$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa File: b3798828-71b2-329f-8988-21b3e3f05b65.roa (raw, json) Hash identifier: m2L6lMKkNzXUQmr5VcS5hZh1vJeeb7T4FteO4yKxPR8= Subject key identifier: FF:2C:3C:AF:71:EC:B7:0D:D1:80:36:CB:F2:55:78:9E:47:D0:B0:7A Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285847C1DF5D9F5803173108939400 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 25617 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:5d:9f:58:03:17:31:08:93:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=4c80bc40-a761-4282-8a77-117216cdc0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:94:57:e4:f7:26:62:28:67:2c:ca:4a:ec: 76:a0:c0:07:03:6c:45:72:23:7d:bc:29:e7:97:09: 19:4f:a9:b4:5d:f0:6c:b8:8d:0e:19:99:5e:33:ee: b7:1b:e2:d5:ea:14:11:bb:55:a4:f9:82:ec:00:f3: 6a:1f:8f:73:47:3f:4d:39:b8:c6:bd:47:0f:c8:8a: bd:fe:3d:1b:88:15:2b:d5:5e:49:e1:04:b5:36:a2: 56:31:95:ab:26:1f:52:f4:6a:7e:f4:8d:a4:36:3e: 43:5c:1b:b2:04:4d:84:54:63:62:ef:6f:b0:5d:e7: c8:3e:6a:40:95:0d:2a:6b:65:e8:28:7d:5f:2a:fa: 4e:e0:a1:37:67:4e:3e:21:55:79:36:8f:fb:89:30: 7d:7d:0e:b7:93:f3:32:fb:55:e8:a9:a0:5c:d6:75: e3:9e:71:bd:5d:56:14:bd:fc:6e:93:d2:62:b1:f3: 2f:89:13:86:b2:1d:6c:02:a0:4d:d4:d0:e0:63:b2: 06:8e:31:e5:95:97:b9:03:6a:1c:5d:f4:3c:f5:7f: b6:56:35:fe:ec:7e:da:a1:b8:0b:fb:bd:5f:f2:5d: 96:2f:84:6c:28:8a:ff:c1:b0:19:bb:c9:8b:c5:84: 53:d9:32:a8:7c:ff:a1:92:46:a1:51:92:6b:d0:96: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2C:3C:AF:71:EC:B7:0D:D1:80:36:CB:F2:55:78:9E:47:D0:B0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:35:df:d7:8a:49:e4:8a:83:15:58:ce:b4:37:1a:ac:9c:98: 6e:4f:70:75:8c:35:3b:d4:59:13:5e:6e:bf:17:3c:39:7e:16: a0:8e:97:ad:1b:45:c5:76:e6:d5:7c:76:c0:44:e2:9d:9d:d2: 4e:a9:9c:44:3b:1d:51:61:cd:2d:55:08:43:fc:9d:3a:a8:24: e6:4b:5b:18:23:8c:47:da:2f:21:57:4a:c2:52:16:1b:d5:bb: 15:ac:e4:b1:be:ee:87:37:ce:99:93:31:23:33:dd:c2:4f:ae: 8f:23:78:02:38:59:8a:00:00:9d:61:bb:bc:8e:6b:e0:98:0c: 23:54:a2:98:4c:75:db:1c:e3:a1:81:dd:c9:d5:88:2e:8e:56: eb:84:f5:ae:3c:ab:3f:b8:e9:5c:73:bf:ae:f4:03:c1:c4:0d: 04:d8:d8:8c:bf:3a:a2:e3:74:ec:81:cd:ee:05:5a:34:68:9d: 7c:04:b4:89:31:15:c1:ea:d5:24:e3:f2:23:5f:0a:9e:00:55: 7b:7e:1f:79:4f:15:8b:45:0c:a2:d2:85:50:61:02:75:f4:08: 73:bf:30:62:e6:36:30:e1:8c:2b:59:bf:48:25:e1:ab:47:e4: 54:84:29:6c:9e:db:3c:9a:4a:8a:9b:7a:c0:12:75:d3:c8:b3: 49:0b:57:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB312fWAMXMQiTlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk NGM4MGJjNDAtYTc2MS00MjgyLThhNzctMTE3MjE2Y2RjMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZmUV+T3JmIoZyzKSux2oMAHA2xFciN9vCnn lwkZT6m0XfBsuI0OGZleM+63G+LV6hQRu1Wk+YLsAPNqH49zRz9NObjGvUcPyIq9 /j0biBUr1V5J4QS1NqJWMZWrJh9S9Gp+9I2kNj5DXBuyBE2EVGNi72+wXefIPmpA lQ0qa2XoKH1fKvpO4KE3Z04+IVV5No/7iTB9fQ63k/My+1XoqaBc1nXjnnG9XVYU vfxuk9JisfMviROGsh1sAqBN1NDgY7IGjjHllZe5A2ocXfQ89X+2VjX+7H7aobgL +71f8l2WL4RsKIr/wbAZu8mLxYRT2TKofP+hkkahUZJr0JYUmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8sPK9x7LcN0YA2y/JVeJ5H0LB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvYjM3OTg4MjgtNzFiMi0z MjlmLTg5ODgtMjFiM2UzZjA1YjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk139eKSeSKgxVYzrQ3GqycmG5PcHWMNTvUWRNebr8XPDl+FqCOl60b RcV25tV8dsBE4p2d0k6pnEQ7HVFhzS1VCEP8nTqoJOZLWxgjjEfaLyFXSsJSFhvV uxWs5LG+7oc3zpmTMSMz3cJPro8jeAI4WYoAAJ1hu7yOa+CYDCNUophMddsc46GB 3cnViC6OVuuE9a48qz+46Vxzv670A8HEDQTY2Iy/OqLjdOyBze4FWjRonXwEtIkx FcHq1STj8iNfCp4AVXt+H3lPFYtFDKLShVBhAnX0CHO/MGLmNjDhjCtZv0gl4atH 5FSEKWye2zyaSoqbesASddPIs0kLVyc= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:17 2024 by rpki-client on console-ams.rpki-client.org