$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa File: 5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa (raw, json) Hash identifier: 9qo+wp1ZSOx8aAKsLQ1D75ati6c/F9fc2JNw5NC+QPI= Subject key identifier: 49:24:B4:C4:50:D1:04:34:DE:6F:1D:C8:CC:45:FF:47:D4:B9:2E:72 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285847967BCD4182EDBA2B03164380 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 54004 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:cd:41:82:ed:ba:2b:03:16:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=09e3d59f-d3ca-4ac5-b271-50ed0d10ecaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:9c:ad:0e:36:47:8f:01:6e:66:e8:69:dd: 53:07:49:1d:20:20:59:4d:03:55:94:9b:a5:23:34: ed:e4:4b:bd:ff:9f:f5:f9:f6:54:20:65:1c:2f:07: 6b:81:73:03:a7:33:d7:80:36:58:53:01:30:1e:3d: da:31:d2:a7:a2:4c:0e:d0:57:78:04:e2:15:08:32: bb:0c:a5:13:06:9f:c8:23:a5:7a:d1:a1:a8:23:e3: ea:0a:d9:80:d0:1a:e8:76:16:ae:66:00:9e:06:b3: 7e:7b:44:8e:56:ae:7f:89:6d:39:9b:19:71:3f:1b: d1:93:78:5f:83:88:7a:cd:7e:e9:0f:56:7b:2b:1b: 29:d0:a9:80:52:63:8a:be:a3:c6:c0:2b:d3:da:4b: cb:91:e0:00:0d:80:3c:b8:2d:96:93:1c:a9:98:f8: 12:ca:38:ae:24:8d:8d:4c:08:76:6c:17:50:c9:60: 39:3c:99:5b:01:2e:06:88:65:ff:45:69:26:dc:76: 56:96:7a:49:0b:99:cc:95:8d:6a:a8:cb:9c:a5:d1: c9:11:62:06:ad:78:c8:b2:28:fd:a0:df:0f:26:c3: b7:5e:95:48:9f:43:6a:27:5b:20:54:ca:89:38:66: 0f:5e:93:a1:a6:f9:57:12:33:44:91:e4:df:e3:a7: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:B4:C4:50:D1:04:34:DE:6F:1D:C8:CC:45:FF:47:D4:B9:2E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2c:0c:95:ab:13:d1:84:d7:ec:ae:89:ec:8e:04:83:55:0b: 55:27:da:64:8e:98:8e:b7:9e:44:88:ea:86:ad:3c:5f:53:35: 64:31:5a:e4:fc:2c:63:2b:90:57:c0:ab:17:01:b7:04:70:d8: 34:f7:cb:cb:e0:97:c3:15:e1:b8:a2:1e:38:b2:12:34:03:fc: 1c:af:23:81:d9:95:c6:c6:f1:82:33:f3:cd:d5:1c:7a:a3:8e: f3:df:31:8d:a0:90:99:ce:61:fd:39:c3:bf:8b:01:b3:ea:bc: 7c:d3:c6:1c:1f:29:10:37:ea:42:4f:77:78:38:c0:42:7b:8d: 33:3e:ef:e5:b7:c8:f2:c4:72:7c:7a:08:79:e0:28:7a:56:8d: 76:87:51:3f:b1:72:09:81:4e:8d:22:e3:3f:d8:c3:ce:03:57: 05:f8:cc:e1:ee:b7:36:1f:37:5e:f4:9b:47:0a:24:19:16:b9: 2a:e6:06:af:cf:bb:bf:30:e9:71:ce:ba:b7:8b:c7:f5:6d:99: fb:99:c5:2f:78:16:fe:e5:62:26:af:60:f8:7e:72:45:d8:c4: 3d:e1:ff:0e:5e:1b:71:93:27:2c:d1:6e:ec:63:ed:4f:bd:08: 63:e0:e7:a0:da:25:c9:6f:bd:b3:5e:9b:0f:71:fe:3d:29:fc: ae:58:32:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe81Bgu26KwMWQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk MDllM2Q1OWYtZDNjYS00YWM1LWIyNzEtNTBlZDBkMTBlY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw2crQ42R48Bbmboad1TB0kdICBZTQNVlJul IzTt5Eu9/5/1+fZUIGUcLwdrgXMDpzPXgDZYUwEwHj3aMdKnokwO0Fd4BOIVCDK7 DKUTBp/II6V60aGoI+PqCtmA0BrodhauZgCeBrN+e0SOVq5/iW05mxlxPxvRk3hf g4h6zX7pD1Z7Kxsp0KmAUmOKvqPGwCvT2kvLkeAADYA8uC2WkxypmPgSyjiuJI2N TAh2bBdQyWA5PJlbAS4GiGX/RWkm3HZWlnpJC5nMlY1qqMucpdHJEWIGrXjIsij9 oN8PJsO3XpVIn0NqJ1sgVMqJOGYPXpOhpvlXEjNEkeTf46eDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkktMRQ0QQ03m8dyMxF/0fUuS5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNWIyZmE2M2ItZjY1MS0z YjQwLWFhMTQtYzhiODg0ZWY3ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMsDJWrE9GE1+yuieyOBINVC1Un2mSOmI63nkSI6oatPF9TNWQxWuT8 LGMrkFfAqxcBtwRw2DT3y8vgl8MV4biiHjiyEjQD/ByvI4HZlcbG8YIz883VHHqj jvPfMY2gkJnOYf05w7+LAbPqvHzTxhwfKRA36kJPd3g4wEJ7jTM+7+W3yPLEcnx6 CHngKHpWjXaHUT+xcgmBTo0i4z/Yw84DVwX4zOHutzYfN170m0cKJBkWuSrmBq/P u78w6XHOureLx/VtmfuZxS94Fv7lYiavYPh+ckXYxD3h/w5eG3GTJyzRbuxj7U+9 CGPg56DaJclvvbNemw9x/j0p/K5YMoA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:48:51 2024 by rpki-client on console-ams.rpki-client.org