$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa File: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (raw, json) Hash identifier: o/B/h9iYjJ2zCeGrZTWGqBMylpR3/FeB0G8esxNHLQI= Subject key identifier: 9A:5D:AF:C4:0A:96:F9:4D:FE:68:F2:E6:DB:62:98:FE:38:4A:A9:8C Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285848025A4D860826065CBD91DF40 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa Signing time: Tue 26 Nov 2024 16:20:27 +0000 ROA not before: Tue 26 Nov 2024 16:20:27 +0000 ROA not after: Mon 24 Feb 2025 16:20:27 +0000 asID: 46687 IP address blocks: 216.119.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:02:5a:4d:86:08:26:06:5c:bd:91:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Nov 26 16:20:27 2024 GMT Not After : Feb 24 16:20:27 2025 GMT Subject: CN=9cd036c1-4556-48f9-b012-93404909b3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:cf:5d:bc:c8:98:20:7b:dd:49:4b:96:b7: c1:a7:ad:c5:36:fb:bd:6e:df:48:29:8b:dc:f1:78: 0b:42:fe:0e:a6:45:75:0a:f1:a6:2b:dd:38:47:e8: 6e:1f:4a:2c:8d:84:f2:3b:1b:7f:2a:a5:c9:4b:22: 37:8e:7d:ba:e7:54:42:b8:f1:ba:df:bf:67:9f:6b: 14:1a:1d:6d:ff:1d:ce:ca:80:48:bf:cb:89:44:c6: 41:33:b8:28:e9:85:a0:10:68:64:9f:a5:cf:0a:01: 00:a5:e3:f5:d7:c0:96:60:ff:e1:6c:7e:a0:6e:7b: 71:f7:f3:91:a7:8f:39:fe:6e:ed:30:e3:59:e5:34: 61:23:31:16:58:38:2b:09:2e:cb:73:5d:40:0a:29: b5:0b:e8:91:45:14:8e:cb:de:5b:c9:ea:6e:7e:89: 71:8a:a9:e8:05:2a:61:ff:81:00:bf:15:cd:18:64: 3e:c5:e5:ab:a4:05:4d:b6:0f:8c:6c:b0:5d:57:3d: b0:b1:3b:36:0d:b0:b7:4f:40:d9:0e:04:c9:97:c8: 55:98:78:b2:3b:8c:40:7a:04:f3:6e:3e:f9:71:43: 12:80:13:d8:b2:14:1d:75:7d:3e:4f:4a:b6:da:8a: 3f:6f:40:35:15:ab:f5:04:50:94:f3:d7:35:ff:9f: cc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:AF:C4:0A:96:F9:4D:FE:68:F2:E6:DB:62:98:FE:38:4A:A9:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 216.119.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e6:70:e5:25:9f:42:96:17:c5:c3:d5:ed:7b:f3:7c:a4:e0: 7e:8c:8a:27:0f:1e:a5:f1:4b:15:98:15:2f:91:fa:9a:9d:98: ad:9a:8e:07:74:a5:f2:75:c9:75:45:17:d3:95:b7:89:9d:22: 83:f7:f3:b8:29:08:87:ab:74:b6:0b:6f:f3:6a:3c:48:9a:ab: 09:12:99:11:54:9f:dd:6f:fc:f6:f3:7e:53:e0:6b:ab:dd:b7: 6b:82:b4:9a:bd:9b:e4:6e:23:af:41:77:b7:84:6f:e1:aa:2a: ed:87:eb:97:a9:5a:38:37:4f:e5:77:44:3e:c0:20:fa:be:ab: 42:15:47:ed:ac:fc:fc:14:d2:79:5a:79:24:97:68:48:f2:87: 17:08:fc:1e:35:64:bf:6b:98:ae:9f:04:df:86:96:c1:06:79: 38:1a:3d:26:9b:3b:f6:1d:07:cd:f8:6c:a3:eb:88:37:bc:88: ef:23:63:cd:08:84:9d:e2:c0:46:b9:de:ed:b0:17:10:16:a4: ea:68:82:e2:6c:23:1e:41:b9:ee:bf:69:a9:7b:40:71:ae:7f: 84:16:af:94:47:a2:40:86:36:e7:ac:06:c8:12:1a:04:b5:3c: 57:0b:52:15:f3:5e:e7:5b:87:83:66:35:09:13:67:f1:f8:81: af:35:97:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCWk2GCCYGXL2R30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI0MTEyNjE2MjAyN1oXDTI1MDIyNDE2MjAyN1owLzEtMCsGA1UEAxMk OWNkMDM2YzEtNDU1Ni00OGY5LWIwMTItOTM0MDQ5MDliM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/zPXbzImCB73UlLlrfBp63FNvu9bt9IKYvc 8XgLQv4OpkV1CvGmK904R+huH0osjYTyOxt/KqXJSyI3jn2651RCuPG6379nn2sU Gh1t/x3OyoBIv8uJRMZBM7go6YWgEGhkn6XPCgEApeP118CWYP/hbH6gbntx9/OR p485/m7tMONZ5TRhIzEWWDgrCS7Lc11ACim1C+iRRRSOy95byepufolxiqnoBSph /4EAvxXNGGQ+xeWrpAVNtg+MbLBdVz2wsTs2DbC3T0DZDgTJl8hVmHiyO4xAegTz bj75cUMSgBPYshQddX0+T0q22oo/b0A1Fav1BFCU89c1/5/MiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpdr8QKlvlN/mjy5ttimP44SqmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMDhhZDkyNTItYTQxNC0z Yjg3LTg0ZDktMjU5YjdlNWUyN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrmcOUln0KWF8XD1e1783yk4H6MiicPHqXxSxWYFS+R+pqdmK2ajgd0 pfJ1yXVFF9OVt4mdIoP387gpCIerdLYLb/NqPEiaqwkSmRFUn91v/PbzflPga6vd t2uCtJq9m+RuI69Bd7eEb+GqKu2H65epWjg3T+V3RD7AIPq+q0IVR+2s/PwU0nla eSSXaEjyhxcI/B41ZL9rmK6fBN+GlsEGeTgaPSabO/YdB834bKPriDe8iO8jY80I hJ3iwEa53u2wFxAWpOpoguJsIx5Bue6/aal7QHGuf4QWr5RHokCGNuesBsgSGgS1 PFcLUhXzXudbh4NmNQkTZ/H4ga81l7Y= -----END CERTIFICATE-----Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org