$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa File: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json) Hash identifier: jRqSBjV1YORMz6kmth4V7T4Ua11uRPCgt/B2J+LFSJw= Subject key identifier: B2:0C:F7:C8:6D:F0:74:66:58:64:1B:60:72:93:65:C7:97:E8:E4:AA Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F432858476C9DB780C1FB1B14C6AA9B80 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 14618 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b7:80:c1:fb:1b:14:c6:aa:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=b3c89784-ecd8-474a-a202-9135a161cacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9e:58:d5:41:11:00:f7:7a:e2:36:c6:8e:a9: d5:a5:b3:5a:09:b8:90:af:0d:04:d5:5f:9d:73:df: a2:31:02:45:b4:b8:7e:2c:c5:9c:2e:a2:64:f4:2a: d3:bc:cc:05:e2:d3:7c:13:d6:1c:d8:f2:7a:f0:d3: 49:52:ed:4f:45:95:39:cc:45:43:17:31:7c:cd:48: 48:ad:ec:34:7a:69:8f:de:2d:37:9a:47:4e:a4:62: 7f:3a:ed:1b:00:53:76:96:75:ab:5e:b1:61:18:3a: b4:96:3c:6d:60:fb:1f:d2:21:e4:79:97:8d:fe:9d: 41:57:e1:cf:a7:2b:1f:9e:6a:b0:c9:41:0d:f7:cd: fd:cf:fc:69:ab:57:d8:59:55:88:c0:f5:02:13:46: a7:52:37:03:59:75:18:2c:87:ff:0b:69:8a:be:cc: f0:fb:93:95:5e:9e:3c:20:68:9c:92:1f:92:65:ca: a0:4c:c0:0c:24:cd:06:cb:1e:aa:81:40:c5:cf:2f: 63:59:5e:34:1e:07:3c:5b:c9:db:df:8b:5a:b1:3e: f6:e6:5f:4b:c5:d3:29:84:69:ec:c9:94:a4:d8:95: 41:9e:4e:12:8a:58:8b:34:68:52:2a:5c:03:13:fa: fd:2a:08:64:96:30:1f:9e:19:1e:29:34:21:fb:2e: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0C:F7:C8:6D:F0:74:66:58:64:1B:60:72:93:65:C7:97:E8:E4:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:83:f0:46:b4:31:31:87:6b:e7:0d:d9:76:77:17:8a:09:f6: 22:37:da:27:7e:8b:d0:48:82:11:ff:83:21:03:9a:0b:b7:fe: 48:93:d8:3e:9b:7b:e3:a3:7d:d0:84:be:b0:a9:ef:03:84:7f: 22:fe:75:20:d1:1e:59:9d:2d:a3:89:bf:35:f9:9d:cc:9d:64: 99:37:c6:0d:5f:b0:56:50:0e:a8:71:e2:28:6d:9b:1f:6e:f7: 31:d7:99:2a:50:74:22:26:27:f7:5b:78:25:9d:b8:0f:6d:d2: 3a:86:8b:33:40:0a:c9:80:94:de:b1:7b:28:07:71:54:c7:15: 8f:b8:3e:47:77:6e:1f:2f:3b:12:9e:cc:f4:0b:0f:35:8e:3a: 52:7d:1f:70:a7:af:3d:91:a9:b7:47:54:f0:ab:90:01:c7:f7: a5:ca:23:07:09:e8:80:12:37:e4:b7:77:40:ad:cb:16:61:36: d5:2a:fd:f8:9f:f6:c6:ed:2d:d4:57:b2:26:00:ad:e0:70:8c: 4d:92:82:f2:c8:0c:bb:e3:30:1c:b1:eb:88:20:45:8d:1d:34: 3e:aa:5a:34:76:4d:37:ba:2a:60:eb:6d:b6:0d:64:b0:b3:97: 9e:23:91:ee:7e:55:cf:b5:25:b0:e2:85:d8:58:22:89:16:14: 81:ef:47:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbeAwfsbFMaqm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk YjNjODk3ODQtZWNkOC00NzRhLWEyMDItOTEzNWExNjFjYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p5Y1UERAPd64jbGjqnVpbNaCbiQrw0E1V+d c9+iMQJFtLh+LMWcLqJk9CrTvMwF4tN8E9Yc2PJ68NNJUu1PRZU5zEVDFzF8zUhI rew0emmP3i03mkdOpGJ/Ou0bAFN2lnWrXrFhGDq0ljxtYPsf0iHkeZeN/p1BV+HP pysfnmqwyUEN9839z/xpq1fYWVWIwPUCE0anUjcDWXUYLIf/C2mKvszw+5OVXp48 IGickh+SZcqgTMAMJM0Gyx6qgUDFzy9jWV40Hgc8W8nb34tasT725l9LxdMphGns yZSk2JVBnk4SiliLNGhSKlwDE/r9KghkljAfnhkeKTQh+y6wkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIM98ht8HRmWGQbYHKTZceX6OSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvZjg5MGIxODgtYjYxMC0z OGEwLTg5YjAtOGExYTYyZDI0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiD8Ea0MTGHa+cN2XZ3F4oJ9iI32id+i9BIghH/gyEDmgu3/kiT2D6b e+OjfdCEvrCp7wOEfyL+dSDRHlmdLaOJvzX5ncydZJk3xg1fsFZQDqhx4ihtmx9u 9zHXmSpQdCImJ/dbeCWduA9t0jqGizNACsmAlN6xeygHcVTHFY+4Pkd3bh8vOxKe zPQLDzWOOlJ9H3Cnrz2RqbdHVPCrkAHH96XKIwcJ6IASN+S3d0CtyxZhNtUq/fif 9sbtLdRXsiYAreBwjE2SgvLIDLvjMByx64ggRY0dND6qWjR2TTe6KmDrbbYNZLCz l54jke5+Vc+1JbDihdhYIokWFIHvRzE= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:08 2024 by rpki-client on console-ams.rpki-client.org