$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa File: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (raw, json) Hash identifier: 0ydmDUtCdsI0watb81YJpWdymGPLwhetNLN5bwYAnQQ= Subject key identifier: 91:44:72:2D:79:21:76:DA:FB:7D:F4:C9:E8:F8:4D:92:A3:25:B8:F1 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F43285847ED24C6F5E9DFCB9A5CE94860 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 398203 IP address blocks: 169.150.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:c6:f5:e9:df:cb:9a:5c:e9:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=fcb549e0-211c-47c9-92b2-3e4b4aa59dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:79:c6:f2:ba:e9:a0:8a:c7:b7:6e:04:75: 87:a2:2a:ea:22:f2:e5:71:5f:8f:c7:ab:78:c0:6d: b9:a3:3e:7a:b1:7c:e2:c1:a6:37:14:ee:68:1f:1e: 5d:01:cf:64:16:4a:88:eb:75:bd:83:1e:d8:74:05: 62:65:20:02:61:1b:54:1a:a6:31:ed:00:d5:7d:2b: c6:bf:f3:16:53:3f:39:0b:85:db:c5:2a:78:99:58: 0a:22:f0:43:0a:47:99:1c:7b:bf:93:fa:87:97:b3: 8a:64:dc:b7:69:f4:31:f7:4d:47:71:38:1e:27:84: af:2d:a7:06:e5:a4:3c:7d:00:04:6d:a1:82:91:31: e3:fb:ad:5b:1b:d6:bc:0b:80:71:40:23:81:83:12: 66:49:18:e5:35:dd:70:9d:3e:3b:31:55:30:bc:32: 30:9c:41:1f:66:d9:f3:9a:9e:ec:48:6e:68:7e:68: 3c:94:f9:a1:19:9e:e2:1f:e4:e7:18:06:82:36:14: 46:2e:ae:3e:93:8c:38:fe:00:ba:e4:fd:51:d1:4d: 3d:f4:fa:89:eb:ae:9d:32:ca:71:8f:df:5a:eb:35: 1a:f8:28:0f:0b:e9:0c:30:ab:c9:c6:aa:5d:61:00: 27:1e:f5:9e:45:3b:39:de:24:fb:21:b0:81:d7:4e: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:44:72:2D:79:21:76:DA:FB:7D:F4:C9:E8:F8:4D:92:A3:25:B8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 169.150.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:56:44:fb:b1:8c:b8:15:05:ac:1a:14:02:2a:66:04:37:fa: d9:a7:d9:e8:af:48:72:6d:de:18:0c:c3:77:a7:61:3b:c7:9f: 1f:8f:9a:d6:ab:14:72:51:aa:00:5b:38:d6:e4:e1:d4:fb:82: ca:a6:70:b6:66:0e:b7:b1:8e:fb:74:c6:ba:79:63:59:ec:48: a0:37:52:b7:94:0d:76:01:ab:15:10:c7:b7:5f:9f:22:e0:cf: 5b:c3:43:10:9a:01:12:1e:d6:3f:61:17:fc:08:89:00:9d:1b: 49:81:90:51:76:be:5c:ea:04:16:f8:54:27:ed:1d:46:2b:a0: 65:12:87:a4:70:ef:7f:97:3c:fa:b0:1d:1e:48:b7:ee:fc:bd: 3c:41:32:50:c6:3d:b1:bc:3f:5c:9c:3d:8f:6c:11:b5:27:1b: ec:18:f1:1b:31:35:3b:d7:88:fb:93:ee:e1:6e:e3:1c:d6:47: 93:76:7a:d6:73:7f:91:26:d2:bb:81:76:61:1f:f8:b8:15:d6: 0e:05:ac:5e:be:88:0e:fe:1a:23:59:80:89:6d:c5:07:8b:f6: 16:b3:20:72:09:71:10:a0:99:86:fe:6a:c5:db:69:0f:51:fa: b2:ab:63:29:10:f5:07:eb:b0:3d:bf:93:dd:02:33:01:37:d7: 5d:d4:10:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMb16d/LmlzpSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZmNiNTQ5ZTAtMjExYy00N2M5LTkyYjItM2U0YjRhYTU5ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOZ5xvK66aCKx7duBHWHoirqIvLlcV+Px6t4 wG25oz56sXziwaY3FO5oHx5dAc9kFkqI63W9gx7YdAViZSACYRtUGqYx7QDVfSvG v/MWUz85C4XbxSp4mVgKIvBDCkeZHHu/k/qHl7OKZNy3afQx901HcTgeJ4SvLacG 5aQ8fQAEbaGCkTHj+61bG9a8C4BxQCOBgxJmSRjlNd1wnT47MVUwvDIwnEEfZtnz mp7sSG5ofmg8lPmhGZ7iH+TnGAaCNhRGLq4+k4w4/gC65P1R0U099PqJ666dMspx j99a6zUa+CgPC+kMMKvJxqpdYQAnHvWeRTs53iT7IbCB105eFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFEci15IXba+330yej4TZKjJbjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvYTZhNzNlNTUtYmZhZi0z ODNlLWIwNDQtYjlkMDEyMGNlNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqZaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVWRPuxjLgVBawaFAIqZgQ3+tmn2eivSHJt3hgMw3enYTvHnx+Pmtar FHJRqgBbONbk4dT7gsqmcLZmDrexjvt0xrp5Y1nsSKA3UreUDXYBqxUQx7dfnyLg z1vDQxCaARIe1j9hF/wIiQCdG0mBkFF2vlzqBBb4VCftHUYroGUSh6Rw73+XPPqw HR5It+78vTxBMlDGPbG8P1ycPY9sEbUnG+wY8RsxNTvXiPuT7uFu4xzWR5N2etZz f5Em0ruBdmEf+LgV1g4FrF6+iA7+GiNZgIltxQeL9hazIHIJcRCgmYb+asXbaQ9R +rKrYykQ9QfrsD2/k90CMwE3113UENQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:48 2024 by rpki-client on console-ams.rpki-client.org