$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa File: 3cb7fab8-7537-3a90-a460-36313c91e1b5.roa (raw, json) Hash identifier: ZioExTew+NKsg6Gqf8ks65cFmi/VfDSiWTmvHlHv628= Subject key identifier: F6:3E:69:A1:D5:49:BA:15:06:19:9B:6E:B5:94:3D:7C:4F:D0:D1:0C Certificate issuer: /CN=2059c963-068e-4fba-a7d6-639c3f36a91b Certificate serial: 010D0C9F432858479D76BA63F270FC2A0CBDCF80 Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 16509 IP address blocks: 216.247.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ba:63:f2:70:fc:2a:0c:bd:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=c5347f80-71e7-45f9-8025-2224ab3f8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:36:57:00:00:5d:a3:af:1c:b8:0a:64:cb: 12:24:f3:66:54:f4:ad:57:b1:83:75:04:ac:05:7f: a8:75:7f:3f:e5:cd:af:8a:ed:1a:08:47:25:93:0c: fa:41:37:8c:7b:48:4a:ae:55:82:a6:ba:1d:c4:9e: 78:68:ab:ce:5c:69:f6:fe:4b:e2:cb:58:c0:75:41: 66:b0:af:1e:6b:22:b8:fe:bc:d2:4b:6c:09:bb:d5: 8d:db:f1:a9:49:89:fa:fe:b2:83:5a:37:a3:f4:27: de:5b:43:8b:08:81:e6:44:60:b8:2a:f2:5e:79:58: 64:3c:35:4a:96:bc:ef:93:43:87:99:ed:9d:c5:ec: 16:e2:69:ea:82:01:8c:4a:15:1f:7d:4b:c7:40:a5: 85:72:8b:58:40:00:83:da:47:8b:13:a5:a6:64:55: 2b:c9:57:01:b9:c8:77:0f:f3:b8:02:ea:00:8d:8c: 17:d0:6d:83:ad:e5:15:5e:98:2c:a9:eb:23:63:84: 17:7d:45:cc:13:2d:e0:f8:fa:83:12:6c:d8:68:5d: e4:55:a9:ac:27:8c:c3:7c:2c:1f:bb:54:83:96:44: aa:78:78:27:8d:eb:f9:fa:95:bc:0d:de:ae:dc:64: 42:a5:70:ba:95:95:02:e3:93:c9:7a:44:96:81:d5: f6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3E:69:A1:D5:49:BA:15:06:19:9B:6E:B5:94:3D:7C:4F:D0:D1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl X509v3 Authority Key Identifier: keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer sbgp-ipAddrBlock: critical IPv4: 216.247.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c9:c5:3c:f3:ae:af:ef:4b:a1:30:81:0e:91:85:ee:cc:3b: 8b:d4:02:f4:75:6e:a1:f6:e4:68:b6:63:77:41:fa:5a:cb:9a: 7c:81:be:51:7f:ba:7c:da:4e:07:df:b3:4a:09:56:ac:8b:39: d5:88:7d:5b:b0:eb:24:99:25:02:aa:69:33:b7:67:08:38:ac: 69:aa:9d:c5:c4:45:e2:a7:e4:bf:03:72:aa:8e:ac:70:b3:39: 90:b6:cb:7b:66:c5:ce:72:fe:07:09:a3:f1:78:43:34:24:af: 01:2a:59:54:b7:fc:ef:8b:53:07:43:73:96:ed:f0:d5:74:ed: f8:cb:9d:da:bd:44:83:dc:68:8a:d4:67:71:9d:ed:44:27:e5: 17:93:4b:22:9d:e6:16:e9:b0:67:6e:15:0b:27:36:34:36:a5: 0e:25:d5:c5:70:02:7f:19:91:c2:89:0b:88:1a:7d:8f:b1:58: 60:43:40:0e:8e:5f:b7:3a:06:40:4c:20:d7:8a:e8:27:b4:9f: 9e:85:c7:21:28:04:58:b1:49:28:58:93:d6:59:0d:0d:6d:52: ec:3c:e3:a8:81:ca:54:21:e9:f7:9f:d7:20:11:91:83:9c:6d: 7a:c7:94:73:48:02:84:03:50:50:ba:45:d2:50:e9:11:2a:a4: cb:78:68:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrpj8nD8Kgy9z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZh OTFiMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk YzUzNDdmODAtNzFlNy00NWY5LTgwMjUtMjIyNGFiM2Y4YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtY2VwAAXaOvHLgKZMsSJPNmVPStV7GDdQSs BX+odX8/5c2viu0aCEclkwz6QTeMe0hKrlWCprodxJ54aKvOXGn2/kviy1jAdUFm sK8eayK4/rzSS2wJu9WN2/GpSYn6/rKDWjej9CfeW0OLCIHmRGC4KvJeeVhkPDVK lrzvk0OHme2dxewW4mnqggGMShUffUvHQKWFcotYQACD2keLE6WmZFUryVcBuch3 D/O4AuoAjYwX0G2DreUVXpgsqesjY4QXfUXMEy3g+PqDEmzYaF3kVamsJ4zDfCwf u1SDlkSqeHgnjev5+pW8Dd6u3GRCpXC6lZUC45PJekSWgdX2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY+aaHVSboVBhmbbrWUPXxP0NEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5 Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvM2NiN2ZhYjgtNzUzNy0z YTkwLWE0NjAtMzYzMTNjOTFlMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA1OWM5NjMtMDY4ZS00ZmJhLWE3 ZDYtNjM5YzNmMzZhOTFiLzIwNTljOTYzLTA2OGUtNGZiYS1hN2Q2LTYzOWMzZjM2 YTkxYi5jcmwwHwYDVR0jBBgwFoAUWNZYCwcsYV693v/1IVy0dP6S2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02Mzlj M2YzNmE5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/JxTzzrq/vS6EwgQ6Rhe7MO4vUAvR1bqH25Gi2Y3dB+lrLmnyBvlF/ unzaTgffs0oJVqyLOdWIfVuw6ySZJQKqaTO3Zwg4rGmqncXEReKn5L8DcqqOrHCz OZC2y3tmxc5y/gcJo/F4QzQkrwEqWVS3/O+LUwdDc5bt8NV07fjLndq9RIPcaIrU Z3Gd7UQn5ReTSyKd5hbpsGduFQsnNjQ2pQ4l1cVwAn8ZkcKJC4gafY+xWGBDQA6O X7c6BkBMINeK6Ce0n56FxyEoBFixSShYk9ZZDQ1tUuw846iBylQh6fef1yARkYOc bXrHlHNIAoQDUFC6RdJQ6REqpMt4aOA= -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:58 2024 by rpki-client on console-fra.rpki-client.org