$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json) Hash identifier: fjf1VT2rLM0YOS33KpGJJ0z5WbvoscQBCO3M6JzpiYQ= Subject key identifier: 9D:1C:93:C5:C3:73:FB:8B:F7:A8:7C:B5:A7:9B:F1:22:F0:1D:64:B2 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F43285847299B1953627BACF00447F360 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 14717 IP address blocks: 72.21.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:19:53:62:7b:ac:f0:04:47:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=e6e53db5-82c2-4333-8730-5e9f985fdcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:db:f4:36:10:55:90:46:d7:4e:6e:46:4e:6c: c3:8c:de:62:2e:c2:90:7e:aa:79:30:ca:20:3a:df: 6f:39:4d:ba:b2:36:a3:4d:01:61:dd:89:d7:b9:0d: 01:95:8d:f2:fb:58:9d:cf:00:a5:9a:7b:4b:ea:79: 63:a3:dd:c1:5b:7e:0e:a3:2f:ae:cc:8d:f4:d9:3e: 68:e1:d5:7e:f9:ac:e4:d9:24:f1:82:0b:fa:ba:8c: 3a:4f:f4:52:14:06:8c:66:67:bb:d3:13:25:f0:ec: e1:b7:ef:07:c3:dd:16:91:58:30:dc:2f:e9:59:fc: 97:ea:8f:89:85:f9:17:9e:5f:54:fa:0e:04:ba:2f: 12:38:04:39:5a:c9:64:c3:16:a4:5c:34:2b:e6:81: d8:19:e2:f7:1c:84:55:fa:37:98:ba:04:91:28:5b: f5:ec:1d:bc:e0:ea:ed:7a:38:40:a5:68:c0:c7:25: 79:e3:42:b8:10:0b:0a:27:1d:a4:c6:26:6b:75:8f: 07:66:c2:0f:e7:a9:81:c7:c1:bb:7b:cd:2e:d6:7f: c7:a1:0b:01:12:01:18:6d:8a:d1:ea:eb:f6:e0:af: 56:0f:f7:7a:25:ac:34:17:95:77:0a:7e:66:1a:ed: 6f:26:fd:4d:1c:f5:e3:7c:60:1b:84:50:8a:22:e5: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1C:93:C5:C3:73:FB:8B:F7:A8:7C:B5:A7:9B:F1:22:F0:1D:64:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:20:f7:61:66:bc:ab:46:1d:54:4d:7e:ac:60:4f:3f:9f:e5: ab:7a:84:43:99:5c:e6:d2:92:a0:6d:e9:01:e4:b8:ba:10:88: 9f:11:37:55:2d:44:a4:f0:25:75:5a:9a:80:3e:ea:64:4d:a3: 18:7d:e0:4f:46:16:5f:dd:91:4a:63:8b:2f:71:bc:4e:81:25: 9b:f6:cd:d1:49:ab:0e:36:48:e3:bb:b6:43:fa:9e:06:22:38: 78:c4:ad:21:3b:f1:71:b7:4e:76:3c:2c:0e:3a:bc:05:56:04: 98:ef:8f:69:5a:22:55:44:b3:c3:e2:77:72:e5:5e:63:fe:bc: 54:0c:53:9a:e6:d8:9a:72:96:51:5d:13:d5:30:3b:39:f0:bc: 42:c8:10:7d:30:88:71:24:40:65:af:f5:a4:af:b7:6b:37:e4: 7d:3b:75:91:91:35:98:b0:a6:fc:52:b1:a7:96:1a:33:b3:ea: 9c:4f:f5:64:28:a9:87:6c:88:3c:6a:31:e6:44:ec:4f:2f:b1: 28:86:c0:13:8e:ba:4d:38:49:51:7c:b1:0e:7b:78:65:52:ca: e9:eb:06:a4:77:57:f5:43:2b:59:6a:81:07:f2:e4:08:82:b8: f9:a1:ef:d7:2a:fa:e8:9b:e0:b7:46:d3:78:e9:72:d0:9f:53: 49:da:67:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmxlTYnus8ARH82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZTZlNTNkYjUtODJjMi00MzMzLTg3MzAtNWU5Zjk4NWZkY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNv0NhBVkEbXTm5GTmzDjN5iLsKQfqp5MMog Ot9vOU26sjajTQFh3YnXuQ0BlY3y+1idzwClmntL6nljo93BW34Ooy+uzI302T5o 4dV++azk2STxggv6uow6T/RSFAaMZme70xMl8Ozht+8Hw90WkVgw3C/pWfyX6o+J hfkXnl9U+g4Eui8SOAQ5WslkwxakXDQr5oHYGeL3HIRV+jeYugSRKFv17B284Ort ejhApWjAxyV540K4EAsKJx2kxiZrdY8HZsIP56mBx8G7e80u1n/HoQsBEgEYbYrR 6uv24K9WD/d6Jaw0F5V3Cn5mGu1vJv1NHPXjfGAbhFCKIuUPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0ck8XDc/uL96h8taeb8SLwHWSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMGYyMTYwMjUtMDhmMC0z ZWQ4LTg0YzUtOWY3OTA0NTAzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4g92FmvKtGHVRNfqxgTz+f5at6hEOZXObSkqBt6QHkuLoQiJ8RN1Ut RKTwJXVamoA+6mRNoxh94E9GFl/dkUpjiy9xvE6BJZv2zdFJqw42SOO7tkP6ngYi OHjErSE78XG3TnY8LA46vAVWBJjvj2laIlVEs8Pid3LlXmP+vFQMU5rm2JpyllFd E9UwOznwvELIEH0wiHEkQGWv9aSvt2s35H07dZGRNZiwpvxSsaeWGjOz6pxP9WQo qYdsiDxqMeZE7E8vsSiGwBOOuk04SVF8sQ57eGVSyunrBqR3V/VDK1lqgQfy5AiC uPmh79cq+uib4LdG03jpctCfU0naZ2U= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:13 2024 by rpki-client on console-fra.rpki-client.org