$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa File: 10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa (raw, json) Hash identifier: umLWsSGAWNpXDA+CkdjCraAq5iHlZvM/YznioM//45w= Subject key identifier: 44:36:52:6D:7C:76:A4:B0:4C:6E:4E:DA:C8:D3:58:4D:05:0D:44:99 Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Certificate serial: 010D0C9F43285847CA3F77C926D8F22589F8C980 Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 18628 IP address blocks: 208.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:77:c9:26:d8:f2:25:89:f8:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=5bb1d1bf-bf88-4aa2-b9f7-cf10b3846471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3c:fe:32:bb:ae:ac:bc:b0:ae:c5:6d:3f:fa: 50:b4:45:ed:5f:d5:95:e7:9b:6e:cf:a9:e8:c0:b7: 81:de:66:7f:d9:c8:3a:db:2a:f5:2a:74:a6:16:d5: 09:23:f7:bb:6a:f4:c5:2e:36:55:d0:8e:29:0a:7e: cd:71:b8:15:3a:7d:76:b3:1a:91:b3:9b:97:e1:00: cb:18:9d:55:95:07:cd:12:2a:49:b9:78:1d:a8:2d: a4:f6:0e:24:c9:e0:c5:8a:d2:ac:68:44:92:d6:2b: ac:eb:4b:3f:ff:4c:ef:78:15:d8:2c:78:a2:00:ba: 10:70:f9:1c:94:13:00:9a:09:5a:34:58:f3:a4:97: 30:fb:9c:69:ae:6a:c2:14:5c:1c:fd:ce:66:c5:98: c4:14:5c:ce:a6:70:f1:f5:9a:22:ef:82:3c:bf:7a: 04:c1:72:ad:ed:41:9f:9a:30:c9:26:38:c5:95:a8: e4:3f:49:b0:4e:2f:ca:de:46:51:f6:37:a1:38:b8: 31:19:70:ee:67:3e:12:a3:76:db:82:2d:24:35:cb: b1:94:4b:5e:9a:e6:d5:30:23:6b:e9:54:d1:0d:37: e8:9a:3e:56:be:4d:85:30:12:e5:bb:80:97:f6:33: ed:b8:ed:45:4f:2d:60:d2:9a:09:89:b6:39:07:72: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:36:52:6D:7C:76:A4:B0:4C:6E:4E:DA:C8:D3:58:4D:05:0D:44:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl X509v3 Authority Key Identifier: keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer sbgp-ipAddrBlock: critical IPv4: 208.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:20:52:4e:1f:37:f6:e4:c7:01:e5:0f:1a:5d:5f:c5:d4:9f: 31:f7:79:b6:06:ad:40:6a:0f:77:f0:95:62:b8:af:66:43:df: b8:42:da:02:7f:81:8e:f0:11:f2:04:3c:ed:4f:81:4a:c3:56: 3f:b1:27:a0:63:09:5e:da:d6:e7:36:a0:77:28:ab:eb:87:be: a4:17:a2:cc:f7:c0:ab:32:88:28:64:58:53:e0:ea:9c:67:d4: 41:56:bc:27:8d:11:64:59:bc:8d:7a:b3:e0:9b:aa:e9:38:c4: a7:58:66:11:49:e8:d8:3b:57:d7:28:e0:c4:a5:5a:9c:e5:70: b8:6e:cc:35:e8:f6:99:30:c7:96:30:6e:34:a2:c2:8c:42:54: 2a:a7:cd:5e:8b:d2:8f:3d:0c:ce:46:81:86:1f:b1:95:4a:b6: 60:78:d9:46:3e:94:9a:17:3f:de:ee:6a:51:e3:98:b3:fc:97: f4:23:37:d9:9e:4e:85:c8:2a:66:e9:48:18:a1:88:97:d3:93: be:4a:73:d0:1f:72:a8:a3:ea:be:9d:41:b9:51:6e:ee:f6:d9: c0:dd:c8:05:09:d7:06:3f:05:3f:67:f1:2e:41:0e:75:92:a0: d5:0a:84:7f:4d:13:8a:b1:28:39:0d:6c:af:9c:20:df:c4:ba: 47:2e:95:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3fJJtjyJYn4yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlZjVjN2MtZjgxZi00YWZlLWE4MzMtNmFkOTA1M2M0 MDc0MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NWJiMWQxYmYtYmY4OC00YWEyLWI5ZjctY2YxMGIzODQ2NDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTz+MruurLywrsVtP/pQtEXtX9WV55tuz6no wLeB3mZ/2cg62yr1KnSmFtUJI/e7avTFLjZV0I4pCn7NcbgVOn12sxqRs5uX4QDL GJ1VlQfNEipJuXgdqC2k9g4kyeDFitKsaESS1ius60s//0zveBXYLHiiALoQcPkc lBMAmglaNFjzpJcw+5xprmrCFFwc/c5mxZjEFFzOpnDx9Zoi74I8v3oEwXKt7UGf mjDJJjjFlajkP0mwTi/K3kZR9jehOLgxGXDuZz4So3bbgi0kNcuxlEtemubVMCNr 6VTRDTfomj5Wvk2FMBLlu4CX9jPtuO1FTy1g0poJibY5B3IS/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ2Um18dqSwTG5O2sjTWE0FDUSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Vm NWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5MDUzYzQwNzQvMTBjMGM0YmYtMzlmMi0z ZGUxLTg3YzctNjFlM2VjOTIxNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNlZjVjN2MtZjgxZi00YWZlLWE4 MzMtNmFkOTA1M2M0MDc0LzFjZWY1YzdjLWY4MWYtNGFmZS1hODMzLTZhZDkwNTNj NDA3NC5jcmwwHwYDVR0jBBgwFoAUMXFPqit2ohWgbOL7dataV3NzPhowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2VmNWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5 MDUzYzQwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkgUk4fN/bkxwHlDxpdX8XUnzH3ebYGrUBqD3fwlWK4r2ZD37hC2gJ/ gY7wEfIEPO1PgUrDVj+xJ6BjCV7a1uc2oHcoq+uHvqQXosz3wKsyiChkWFPg6pxn 1EFWvCeNEWRZvI16s+Cbquk4xKdYZhFJ6Ng7V9co4MSlWpzlcLhuzDXo9pkwx5Yw bjSiwoxCVCqnzV6L0o89DM5GgYYfsZVKtmB42UY+lJoXP97ualHjmLP8l/QjN9me ToXIKmbpSBihiJfTk75Kc9Afcqij6r6dQblRbu722cDdyAUJ1wY/BT9n8S5BDnWS oNUKhH9NE4qxKDkNbK+cIN/EukculVY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org