$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: NBcsHSPNESZq5f9NdchoytsXuFoYFz9e4g0A0edkUpo= Subject key identifier: A7:2D:EE:67:09:6A:D9:F3:E4:E7:79:59:CF:83:A5:63:0E:E9:72:B3 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F432858479AABE92C1A70F6A8A4665480 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 4755 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e9:2c:1a:70:f6:a8:a4:66:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=7ac1da4a-1f32-47f9-bee6-1d7ebe62411f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:83:a1:8d:9b:1d:5a:90:32:c7:c0:8a:2f: f1:b2:ca:27:12:c7:da:69:04:e1:5c:29:a4:94:f1: c1:81:c8:44:d4:16:8c:ff:3e:c3:c5:70:0e:f0:9e: 5c:63:02:96:f3:1a:cb:3c:33:09:6e:bb:e8:e0:33: 74:35:90:79:31:2f:8f:98:b2:ff:b8:d5:a1:f7:c2: 27:c1:a7:4a:a4:26:52:4f:2c:fb:49:59:e0:ab:0a: 4c:9a:29:54:0f:5b:75:5a:4a:ea:9e:c6:2f:f3:39: 46:54:20:ca:a2:62:1d:27:7a:be:32:c6:01:c9:a4: e4:3e:37:7b:ba:80:d1:dd:2c:cb:e6:4f:0c:30:fd: f6:06:1d:4e:93:1e:7a:fa:e9:9e:04:ac:18:3c:fe: c0:c5:1d:ae:b7:bf:66:84:cb:1f:06:55:39:f3:7b: 58:97:65:1a:86:10:5b:a5:5a:fc:a5:0b:5e:b6:31: 39:31:42:37:3d:d0:2d:13:d0:0b:d5:41:be:60:00: 81:55:7f:87:d2:29:16:4b:2a:d7:56:28:1f:6c:d0: 02:8f:4f:ee:c0:b8:52:43:63:d7:54:6c:54:27:5a: cf:07:3a:90:39:e3:d2:3c:46:ef:17:91:07:37:ab: 20:4a:e5:2b:7f:10:36:06:d9:00:d4:d4:c3:98:44: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2D:EE:67:09:6A:D9:F3:E4:E7:79:59:CF:83:A5:63:0E:E9:72:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:3d:1d:09:84:71:47:49:41:dc:64:8e:ef:c0:d6:5c:f2:a5: 68:03:ca:43:63:ee:1e:52:84:dd:e7:77:c6:55:f4:23:03:2c: 64:65:a1:69:8f:ff:39:ee:ab:f0:76:1c:4c:ee:11:a3:34:e7: 76:71:79:12:83:7a:99:ce:3b:80:f9:c8:a0:e4:30:57:82:af: fc:e6:84:17:ab:44:a8:1e:49:f6:42:a7:4a:76:b9:ae:3f:4a: c7:5e:e2:c6:ff:7b:8b:b6:6a:38:72:e4:70:ad:c7:7d:25:40: 4a:34:21:6c:89:24:1f:d4:aa:fd:d8:08:c4:d5:ba:8d:24:03: fe:5e:0d:66:9a:77:03:cd:78:a8:cd:42:7c:da:f8:b1:92:6c: 9d:3d:87:16:0c:c1:a2:ae:f0:11:b4:03:ca:c0:cd:31:98:67: 0c:c7:22:c8:90:9a:29:b3:9c:52:b7:ed:4d:5d:e0:2f:1b:70: e5:31:54:91:dd:01:ce:90:9c:c1:e9:31:da:79:a8:09:05:06: 38:4d:e8:2c:3e:05:a5:40:0b:db:6f:bd:c4:7d:7a:a3:cc:09: ea:a5:a2:b6:62:d6:54:bb:66:15:f0:8b:9b:0a:ef:86:cc:8d: 78:e5:f5:e1:31:3a:50:2b:f5:80:61:f5:72:39:85:a8:49:2e: 1f:cf:ba:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+ksGnD2qKRmVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk N2FjMWRhNGEtMWYzMi00N2Y5LWJlZTYtMWQ3ZWJlNjI0MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUqDoY2bHVqQMsfAii/xssonEsfaaQThXCmk lPHBgchE1BaM/z7DxXAO8J5cYwKW8xrLPDMJbrvo4DN0NZB5MS+PmLL/uNWh98In wadKpCZSTyz7SVngqwpMmilUD1t1WkrqnsYv8zlGVCDKomIdJ3q+MsYByaTkPjd7 uoDR3SzL5k8MMP32Bh1Okx56+umeBKwYPP7AxR2ut79mhMsfBlU583tYl2UahhBb pVr8pQtetjE5MUI3PdAtE9AL1UG+YACBVX+H0ikWSyrXVigfbNACj0/uwLhSQ2PX VGxUJ1rPBzqQOePSPEbvF5EHN6sgSuUrfxA2BtkA1NTDmETtxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKct7mcJatnz5Od5Wc+DpWMO6XKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM49HQmEcUdJQdxkju/A1lzypWgDykNj7h5ShN3nd8ZV9CMDLGRloWmP /znuq/B2HEzuEaM053ZxeRKDepnOO4D5yKDkMFeCr/zmhBerRKgeSfZCp0p2ua4/ Ssde4sb/e4u2ajhy5HCtx30lQEo0IWyJJB/Uqv3YCMTVuo0kA/5eDWaadwPNeKjN Qnza+LGSbJ09hxYMwaKu8BG0A8rAzTGYZwzHIsiQmimznFK37U1d4C8bcOUxVJHd Ac6QnMHpMdp5qAkFBjhN6Cw+BaVAC9tvvcR9eqPMCeqlorZi1lS7ZhXwi5sK74bM jXjl9eExOlAr9YBh9XI5hahJLh/PujM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:59 2024 by rpki-client on console-ams.rpki-client.org