$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d9e5f321-6032-3a39-9f70-d48d0ddce652.roa File: d9e5f321-6032-3a39-9f70-d48d0ddce652.roa (raw, json) Hash identifier: qRSPhUQgrlKNd6YWfKWKkElYUKe1mHcu+EyGVY+wyCk= Subject key identifier: 53:C1:7F:02:91:45:63:16:5C:17:52:5E:B2:36:A5:BF:9C:E3:5B:60 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F43285847B96171096ADEBAA1247ACB00 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d9e5f321-6032-3a39-9f70-d48d0ddce652.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 30456 IP address blocks: 216.126.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:71:09:6a:de:ba:a1:24:7a:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=3e0b01ab-f426-40f5-81f8-ae906d908a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:ea:df:f8:bf:b7:96:d8:5c:7e:d2:ce:d1: df:0c:9c:24:5d:c0:81:ab:fe:9e:96:c8:91:6e:0e: e1:a1:e1:8c:97:f7:47:c6:af:5e:b2:d9:ca:26:80: 66:65:96:65:49:4c:b4:7f:d1:b4:af:5e:38:24:fe: 8c:d1:6b:90:8d:ad:5f:57:22:0d:d9:09:23:b2:ec: 25:57:b1:47:8c:f7:c1:79:dc:9c:00:f0:81:d2:ef: 8d:46:cd:c4:55:ba:1a:e8:17:88:5e:ab:17:96:fa: 41:77:9d:48:7f:d3:8a:17:bc:00:4a:25:db:ba:0b: c6:0b:74:28:7b:22:1e:cd:9b:8a:7b:1e:b7:64:47: 1f:22:50:2a:28:2f:3e:dd:34:95:5e:41:94:b1:d9: 01:8c:0c:b6:72:41:4b:fd:7e:02:8c:79:b5:96:23: 80:b8:b9:f4:81:b7:2f:22:24:10:60:b4:93:55:a3: d5:a2:f0:68:00:0d:bb:39:72:9c:5f:dc:9a:b3:61: 13:86:a4:71:66:1d:e9:57:a5:9a:9d:5d:35:fd:08: 7a:e2:5e:41:48:a2:4e:2a:10:15:88:a3:11:b9:d2: 91:0f:2d:a9:44:d9:21:7c:14:e3:34:8b:67:14:d3: 33:2f:2d:ef:b8:dd:e6:f9:99:cc:11:a8:ac:a0:15: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C1:7F:02:91:45:63:16:5C:17:52:5E:B2:36:A5:BF:9C:E3:5B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d9e5f321-6032-3a39-9f70-d48d0ddce652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.126.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:65:f7:c6:7d:fb:18:df:56:16:d9:b9:8e:29:88:ac:56:2a: 78:0d:49:f8:e9:ed:21:05:e6:c2:d0:9f:85:16:bc:3c:98:38: 86:5d:29:51:44:cb:b2:d0:e4:06:25:53:5d:0c:03:12:bb:67: f7:59:eb:a9:ca:4f:91:e7:28:76:fc:30:f4:d7:9c:a5:0c:58: a8:c7:48:c9:f8:5c:41:c4:67:a9:6e:2c:ca:d2:4f:a1:c0:9d: 6e:14:c7:db:c7:42:76:fc:d8:24:69:21:25:3e:17:10:73:c9: 59:62:83:4f:ad:a3:64:dc:f3:e4:83:74:09:3f:2c:db:7d:e3: 17:f8:86:63:83:3e:f4:40:07:17:62:e8:f8:4b:c8:47:f7:14: b2:38:65:fe:b6:c3:17:72:ca:33:7f:b8:04:96:af:e3:9e:63: ed:53:73:54:ed:6f:ca:26:98:c5:26:19:76:57:36:a4:59:a7: 15:d0:10:f0:d2:71:b3:0a:0e:fb:4d:30:03:86:14:e5:7a:74: 08:14:71:0a:0f:e5:92:61:93:ea:86:5d:8a:33:fb:26:96:50: 50:80:e8:ff:d8:32:99:5e:7c:b7:2b:f0:19:3c:25:be:4c:6b: d6:c7:1b:90:08:40:a1:6a:43:04:95:28:01:78:27:30:73:90: 44:69:27:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXEJat66oSR6ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk M2UwYjAxYWItZjQyNi00MGY1LTgxZjgtYWU5MDZkOTA4YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Xq3/i/t5bYXH7SztHfDJwkXcCBq/6elsiR bg7hoeGMl/dHxq9estnKJoBmZZZlSUy0f9G0r144JP6M0WuQja1fVyIN2Qkjsuwl V7FHjPfBedycAPCB0u+NRs3EVboa6BeIXqsXlvpBd51If9OKF7wASiXbugvGC3Qo eyIezZuKex63ZEcfIlAqKC8+3TSVXkGUsdkBjAy2ckFL/X4CjHm1liOAuLn0gbcv IiQQYLSTVaPVovBoAA27OXKcX9yas2EThqRxZh3pV6WanV01/Qh64l5BSKJOKhAV iKMRudKRDy2pRNkhfBTjNItnFNMzLy3vuN3m+ZnMEaisoBU8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPBfwKRRWMWXBdSXrI2pb+c41tgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZDllNWYzMjEtNjAzMi0z YTM5LTlmNzAtZDQ4ZDBkZGNlNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANxl98Z9+xjfVhbZuY4piKxWKngNSfjp7SEF5sLQn4UWvDyYOIZdKVFE y7LQ5AYlU10MAxK7Z/dZ66nKT5HnKHb8MPTXnKUMWKjHSMn4XEHEZ6luLMrST6HA nW4Ux9vHQnb82CRpISU+FxBzyVlig0+to2Tc8+SDdAk/LNt94xf4hmODPvRABxdi 6PhLyEf3FLI4Zf62wxdyyjN/uASWr+OeY+1Tc1Ttb8ommMUmGXZXNqRZpxXQEPDS cbMKDvtNMAOGFOV6dAgUcQoP5ZJhk+qGXYoz+yaWUFCA6P/YMplefLcr8Bk8Jb5M a9bHG5AIQKFqQwSVKAF4JzBzkERpJ/w= -----END CERTIFICATE-----Generated at Sun Nov 24 22:16:12 2024 by rpki-client on console-fra.rpki-client.org