$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa File: 4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa (raw, json) Hash identifier: 0Ny+9WTXMYf2AkQVoaSkAmhnMAVh4wuyiy8qJ+KiQXY= Subject key identifier: 98:58:37:8A:38:96:FF:8C:21:F8:C8:62:EE:14:EF:07:BC:3D:A9:4D Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285847C4AA1B3B56027E01A1961F80 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa Signing time: Mon 04 Nov 2024 14:00:48 +0000 ROA not before: Mon 04 Nov 2024 14:00:48 +0000 ROA not after: Sun 02 Feb 2025 14:00:48 +0000 asID: 30039 IP address blocks: 216.222.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c4:aa:1b:3b:56:02:7e:01:a1:96:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Nov 4 14:00:48 2024 GMT Not After : Feb 2 14:00:48 2025 GMT Subject: CN=8319c187-3101-4dcc-8589-50b425cde4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:c0:43:58:7e:a1:1f:80:f0:04:f0:12:d7: e4:e2:45:34:3f:2d:9d:9a:7d:30:c1:1f:28:70:43: 0a:00:52:9c:69:60:cc:84:98:02:4a:8c:0b:a5:29: f0:34:9e:fa:bb:dc:aa:02:1c:6e:ab:3c:f5:c3:e2: 16:0f:0b:00:15:ce:6a:b4:5b:e1:b6:f7:12:08:fb: a6:54:bc:8f:98:cb:28:a1:7a:d1:54:fe:3a:19:b9: 73:c7:18:cb:cf:ee:17:7f:c3:8e:c8:33:ba:24:e9: c5:a3:ad:6d:b4:6c:a8:0c:1b:80:02:81:6d:d3:af: 23:f5:5b:46:e9:58:02:8a:41:fe:06:2e:80:49:80: 7c:11:0d:78:4f:9c:27:d1:24:c0:4f:f5:2b:73:69: d8:72:1a:5d:46:79:9c:c8:1d:0e:50:ce:5c:ea:f2: b7:b7:7f:80:66:f5:ca:38:6c:84:40:c9:71:05:70: 7d:11:93:00:4c:58:d8:99:de:23:3e:0e:54:09:6a: 07:6b:79:12:26:90:3d:6c:a5:dc:6d:4d:5e:48:39: 45:b7:f3:97:2c:ea:de:fa:69:02:32:34:8f:4e:68: cc:8b:ea:37:76:e3:24:a1:0a:dd:e0:85:d2:86:e7: 19:e9:18:8b:4f:42:7e:fb:35:a0:75:15:fe:8a:91: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:58:37:8A:38:96:FF:8C:21:F8:C8:62:EE:14:EF:07:BC:3D:A9:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cb:26:a8:fc:ec:ba:d4:e5:20:46:e9:26:46:0f:e8:4b:94: 67:d7:98:d2:03:28:e3:c1:26:bf:ac:05:7d:fc:31:b1:be:8e: 8b:aa:84:71:12:e2:33:ea:3f:ee:3e:22:c8:cd:ab:ff:d1:f0: e8:42:83:66:f9:6c:75:c8:ae:b3:d2:a4:7d:c6:f3:c0:41:f7: 2b:31:f7:d6:ae:75:9b:26:22:a8:5a:03:8c:10:5f:0d:aa:c2: 82:44:7f:9d:d8:d9:74:31:a4:8c:01:68:19:a0:2e:fb:bb:c4: 71:d1:fe:c1:6e:e2:dd:87:24:55:8e:84:83:2b:31:26:4c:ef: 63:cc:01:14:55:88:89:8a:9b:10:05:61:bd:8f:8f:26:00:f1: e0:eb:79:5e:bd:d4:d7:9f:2d:83:92:01:68:4f:f6:52:c5:8a: cb:6c:47:3b:d5:41:31:7a:1c:5e:66:91:e5:6d:c9:12:54:cd: dd:7c:51:8b:22:9e:35:f9:e6:76:a3:d6:66:f0:b7:59:d5:db: 51:02:16:e7:e0:59:3b:82:5d:81:31:83:cc:b3:8d:53:8d:a6: 69:00:a0:1b:bd:75:4b:3c:b6:1d:ab:a5:b8:7c:8e:3b:ea:70: 1b:5e:6b:8f:e7:d2:ce:5a:f2:f1:52:ef:95:34:f7:15:8e:93: 66:e5:21:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqhs7VgJ+AaGWH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk ODMxOWMxODctMzEwMS00ZGNjLTg1ODktNTBiNDI1Y2RlNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcHAQ1h+oR+A8ATwEtfk4kU0Py2dmn0wwR8o cEMKAFKcaWDMhJgCSowLpSnwNJ76u9yqAhxuqzz1w+IWDwsAFc5qtFvhtvcSCPum VLyPmMsooXrRVP46GblzxxjLz+4Xf8OOyDO6JOnFo61ttGyoDBuAAoFt068j9VtG 6VgCikH+Bi6ASYB8EQ14T5wn0STAT/Urc2nYchpdRnmcyB0OUM5c6vK3t3+AZvXK OGyEQMlxBXB9EZMATFjYmd4jPg5UCWoHa3kSJpA9bKXcbU1eSDlFt/OXLOre+mkC MjSPTmjMi+o3duMkoQrd4IXShucZ6RiLT0J++zWgdRX+ipHl3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhYN4o4lv+MIfjIYu4U7we8PalNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNGE1ZGEwMTEtM2M2My0z NDRlLThmNGUtMWI0ODVjNDFmN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrLJqj87LrU5SBG6SZGD+hLlGfXmNIDKOPBJr+sBX38MbG+jouqhHES 4jPqP+4+IsjNq//R8OhCg2b5bHXIrrPSpH3G88BB9ysx99audZsmIqhaA4wQXw2q woJEf53Y2XQxpIwBaBmgLvu7xHHR/sFu4t2HJFWOhIMrMSZM72PMARRViImKmxAF Yb2PjyYA8eDreV691NefLYOSAWhP9lLFistsRzvVQTF6HF5mkeVtyRJUzd18UYsi njX55naj1mbwt1nV21ECFufgWTuCXYExg8yzjVONpmkAoBu9dUs8th2rpbh8jjvq cBtea4/n0s5a8vFS75U09xWOk2blISs= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:14 2024 by rpki-client on console-fra.rpki-client.org