$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa File: a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa (raw, json) Hash identifier: 6DRsdMj5X3dzl1LuujGwiODoNjJt1M0C+ubTRimmTno= Subject key identifier: A7:D5:38:07:54:C2:FE:E4:EB:87:8B:6C:65:88:FF:65:AE:07:43:38 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285847A0414D8F2781F44EC1447280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 16417 IP address blocks: 216.71.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:4d:8f:27:81:f4:4e:c1:44:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=900886e4-886b-48cb-a765-d2ddc42f90fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:fd:ce:dd:9e:fa:1e:64:96:72:77:9a:7f: e9:1f:c5:0b:a8:cd:d7:b5:31:64:09:f3:5f:1c:65: 1c:92:33:f1:70:e2:79:1a:53:4a:5b:ce:6b:be:6f: f3:bd:41:ab:41:8e:6d:a9:b2:f5:13:2e:4a:52:cc: 49:af:7d:30:34:a6:2d:5e:4c:03:39:6b:b4:53:d0: 88:52:14:2c:75:20:7b:d6:dc:7d:34:6f:81:67:f1: 97:36:9a:31:0d:8a:e2:75:76:86:60:84:40:4a:5f: 79:5d:f4:cb:7d:1e:9e:d7:ce:5c:12:89:ee:b3:ce: 03:9c:63:37:4f:ff:e5:46:ac:aa:04:cf:7f:20:f6: 4a:13:d7:6a:cb:f2:bf:fa:85:3f:43:e1:bf:35:33: 57:c9:26:ee:3f:27:f6:69:4c:f0:ee:34:fa:5b:9d: 27:0a:09:3d:8c:35:43:e5:d3:df:55:00:77:b7:c0: d1:f3:e1:5e:66:f1:00:34:19:c4:05:be:b4:b3:11: 86:98:75:8b:5f:81:91:3f:54:68:cc:60:cf:97:eb: cc:d2:ed:4f:41:36:cb:a6:5c:60:78:bd:2e:98:0c: 2c:e4:9e:84:b5:38:fc:c2:7c:63:eb:5c:8f:8b:56: 13:d3:a6:e0:c9:f2:58:b0:1a:43:3e:d4:8f:70:5c: 63:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D5:38:07:54:C2:FE:E4:EB:87:8B:6C:65:88:FF:65:AE:07:43:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e1:ed:29:e9:11:fa:b9:5e:8c:8f:47:7a:0b:e5:54:e7:62: c9:75:c2:11:17:df:53:cb:c4:90:f0:f7:f7:cd:04:1e:e6:c2: 14:0f:68:c7:14:23:d2:d8:c1:24:7c:0b:28:36:b6:14:e1:19: 6e:66:ae:04:4d:04:7b:a6:12:13:cc:28:67:28:67:d9:ba:56: b5:9a:bf:ac:88:a1:5d:1f:21:50:f3:2d:3e:bc:0d:d3:a7:7d: 1c:f7:12:ee:bd:ff:ff:7f:79:dc:c4:7f:12:1c:58:6d:16:5d: 04:4a:02:46:65:c7:f7:60:5d:95:80:fe:6c:9c:74:94:47:a0: 52:80:0e:46:18:38:3a:56:b3:bc:de:f8:4a:79:64:0b:59:83: 1e:81:d9:3c:7d:fd:85:7e:44:ce:1c:33:05:af:59:bf:27:d0: 14:d1:1a:d0:a9:94:f3:0e:7d:72:32:3c:87:d9:49:59:ba:34: be:4e:81:d2:40:2c:06:1d:bd:87:22:9d:b1:da:39:be:96:96: ed:ef:4b:b7:c7:0e:53:6c:20:42:8b:72:2e:35:c5:76:25:06: 4f:da:b6:a6:4b:47:a1:b6:5b:7c:65:22:96:50:02:e5:bc:e1: 66:e9:51:fb:1e:77:b9:2b:4f:eb:00:e0:e2:20:f8:e3:40:57: 7f:89:6c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQU2PJ4H0TsFEcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk OTAwODg2ZTQtODg2Yi00OGNiLWE3NjUtZDJkZGM0MmY5MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4v9zt2e+h5klnJ3mn/pH8ULqM3XtTFkCfNf HGUckjPxcOJ5GlNKW85rvm/zvUGrQY5tqbL1Ey5KUsxJr30wNKYtXkwDOWu0U9CI UhQsdSB71tx9NG+BZ/GXNpoxDYridXaGYIRASl95XfTLfR6e185cEonus84DnGM3 T//lRqyqBM9/IPZKE9dqy/K/+oU/Q+G/NTNXySbuPyf2aUzw7jT6W50nCgk9jDVD 5dPfVQB3t8DR8+FeZvEANBnEBb60sxGGmHWLX4GRP1RozGDPl+vM0u1PQTbLplxg eL0umAws5J6EtTj8wnxj61yPi1YT06bgyfJYsBpDPtSPcFxjbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfVOAdUwv7k64eLbGWI/2WuB0M4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTg2MGY0OTctNTFjMC0z NjFjLWIzZDAtMWUzZGFkNGM3YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDh7SnpEfq5XoyPR3oL5VTnYsl1whEX31PLxJDw9/fNBB7mwhQPaMcU I9LYwSR8Cyg2thThGW5mrgRNBHumEhPMKGcoZ9m6VrWav6yIoV0fIVDzLT68DdOn fRz3Eu69//9/edzEfxIcWG0WXQRKAkZlx/dgXZWA/mycdJRHoFKADkYYODpWs7ze +Ep5ZAtZgx6B2Tx9/YV+RM4cMwWvWb8n0BTRGtCplPMOfXIyPIfZSVm6NL5OgdJA LAYdvYcinbHaOb6Wlu3vS7fHDlNsIEKLci41xXYlBk/atqZLR6G2W3xlIpZQAuW8 4WbpUfsed7krT+sA4OIg+ONAV3+JbBo= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org