$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa File: f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa (raw, json) Hash identifier: nC3tXgeBV1OnuzhREMLuYTh6BgNk8XDpS+ms44XX+4A= Subject key identifier: 34:8E:C0:2C:14:F8:AB:EE:91:8E:F1:65:F8:53:C7:4C:88:0C:58:D2 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F43285847B96175C6A1C005FDBC6EAE80 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 203 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:75:c6:a1:c0:05:fd:bc:6e:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=b98f94f3-4691-4305-a472-c9ec50dd4600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:5f:da:c7:07:47:1a:ff:a8:f1:d6:c5:95: 34:7a:83:19:5a:86:c7:9f:50:ed:c4:ef:84:20:68: 8b:56:19:c3:c1:0f:5b:b6:d5:cd:4f:53:af:a9:60: 4e:ee:2e:06:69:f9:6c:79:f3:58:59:5a:2d:98:4e: c9:5c:f7:5e:74:1f:3c:01:7a:a6:b0:30:39:3d:cb: fb:06:f3:8c:f5:79:35:c5:0e:f6:92:bd:53:3e:3d: dc:c6:6c:ff:df:e1:79:88:c5:92:54:8f:ff:8a:7d: 2c:5f:47:fe:ce:43:b1:7a:6f:1e:97:06:5d:c5:02: 56:b2:6a:55:24:61:ac:b6:7c:7e:65:9b:13:8b:a6: ec:5f:c9:0b:ea:c1:60:7b:35:a5:4d:d4:92:71:01: c8:b4:4e:6b:05:28:73:bb:33:18:1f:b4:06:3f:b7: ab:58:92:d0:30:bf:e2:69:cc:1d:40:7a:00:d4:24: 7b:e1:5a:db:87:2f:63:e7:04:c7:58:97:8d:f7:d5: 09:94:ca:62:d3:b7:01:50:66:26:29:d8:3d:4a:d6: cd:c0:d7:a1:cc:aa:1d:b1:36:6c:3b:c4:fd:a4:f6: f0:e8:90:f5:98:98:3e:26:0b:5f:f4:3f:1a:b2:bf: ca:a4:a9:86:7d:ff:53:96:92:65:e2:04:e0:67:85: be:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8E:C0:2C:14:F8:AB:EE:91:8E:F1:65:F8:53:C7:4C:88:0C:58:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/f3a1ca03-2bbd-36fe-b0ce-7e9ff6101e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e4:e0:d5:2a:b0:43:e2:94:20:9d:c7:3f:48:f3:93:69:48: d2:5d:ce:68:49:42:34:f1:af:d5:55:95:0f:33:5b:63:a9:fa: 87:ec:02:fe:16:22:c3:5a:ec:53:a9:e5:47:1e:0f:4b:f8:39: 92:1f:24:00:3c:8e:77:c1:71:df:3b:e7:d2:f5:67:6d:0b:ad: cd:b8:d4:c0:d9:61:bd:70:a1:5c:df:f2:07:48:a8:70:da:03: 44:38:32:51:62:25:dc:91:6d:ac:49:df:5d:27:a8:04:9a:76: 86:c4:63:bf:d9:c9:07:9b:b1:71:17:ea:03:6b:14:af:6d:f7: 61:f5:23:45:58:d4:56:ac:b9:c0:d6:76:f9:59:f8:aa:86:38: a7:ff:9c:0c:4c:23:03:5d:2e:38:1b:55:dc:a2:58:c2:9a:4a: 32:78:a5:15:88:a2:cd:7d:10:3f:18:40:10:90:76:d1:e6:46: f0:85:39:8d:1e:6c:5a:8d:b3:5d:2e:7d:e7:1d:e1:ff:79:42: ea:db:75:40:66:d1:b9:82:69:d8:a7:3e:8d:f8:92:4d:47:96: 86:63:7b:2f:ab:fc:f5:23:1a:77:68:c9:8a:0c:af:9f:20:1c: fc:bb:c5:7a:1d:03:38:c0:a8:24:e6:9f:f2:7d:83:5d:d6:fe: c3:00:2b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXXGocAF/bxuroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk Yjk4Zjk0ZjMtNDY5MS00MzA1LWE0NzItYzllYzUwZGQ0NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLhf2scHRxr/qPHWxZU0eoMZWobHn1DtxO+E IGiLVhnDwQ9bttXNT1OvqWBO7i4GaflsefNYWVotmE7JXPdedB88AXqmsDA5Pcv7 BvOM9Xk1xQ72kr1TPj3cxmz/3+F5iMWSVI//in0sX0f+zkOxem8elwZdxQJWsmpV JGGstnx+ZZsTi6bsX8kL6sFgezWlTdSScQHItE5rBShzuzMYH7QGP7erWJLQML/i acwdQHoA1CR74Vrbhy9j5wTHWJeN99UJlMpi07cBUGYmKdg9StbNwNehzKodsTZs O8T9pPbw6JD1mJg+Jgtf9D8asr/KpKmGff9TlpJl4gTgZ4W+zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSOwCwU+KvukY7xZfhTx0yIDFjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvZjNhMWNhMDMtMmJiZC0z NmZlLWIwY2UtN2U5ZmY2MTAxZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTk4NUqsEPilCCdxz9I85NpSNJdzmhJQjTxr9VVlQ8zW2Op+ofsAv4W IsNa7FOp5UceD0v4OZIfJAA8jnfBcd8759L1Z20Lrc241MDZYb1woVzf8gdIqHDa A0Q4MlFiJdyRbaxJ310nqASadobEY7/ZyQebsXEX6gNrFK9t92H1I0VY1FasucDW dvlZ+KqGOKf/nAxMIwNdLjgbVdyiWMKaSjJ4pRWIos19ED8YQBCQdtHmRvCFOY0e bFqNs10ufecd4f95QurbdUBm0bmCadinPo34kk1HloZjey+r/PUjGndoyYoMr58g HPy7xXodAzjAqCTmn/J9g13W/sMAK1g= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:46 2024 by rpki-client on console-ams.rpki-client.org