:94:2a:69:4e:fb:f4:63: c9:8e:b3:a8:94:a6:c4:6c:7a:e4:61:c8:37:d7:7c: d6:18:d0:d3:ca:81:d2:bf:44:69:58:fb:ec:19:9f: 57:bd:c5:4f:66:aa:2d:81:42:bc:4f:4c:f6:0a:85: 8e:d2:43:6a:d8:1c:3a:39:68:43:40:c5:71:69:50: 90:4d:c4:4d:06:d0:67:3f:a2:f6:e6:cd:54:fe:e6: 70:61:5c:28:1d:26:7e:f7:ce:ef:65:03:eb:b2:d0: ab:96:ac:38:df:52:fa:21:f2:fa:93:a1:49:26:e8: b5:47:cc:59:fd:2a:4d:84:0b:ac:ac:24:23:16:52: 91:ac:df:54:d2:6e:1c:5d:61:b5:04:db:e8:3e:f8: 33:ab:9f:ed:6b:86:14:69:18:fe:40:07:87:09:47: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:7E:08:A2:9C:3B:B9:53:D9:F1:53:A6:93:38:66:09:95:79:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:de:72:25:62:b5:dc:90:01:bc:5e:a0:57:a7:c5:67:c5:6a: 73:da:27:02:c1:46:ad:1a:9a:67:5f:3b:a0:2b:66:27:7c:4b: ee:9c:be:35:d5:b8:46:3f:39:86:79:c0:ff:b9:35:b1:43:0d: 4d:83:c0:bd:47:e7:43:8d:49:f3:70:8a:26:96:67:1f:84:1c: 2d:25:c1:04:eb:79:cf:9f:c0:d6:dd:cc:f6:88:ae:e1:36:d0: c0:43:14:35:68:30:2b:e8:07:f7:10:9f:5c:f0:54:7a:ed:b1: 38:98:78:c8:aa:45:fd:82:e7:bc:07:f8:e0:54:b9:12:f7:db: a6:72:ee:04:ea:ad:2e:41:cc:a5:71:a5:2f:7b:40:94:7a:37: 89:a8:80:d5:10:fe:dd:cb:a1:79:8e:46:41:0a:fc:d5:3e:1b: 05:79:c2:21:dc:17:e7:cc:fe:c7:7a:32:15:e8:6f:4a:3f:b4: 9c:21:10:e3:2c:76:68:eb:ff:7a:73:60:2e:22:b5:67:a4:c4: 18:3f:4d:d0:1b:1b:88:ac:e0:0a:da:16:73:3f:b6:4b:d8:ca: d0:af:20:82:06:e1:28:20:62:2c:ba:72:95:fc:0a:fd:86:ca: e7:3c:52:58:f5:f1:7d:27:3b:b7:ec:07:8a:72:e2:06:8e:39: 17:9b:9e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB32BvNvJyvAOZH2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk ODhjZjQ5NDgtYzBhMC00M2UwLWJjNTgtMjU5YTdiNzlmNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKfsWcHP97GIz+SUQbJnHmlnoZMhMA03OSXc ac5I8AaUk0GbpAsVc1mTL7bU0Ct4yiXtaJtYpJCIwPLNEeeT9bdPC8KLz4XAAAh1 yb4PAerCDaKsbWIit2zvPSS7OLWwV5QqaU779GPJjrOolKbEbHrkYcg313zWGNDT yoHSv0RpWPvsGZ9XvcVPZqotgUK8T0z2CoWO0kNq2Bw6OWhDQMVxaVCQTcRNBtBn P6L25s1U/uZwYVwoHSZ+987vZQPrstCrlqw431L6IfL6k6FJJui1R8xZ/SpNhAus rCQjFlKRrN9U0m4cXWG1BNvoPvgzq5/ta4YUaRj+QAeHCUdC9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEldfgiinDu5U9nxU6aTOGYJlXlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvMzRkMzQ5N2UtZjViNy0z NjZkLWEwOTUtNTNhMzIyZDQ5YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIreciVitdyQAbxeoFenxWfFanPaJwLBRq0ammdfO6ArZid8S+6cvjXV uEY/OYZ5wP+5NbFDDU2DwL1H50ONSfNwiiaWZx+EHC0lwQTrec+fwNbdzPaIruE2 0MBDFDVoMCvoB/cQn1zwVHrtsTiYeMiqRf2C57wH+OBUuRL326Zy7gTqrS5BzKVx pS97QJR6N4mogNUQ/t3LoXmORkEK/NU+GwV5wiHcF+fM/sd6MhXob0o/tJwhEOMs dmjr/3pzYC4itWekxBg/TdAbG4is4AraFnM/tkvYytCvIIIG4SggYiy6cpX8Cv2G yuc8Ulj18X0nO7fsB4py4gaOORebnhg= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:14 2024 by rpki-client on console-fra.rpki-client.org