$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa File: 7956eda3-70c9-3ed7-b458-8c5b621234c3.roa (raw, json) Hash identifier: CHwWMhWLF1p1CPHiZSUbyBgPmEbmgTQmQzaxu4g67wg= Subject key identifier: E4:77:48:18:1B:73:6B:45:FE:56:8C:55:04:79:9E:BD:8D:B5:86:A4 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F43285847C1DF5BB1736B5042314B4020 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 40628 IP address blocks: 205.153.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:5b:b1:73:6b:50:42:31:4b:40:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=20d7f06c-4652-4f5c-8982-3c0cf82329d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:d6:d3:49:1c:61:6a:c9:d8:86:69:6c:26: aa:8a:e0:f8:cc:4f:08:6a:70:21:e7:6d:14:91:65: 16:3b:49:55:58:f3:e5:b1:10:19:70:92:f5:23:c6: 81:04:47:1a:26:8e:eb:d0:35:ee:7c:f6:45:fd:06: fe:72:90:7e:e1:05:bd:c0:48:16:6a:20:70:1e:eb: f6:af:0d:2f:50:d6:23:95:32:89:e7:c9:70:96:5c: db:2a:4e:a6:55:be:99:a5:1f:c2:fb:b7:a6:2f:e4: db:8e:5b:bb:9d:8c:eb:45:0c:d5:16:9b:bc:2c:c7: 11:f9:3b:41:70:f0:88:ba:22:d2:48:1f:48:26:17: 47:40:bc:40:ae:5d:34:9c:a5:41:f3:7d:1d:48:93: 29:94:9f:1d:ce:88:92:7a:e8:04:36:13:4d:f3:77: a6:ef:0d:9f:bf:7f:34:05:10:9f:9e:c3:06:50:4c: bc:91:93:cc:fe:5b:87:c7:e9:e3:67:5c:d5:e6:e0: 43:94:22:de:07:69:3a:af:25:b4:96:ea:9b:6b:45: 83:0a:5c:b8:e7:52:4f:e2:9c:c8:e5:ca:ae:c0:5f: a1:1d:21:50:db:76:4b:a8:a1:76:cb:8d:46:3a:ba: 0b:21:c2:40:c8:9c:45:ae:ca:37:6d:0a:a4:bb:db: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:77:48:18:1B:73:6B:45:FE:56:8C:55:04:79:9E:BD:8D:B5:86:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 205.153.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:74:7d:c1:6f:6f:14:5a:a2:b8:81:ca:b9:1a:c9:13:c4:58: 51:1e:dc:ed:51:10:aa:bb:e3:42:6f:47:d3:a4:49:8f:bd:fc: 07:bf:25:86:c9:61:4d:df:10:de:cf:23:7f:f6:7e:34:f3:40: 8f:a6:33:c3:57:44:5f:17:15:2f:0e:7d:86:d6:3b:5d:01:da: 44:8f:a0:1d:02:14:70:60:ca:87:06:20:f4:6f:77:14:3f:69: 1b:06:8e:68:5a:e2:32:83:e1:6b:d0:f7:dd:61:dd:e5:7d:dc: 88:5a:4e:65:d0:79:ec:ac:7d:66:ab:90:c0:6a:df:83:79:be: 2f:86:6b:f5:a1:35:a7:92:87:4b:cd:a6:10:5e:88:b3:8b:e0: 3d:1f:ff:2b:4b:e2:e2:90:f1:54:60:dd:80:f4:b5:f0:02:6f: 20:b6:35:59:34:4d:73:77:ba:bd:63:2e:ae:53:bd:10:c6:e5: 0b:b2:2b:d7:73:ea:f3:f5:ca:ee:26:49:d5:49:9a:38:c0:70: da:ff:38:d1:9c:76:1c:01:a7:a0:5e:8e:18:75:b9:0b:b3:2c: 9a:54:dd:38:c6:5b:eb:46:4b:46:e6:73:72:8e:5a:ff:a8:58: d6:8d:5e:18:e4:ce:9e:b0:b4:a7:3d:d4:88:57:47:d5:79:43: e6:bd:58:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB31uxc2tQQjFLQCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk MjBkN2YwNmMtNDY1Mi00ZjVjLTg5ODItM2MwY2Y4MjMyOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZfW00kcYWrJ2IZpbCaqiuD4zE8IanAh520U kWUWO0lVWPPlsRAZcJL1I8aBBEcaJo7r0DXufPZF/Qb+cpB+4QW9wEgWaiBwHuv2 rw0vUNYjlTKJ58lwllzbKk6mVb6ZpR/C+7emL+Tbjlu7nYzrRQzVFpu8LMcR+TtB cPCIuiLSSB9IJhdHQLxArl00nKVB830dSJMplJ8dzoiSeugENhNN83em7w2fv380 BRCfnsMGUEy8kZPM/luHx+njZ1zV5uBDlCLeB2k6ryW0luqba0WDCly451JP4pzI 5cquwF+hHSFQ23ZLqKF2y41GOroLIcJAyJxFrso3bQqku9uN2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR3SBgbc2tF/laMVQR5nr2NtYakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNzk1NmVkYTMtNzBjOS0z ZWQ3LWI0NTgtOGM1YjYyMTIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR0fcFvbxRaoriByrkayRPEWFEe3O1REKq740JvR9OkSY+9/Ae/JYbJ YU3fEN7PI3/2fjTzQI+mM8NXRF8XFS8OfYbWO10B2kSPoB0CFHBgyocGIPRvdxQ/ aRsGjmha4jKD4WvQ991h3eV93IhaTmXQeeysfWarkMBq34N5vi+Ga/WhNaeSh0vN phBeiLOL4D0f/ytL4uKQ8VRg3YD0tfACbyC2NVk0TXN3ur1jLq5TvRDG5QuyK9dz 6vP1yu4mSdVJmjjAcNr/ONGcdhwBp6Bejhh1uQuzLJpU3TjGW+tGS0bmc3KOWv+o WNaNXhjkzp6wtKc91IhXR9V5Q+a9WOk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:05 2024 by rpki-client on console-ams.rpki-client.org