$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa File: 8a1ae401-360b-32d6-aa65-fa628237cb11.roa (raw, json) Hash identifier: 9nAvDQniiTNOy74DPdJ2IN/52QJh69ANS253oRmYNQk= Subject key identifier: 86:6A:60:E0:9D:33:3A:DC:8F:B7:39:70:9C:FA:57:DE:5A:7A:08:9E Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Certificate serial: 010D0C9F432858473A5B92B3D31AE7D844C9BBA0 Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 22438 IP address blocks: 208.83.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:92:b3:d3:1a:e7:d8:44:c9:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=2185cf0a-58c2-4f4b-8a86-3bd76627ac25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ef:0f:8a:fc:27:8f:c2:16:b6:29:b3:72:b5: 76:88:5e:3b:cf:70:35:0a:7a:07:8d:c0:4d:b1:62: 3c:cc:14:d6:7e:32:5f:83:1f:0f:60:ae:04:81:27: 0d:4a:58:03:ba:ec:82:59:ba:09:34:82:57:39:09: 17:5b:c5:18:4a:2f:94:67:5c:fc:78:55:4e:49:0d: 8f:55:35:2c:70:94:e6:0e:1a:31:17:4a:0b:9b:2d: e5:e2:82:1a:58:dd:19:01:30:96:58:77:f8:60:1d: 0e:79:38:d6:e4:87:1c:2f:a8:2b:d0:9f:83:60:19: f3:00:a8:13:94:2e:ba:58:24:06:ef:bb:20:60:8d: da:28:08:c1:39:fe:ae:9a:74:25:ea:fc:bf:ec:fa: f1:20:5c:4c:49:0d:50:88:2c:46:a0:70:31:e2:66: e7:6a:2d:80:97:15:a4:da:f1:aa:6d:bf:cc:3b:fc: 21:b4:03:cc:1f:37:3c:a3:d7:93:7a:ce:75:5d:30: 12:a6:a9:bd:11:b1:7b:5c:4d:7e:9f:34:0b:8d:a0: 17:4d:ce:5a:66:f2:23:c1:2a:cf:69:31:17:19:46: c7:7a:39:db:23:e7:cd:ae:17:f9:94:c3:c1:43:35: ca:11:35:44:25:0f:19:a3:d9:c0:85:8d:9c:52:66: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6A:60:E0:9D:33:3A:DC:8F:B7:39:70:9C:FA:57:DE:5A:7A:08:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl X509v3 Authority Key Identifier: keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer sbgp-ipAddrBlock: critical IPv4: 208.83.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:3e:92:bc:0b:0a:60:b2:39:55:1b:53:7f:66:07:f3:58: 59:ad:8b:5a:34:ac:2a:30:ea:b8:66:92:81:b5:1d:e6:31:9c: 92:2f:7d:cd:46:4f:43:51:54:11:02:97:7d:08:6f:14:32:9a: 20:5b:dc:74:79:45:05:05:3b:b4:e9:c2:64:39:63:cb:00:de: c9:af:08:d6:38:1d:25:12:83:c6:12:e2:a6:87:74:5b:e8:29: 1e:73:59:25:5b:9b:99:ba:20:b4:ac:41:5f:85:6f:c0:36:a6: 68:e7:32:93:f0:a3:b4:ca:fa:7d:ea:70:66:80:ab:77:69:60: 2f:69:c3:43:ad:6e:ed:81:21:b2:d0:a5:bf:cc:3f:68:2b:ba: 98:db:f4:b0:cc:21:38:c0:41:ed:92:d5:2a:ca:e6:e6:cb:48: 91:6a:1f:fa:6c:c5:48:6d:0f:dd:73:34:b0:5d:ff:d6:e7:af: e8:e3:60:3e:96:b8:19:e2:26:37:78:ea:4b:6b:db:2b:d0:0a: ac:73:1f:f6:a5:ae:f3:ee:0c:aa:e6:de:1b:52:7f:fd:6d:d3: 3a:96:08:14:ae:21:53:6f:86:c4:e7:8d:55:1d:98:4e:9d:8f: 2d:7e:7f:3b:46:a0:c6:ca:a4:25:66:0f:ab:e0:7b:e0:12:12: 4c:28:83:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W5Kz0xrn2ETJu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1 NDdjMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk MjE4NWNmMGEtNThjMi00ZjRiLThhODYtM2JkNzY2MjdhYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu8Pivwnj8IWtimzcrV2iF47z3A1CnoHjcBN sWI8zBTWfjJfgx8PYK4EgScNSlgDuuyCWboJNIJXOQkXW8UYSi+UZ1z8eFVOSQ2P VTUscJTmDhoxF0oLmy3l4oIaWN0ZATCWWHf4YB0OeTjW5IccL6gr0J+DYBnzAKgT lC66WCQG77sgYI3aKAjBOf6umnQl6vy/7PrxIFxMSQ1QiCxGoHAx4mbnai2AlxWk 2vGqbb/MO/whtAPMHzc8o9eTes51XTASpqm9EbF7XE1+nzQLjaAXTc5aZvIjwSrP aTEXGUbHejnbI+fNrhf5lMPBQzXKETVEJQ8Zo9nAhY2cUmaDCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZqYOCdMzrcj7c5cJz6V95aegieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5 MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvOGExYWU0MDEtMzYwYi0z MmQ2LWFhNjUtZmE2MjgyMzdjYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4 YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMyPpK8CwpgsjlVG1N/ZgfzWFmti1o0rCow6rhmkoG1HeYxnJIvfc1G T0NRVBECl30IbxQymiBb3HR5RQUFO7TpwmQ5Y8sA3smvCNY4HSUSg8YS4qaHdFvo KR5zWSVbm5m6ILSsQV+Fb8A2pmjnMpPwo7TK+n3qcGaAq3dpYC9pw0Otbu2BIbLQ pb/MP2grupjb9LDMITjAQe2S1SrK5ubLSJFqH/psxUhtD91zNLBd/9bnr+jjYD6W uBniJjd46ktr2yvQCqxzH/alrvPuDKrm3htSf/1t0zqWCBSuIVNvhsTnjVUdmE6d jy1+fztGoMbKpCVmD6vge+ASEkwog0k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:01 2024 by rpki-client on console-ams.rpki-client.org