$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa File: 0344eba0-5400-3727-a9b4-12f7e7edd770.roa (raw, json) Hash identifier: qRFQH9zvUjpIKWayqDwOZeP4s9scpq8RCtW7K0b36LI= Subject key identifier: E0:22:38:82:D7:8C:37:76:75:C3:3A:A4:04:00:50:07:C1:3A:83:73 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285847B696BAFA89CEA8E6FDC9F300 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 16417 IP address blocks: 216.71.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:ba:fa:89:ce:a8:e6:fd:c9:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=b90bb739-ee76-4504-b869-dee9dd1f77d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:0f:7d:69:bd:ff:cd:8f:3b:76:bf:be:20: 9a:e7:de:ff:96:5e:b1:14:95:63:b1:ea:5e:b4:fc: 52:b5:1a:f3:4f:a1:4b:f4:1b:fb:2b:45:b9:e4:1c: c5:90:49:0d:a0:5d:96:79:11:a8:6f:30:75:77:da: cc:6b:92:3c:f6:80:30:18:eb:a8:ee:73:21:0d:05: 01:f6:56:14:42:92:8d:bd:d7:61:81:4c:f2:c5:fa: 29:25:d5:0c:88:12:19:85:53:c8:de:cc:f8:57:5c: b8:bb:ef:73:ab:e0:d8:65:e1:a1:30:a6:44:46:a8: 44:ca:28:8c:f5:39:f0:8b:d8:79:34:fa:2c:b0:43: a0:c2:73:cc:bb:ad:15:c5:af:2a:cf:ad:bf:0a:01: 03:3d:f0:4b:e2:6b:4f:bf:bf:16:46:5d:e4:2f:e1: 7c:d3:5a:fb:09:fe:64:d4:46:3d:00:07:c0:f7:6d: 36:e4:79:4f:c9:47:8f:8e:da:38:e9:7d:79:4a:85: 7d:2a:3c:3d:6b:db:da:c3:7d:bc:7b:33:59:d9:67: 5f:29:40:0c:cd:1f:52:29:c8:52:2b:a3:69:9b:83: 17:42:4e:35:00:c8:ce:ee:b9:1d:a9:1e:1a:86:9c: eb:46:c9:e2:75:5f:84:1d:2c:32:14:07:a0:4d:f6: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:22:38:82:D7:8C:37:76:75:C3:3A:A4:04:00:50:07:C1:3A:83:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:09:48:81:c7:1c:d8:6f:90:21:37:99:94:67:79:35:bc:64: f4:1b:d5:f5:5b:70:06:8e:46:62:2e:b5:17:86:9a:6e:1c:12: 28:da:84:53:9c:9b:9e:45:71:57:1a:c8:3c:65:b5:51:3a:c9: 4f:3e:f0:53:76:84:c7:3c:df:7e:84:1f:17:0f:42:7c:82:5a: 5d:e3:d8:99:89:36:ab:22:d7:39:36:f7:a0:ac:56:a0:12:52: bd:9d:30:08:cb:6e:c3:d4:70:21:11:76:26:85:54:50:4d:95: e9:32:c5:a7:ce:9f:fb:1a:27:66:f4:1a:55:a9:82:07:4b:1c: b7:e6:8d:6d:31:95:c9:9f:49:6a:22:23:62:31:08:dd:d2:fd: 4a:bb:5f:ea:3b:52:73:d3:f0:cc:94:4d:c0:ae:6f:59:af:77: 16:04:51:73:9f:c5:f8:10:03:03:e1:92:5d:31:07:51:17:cb: 77:25:4c:4f:15:fc:e1:db:8c:d6:12:ae:d4:10:7b:ca:87:ea: fe:b2:56:dd:d6:16:9d:53:4e:0c:f2:80:eb:c0:77:d3:ca:46: bb:43:4b:2d:f4:1b:e3:cc:6b:a8:91:7f:98:94:56:f4:0b:a6: 18:3a:23:5a:2d:0f:a6:f5:33:6f:41:8f:56:ef:ac:91:69:91: 61:50:88:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lrr6ic6o5v3J8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk YjkwYmI3MzktZWU3Ni00NTA0LWI4NjktZGVlOWRkMWY3N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomIPfWm9/82PO3a/viCa597/ll6xFJVjsepe tPxStRrzT6FL9Bv7K0W55BzFkEkNoF2WeRGobzB1d9rMa5I89oAwGOuo7nMhDQUB 9lYUQpKNvddhgUzyxfopJdUMiBIZhVPI3sz4V1y4u+9zq+DYZeGhMKZERqhEyiiM 9Tnwi9h5NPossEOgwnPMu60Vxa8qz62/CgEDPfBL4mtPv78WRl3kL+F801r7Cf5k 1EY9AAfA92025HlPyUePjto46X15SoV9Kjw9a9vaw328ezNZ2WdfKUAMzR9SKchS K6Npm4MXQk41AMjO7rkdqR4ahpzrRsnidV+EHSwyFAegTfYC9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAiOILXjDd2dcM6pAQAUAfBOoNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDM0NGViYTAtNTQwMC0z NzI3LWE5YjQtMTJmN2U3ZWRkNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoJSIHHHNhvkCE3mZRneTW8ZPQb1fVbcAaORmIutReGmm4cEijahFOc m55FcVcayDxltVE6yU8+8FN2hMc8336EHxcPQnyCWl3j2JmJNqsi1zk296CsVqAS Ur2dMAjLbsPUcCERdiaFVFBNlekyxafOn/saJ2b0GlWpggdLHLfmjW0xlcmfSWoi I2IxCN3S/Uq7X+o7UnPT8MyUTcCub1mvdxYEUXOfxfgQAwPhkl0xB1EXy3clTE8V /OHbjNYSrtQQe8qH6v6yVt3WFp1TTgzygOvAd9PKRrtDSy30G+PMa6iRf5iUVvQL phg6I1otD6b1M29Bj1bvrJFpkWFQiOA= -----END CERTIFICATE-----Generated at Sun Nov 24 17:24:45 2024 by rpki-client on console-fra.rpki-client.org