$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa File: a401becd-3ae1-3b96-8178-8f59dad578c9.roa (raw, json) Hash identifier: fBO5uZvCo6lvKfIJ6pfBOd2jQl3T6nRhJFOn1p+HkQU= Subject key identifier: 66:18:35:DF:B5:8C:AF:4A:8F:02:3D:92:41:C3:A2:06:64:73:79:7D Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F432858478721271658F8D0F6670D8380 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 803 IP address blocks: 216.197.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:27:16:58:f8:d0:f6:67:0d:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=6caf29be-625b-47f4-9af9-8d95a6028c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:a6:04:3f:77:d4:b8:b4:bb:70:9c:66:87: f3:f4:ff:2d:e4:38:04:a3:ad:03:a2:f8:77:c1:28: 1c:5b:60:0c:0d:d8:99:09:d9:e4:da:e6:6a:0c:47: d0:13:e7:99:8f:e9:ce:16:54:52:cb:67:98:29:f6: d1:62:e9:00:63:52:85:49:06:69:4d:40:f3:b8:dc: 61:95:69:73:f5:5f:3e:b1:bb:66:50:d7:82:cc:72: d4:2c:94:d0:10:99:a4:7a:5d:69:11:46:63:cb:d1: d2:52:97:1a:7a:9b:45:71:14:69:b4:a3:24:d1:da: c5:8f:eb:84:9e:55:0d:a3:db:b0:e3:28:21:b3:f0: c9:5b:ab:f0:78:9f:e1:f1:57:fd:67:78:26:77:d0: 91:b6:b6:4e:5c:44:17:52:e9:20:e5:68:2f:79:a9: 14:fb:0a:e5:cb:ae:b8:dc:c3:78:39:39:48:6f:c1: 1d:fe:d1:12:16:7a:b3:f8:c4:ad:97:46:f5:b9:42: b0:16:8d:a7:f1:38:09:c3:56:bf:e6:4a:6a:e9:d2: 4f:93:12:e5:84:c5:e4:15:d3:d0:c9:83:30:e6:47: ad:08:d3:94:28:4d:71:fe:86:73:a2:1a:d9:03:9f: 51:78:d3:5e:05:1b:7c:fa:23:87:14:f0:73:48:cf: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:18:35:DF:B5:8C:AF:4A:8F:02:3D:92:41:C3:A2:06:64:73:79:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 216.197.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:09:41:c4:c9:18:06:3f:11:6a:3e:e3:6e:22:11:86:9b:de: ea:cb:f3:9d:76:de:86:18:c8:de:26:c9:94:7c:b3:dc:d4:57: eb:a4:8d:5f:13:96:80:da:c4:80:4e:1c:3a:b3:f7:0e:0b:d9: 3d:fb:bb:75:5b:db:69:f5:04:e2:78:d4:ad:b9:b2:31:cb:d0: bf:5e:96:ae:a6:67:c0:b7:e5:cc:65:d0:93:9e:7d:da:8c:3d: f2:77:c5:7b:4c:44:61:05:4a:a5:2b:db:83:65:64:28:4b:5d: 48:d6:e1:aa:38:44:6d:0e:41:08:a8:18:d8:3b:41:47:b0:0d: a5:e5:fb:3c:2e:c1:3c:e1:ab:05:14:b8:09:19:5d:f9:df:14: 51:7b:72:7f:b9:f1:17:16:c5:64:9a:8a:be:72:50:de:6c:4d: 4c:cf:84:1b:94:a3:8f:b4:09:e8:ba:c6:74:aa:a4:01:71:54: ce:c4:70:c9:65:4b:cb:02:25:22:08:fa:b1:84:68:c0:55:0d: 84:14:8e:d3:71:51:81:8d:c5:5a:fc:55:b5:fa:2c:70:be:cc: c9:10:97:ff:6f:b3:39:51:99:63:b1:95:85:89:76:94:fa:d1: dc:a6:4b:0e:48:e1:da:f4:3b:d9:d7:da:0f:81:47:a7:66:4f: c1:6f:57:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHIScWWPjQ9mcNg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk NmNhZjI5YmUtNjI1Yi00N2Y0LTlhZjktOGQ5NWE2MDI4YzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfmmBD931Li0u3CcZofz9P8t5DgEo60Dovh3 wSgcW2AMDdiZCdnk2uZqDEfQE+eZj+nOFlRSy2eYKfbRYukAY1KFSQZpTUDzuNxh lWlz9V8+sbtmUNeCzHLULJTQEJmkel1pEUZjy9HSUpcaeptFcRRptKMk0drFj+uE nlUNo9uw4yghs/DJW6vweJ/h8Vf9Z3gmd9CRtrZOXEQXUukg5WgveakU+wrly664 3MN4OTlIb8Ed/tESFnqz+MStl0b1uUKwFo2n8TgJw1a/5kpq6dJPkxLlhMXkFdPQ yYMw5ketCNOUKE1x/oZzohrZA59ReNNeBRt8+iOHFPBzSM+BwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYYNd+1jK9KjwI9kkHDogZkc3l9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvYTQwMWJlY2QtM2FlMS0z Yjk2LTgxNzgtOGY1OWRhZDU3OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2MWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0JQcTJGAY/EWo+424iEYab3urL85123oYYyN4myZR8s9zUV+ukjV8T loDaxIBOHDqz9w4L2T37u3Vb22n1BOJ41K25sjHL0L9elq6mZ8C35cxl0JOefdqM PfJ3xXtMRGEFSqUr24NlZChLXUjW4ao4RG0OQQioGNg7QUewDaXl+zwuwTzhqwUU uAkZXfnfFFF7cn+58RcWxWSair5yUN5sTUzPhBuUo4+0Cei6xnSqpAFxVM7EcMll S8sCJSII+rGEaMBVDYQUjtNxUYGNxVr8VbX6LHC+zMkQl/9vszlRmWOxlYWJdpT6 0dymSw5I4dr0O9nX2g+BR6dmT8FvVwE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:38 2024 by rpki-client on console-fra.rpki-client.org