$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d6c829b1-2c74-391f-8004-66d7e039a981.roa File: d6c829b1-2c74-391f-8004-66d7e039a981.roa (raw, json) Hash identifier: AweCI/Kx+oUXE3FCbBBYcY5oisqygflYpKrHEM6is2Q= Subject key identifier: 0A:19:FF:27:F0:BF:74:9D:AE:59:8D:D4:D2:AD:44:67:B1:3D:EB:D3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584777C6405632149E2C79D1A200 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d6c829b1-2c74-391f-8004-66d7e039a981.roa Signing time: Tue 08 Oct 2024 01:00:31 +0000 ROA not before: Tue 08 Oct 2024 01:00:31 +0000 ROA not after: Mon 06 Jan 2025 02:00:31 +0000 asID: 13576 IP address blocks: 216.249.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:c6:40:56:32:14:9e:2c:79:d1:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 8 01:00:31 2024 GMT Not After : Jan 6 02:00:31 2025 GMT Subject: CN=22b535c6-37dd-4c08-a2b8-7b23954743fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:c5:f1:ab:1f:7d:4a:7d:7d:e2:ad:4b:c9: e4:69:42:ec:3b:1c:3f:b4:cc:2e:57:cf:1a:ad:76: c1:73:19:49:3f:92:d5:73:e3:fb:d4:13:60:2b:8a: 1a:cf:b8:1f:32:7c:5c:4f:c5:91:26:74:ca:5f:7b: 3a:02:0d:bf:8d:67:90:70:23:10:d4:46:46:09:97: 0f:61:55:32:d3:42:1f:6f:a0:6b:dc:a8:ee:3f:fb: 69:37:64:69:f5:9d:00:c8:2f:0c:96:b1:9a:ee:49: 47:c3:32:d2:e9:11:65:d9:37:79:72:98:33:3e:a8: e0:c3:f9:8a:b9:47:e0:9c:cb:03:b1:fc:85:dc:ef: d1:4c:fa:3c:b5:8d:e2:5e:bb:e7:91:93:72:ac:d2: ff:0d:b8:27:9b:81:b8:0b:8a:e3:46:8d:42:0d:5c: 87:82:04:cc:75:85:89:01:fd:61:bf:3c:b5:97:6f: ba:7f:09:83:3b:e4:4e:af:b8:af:6e:d9:ec:1c:a4: c8:61:e6:a4:74:58:7e:60:51:8c:28:f9:b9:5f:47: 8c:42:98:e2:0a:a1:12:ca:dd:cf:5c:0e:04:00:a2: ee:36:be:11:39:a7:4e:5b:ae:49:0b:36:79:8b:dd: 8a:9f:de:78:52:05:4e:e5:9c:5e:b9:e9:0d:64:4e: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:19:FF:27:F0:BF:74:9D:AE:59:8D:D4:D2:AD:44:67:B1:3D:EB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d6c829b1-2c74-391f-8004-66d7e039a981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:98:82:18:27:a3:c8:59:f4:4d:24:a7:92:28:9b:90:c5:73: 88:bf:85:2b:db:88:8b:58:0d:30:f4:99:83:67:53:a9:de:13: c1:a2:3c:83:27:89:a1:9b:f8:f5:d7:07:71:8c:7a:fe:5f:1e: 37:a9:e1:8b:ec:81:f5:53:58:33:cf:72:61:af:3f:53:46:33: 3f:ce:5f:5c:be:27:2b:1b:69:39:de:77:03:fe:70:09:97:64: 0b:3c:96:b8:f8:a5:37:38:9b:ea:71:2c:d8:80:78:da:9e:69: 57:e9:88:b6:06:4e:10:f0:a2:7b:d1:bb:bc:41:ce:c8:ec:15: 6b:4b:5e:2d:8c:8c:f5:b9:73:4d:82:28:18:c0:2b:9b:78:a0: b6:3a:2e:16:37:74:80:d7:c0:3d:26:2a:ae:22:3d:14:45:6d: 7a:ea:9d:9a:b1:78:8a:ef:43:56:e9:48:90:08:cb:2c:f6:e5: 2f:f0:71:e7:c1:87:fe:8d:cb:38:04:77:b0:cd:01:43:07:14: 37:fc:91:b9:ea:8f:8c:0a:4e:b3:4b:45:9b:30:37:5d:33:57: 48:0a:11:86:70:fe:f5:22:e8:4d:48:fb:ec:0e:da:47:4b:3e: 05:01:21:55:d8:ff:88:5f:5b:4f:b6:f5:c8:65:2a:33:17:bb: 18:f6:64:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xkBWMhSeLHnRogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk MjJiNTM1YzYtMzdkZC00YzA4LWEyYjgtN2IyMzk1NDc0M2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiPF8asffUp9feKtS8nkaULsOxw/tMwuV88a rXbBcxlJP5LVc+P71BNgK4oaz7gfMnxcT8WRJnTKX3s6Ag2/jWeQcCMQ1EZGCZcP YVUy00Ifb6Br3KjuP/tpN2Rp9Z0AyC8MlrGa7klHwzLS6RFl2Td5cpgzPqjgw/mK uUfgnMsDsfyF3O/RTPo8tY3iXrvnkZNyrNL/Dbgnm4G4C4rjRo1CDVyHggTMdYWJ Af1hvzy1l2+6fwmDO+ROr7ivbtnsHKTIYeakdFh+YFGMKPm5X0eMQpjiCqESyt3P XA4EAKLuNr4ROadOW65JCzZ5i92Kn954UgVO5ZxeuekNZE5sjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoZ/yfwv3SdrlmN1NKtRGexPevTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDZjODI5YjEtMmM3NC0z OTFmLTgwMDQtNjZkN2UwMzlhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2Pn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeYghgno8hZ9E0kp5Iom5DFc4i/hSvbiItYDTD0mYNnU6neE8GiPIMn iaGb+PXXB3GMev5fHjep4YvsgfVTWDPPcmGvP1NGMz/OX1y+JysbaTnedwP+cAmX ZAs8lrj4pTc4m+pxLNiAeNqeaVfpiLYGThDwonvRu7xBzsjsFWtLXi2MjPW5c02C KBjAK5t4oLY6LhY3dIDXwD0mKq4iPRRFbXrqnZqxeIrvQ1bpSJAIyyz25S/wcefB h/6NyzgEd7DNAUMHFDf8kbnqj4wKTrNLRZswN10zV0gKEYZw/vUi6E1I++wO2kdL PgUBIVXY/4hfW0+29chlKjMXuxj2ZNI= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:13 2024 by rpki-client on console-fra.rpki-client.org