$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa File: 40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa (raw, json) Hash identifier: gYn6/pKlqBGQxvc0wo3DxboaX6urmwIiqfZgxQXJFH0= Subject key identifier: 3A:EF:14:50:72:78:93:3C:88:B6:73:78:EA:6F:29:A9:6F:6B:8B:BE Certificate issuer: /CN=c0737391-61e0-4d30-9aa1-7caa06980033 Certificate serial: 010D0C9F43285847B3CC0EBAB024260A2B3E3B80 Authority key identifier: 4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 14041 IP address blocks: 204.228.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:0e:ba:b0:24:26:0a:2b:3e:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0737391-61e0-4d30-9aa1-7caa06980033 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=bdc4cc88-6695-4712-a6ef-3eed5ed4267f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:80:8e:73:63:f0:2b:47:62:8b:9f:34:ab: f1:eb:57:6d:5d:df:c8:dd:fd:49:55:c4:62:cc:d5: b6:1d:d1:a8:c6:ba:9b:51:54:00:36:e3:8c:0c:21: 8d:46:7f:1f:86:2e:fc:9f:93:af:b9:aa:ef:8c:34: 61:bf:15:15:91:5d:36:fe:eb:af:63:37:60:c1:4f: 30:f6:8e:b5:fa:12:a6:7d:f4:a2:78:64:ff:ef:87: be:08:0e:9f:12:d8:d8:cc:c7:45:29:ea:05:6e:06: 6c:e1:cb:d6:cb:5b:0c:e9:14:52:2f:0b:5e:ce:7b: 54:d3:15:14:53:b6:9d:96:4f:5e:25:dd:36:f2:18: 4d:af:38:c4:33:0b:bd:4c:1c:5d:df:38:23:18:08: 58:3e:e4:ec:6b:53:9c:d9:93:b0:fe:83:0e:10:28: bc:3a:dd:74:50:72:76:1c:0f:7e:b7:2c:0e:f1:2f: 6e:2c:2b:3b:95:ee:dd:2b:5c:35:3b:12:42:93:52: 2a:70:4f:23:ba:69:84:6d:8e:57:dd:c1:b3:d3:f9: dc:49:df:d8:6f:d3:6f:62:54:48:cf:89:10:bb:0b: cc:25:ba:30:5c:87:0a:58:4a:82:b5:eb:2c:4d:95: 68:d6:ff:79:43:db:35:8a:66:fd:bf:1e:f2:84:6d: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:14:50:72:78:93:3C:88:B6:73:78:EA:6F:29:A9:6F:6B:8B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl X509v3 Authority Key Identifier: keyid:4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer sbgp-ipAddrBlock: critical IPv4: 204.228.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:6a:05:a0:9d:2f:f9:fc:72:f4:20:c0:bb:96:20:5e:8b:ca: 22:b6:2a:d6:2d:69:8d:8d:71:15:e4:67:14:51:ff:47:4b:06: 20:bf:f7:59:2e:04:b2:a2:f8:16:0b:0d:99:4b:33:86:b2:a6: d1:d1:80:94:ea:52:4e:67:88:44:aa:6e:af:1b:08:6f:87:41: 91:c4:78:55:d6:b7:42:67:22:06:80:d1:f8:fc:68:64:91:4a: 06:66:92:9b:6e:f6:da:dd:92:e9:c3:69:fc:9d:2b:c2:f5:b2: 05:5f:1c:bc:9f:fa:97:9e:77:e6:cc:e7:9f:0c:ca:68:4d:c8: 7c:d9:2c:bc:ad:e1:92:3c:5f:ae:11:c0:9e:6e:5d:b0:0b:f5: 2e:92:65:da:c3:52:d5:8a:96:be:66:26:0a:b6:c6:28:cf:cb: 1e:ca:d1:83:9a:4b:1c:1b:0f:24:65:d0:38:0b:6f:93:fa:12: 48:05:a7:fe:c8:c1:58:2f:96:a2:75:4a:f8:63:6c:91:fd:0f: c6:63:e9:fb:d8:65:ba:1d:ce:18:70:f9:3d:b1:a0:cc:5a:11: 67:d6:d3:8b:e3:c1:5c:09:07:bb:5a:53:c9:ae:56:e3:c6:77: 30:22:00:f5:25:ab:1d:89:58:e2:1a:5f:61:aa:54:2a:8f:df: 03:00:1e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzA66sCQmCis+O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3MzczOTEtNjFlMC00ZDMwLTlhYTEtN2NhYTA2OTgw MDMzMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk YmRjNGNjODgtNjY5NS00NzEyLWE2ZWYtM2VlZDVlZDQyNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2guAjnNj8CtHYoufNKvx61dtXd/I3f1JVcRi zNW2HdGoxrqbUVQANuOMDCGNRn8fhi78n5OvuarvjDRhvxUVkV02/uuvYzdgwU8w 9o61+hKmffSieGT/74e+CA6fEtjYzMdFKeoFbgZs4cvWy1sM6RRSLwtezntU0xUU U7adlk9eJd028hhNrzjEMwu9TBxd3zgjGAhYPuTsa1Oc2ZOw/oMOECi8Ot10UHJ2 HA9+tywO8S9uLCs7le7dK1w1OxJCk1IqcE8jummEbY5X3cGz0/ncSd/Yb9NvYlRI z4kQuwvMJbowXIcKWEqCtessTZVo1v95Q9s1imb9vx7yhG04nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrvFFByeJM8iLZzeOpvKalva4u+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMDcz NzM5MS02MWUwLTRkMzAtOWFhMS03Y2FhMDY5ODAwMzMvNDBjMzJlYWEtMjhhOC0z ZDhiLWFlOGYtYWYwM2I0ZjI4ODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzA3MzczOTEtNjFlMC00ZDMwLTlh YTEtN2NhYTA2OTgwMDMzL2MwNzM3MzkxLTYxZTAtNGQzMC05YWExLTdjYWEwNjk4 MDAzMy5jcmwwHwYDVR0jBBgwFoAUTvhwGyVe3LHsGMOOxMPqQF1RY54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMDczNzM5MS02MWUwLTRkMzAtOWFhMS03Y2Fh MDY5ODAwMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzORgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARqBaCdL/n8cvQgwLuWIF6LyiK2KtYtaY2NcRXkZxRR/0dLBiC/91ku BLKi+BYLDZlLM4ayptHRgJTqUk5niESqbq8bCG+HQZHEeFXWt0JnIgaA0fj8aGSR SgZmkptu9trdkunDafydK8L1sgVfHLyf+peed+bM558MymhNyHzZLLyt4ZI8X64R wJ5uXbAL9S6SZdrDUtWKlr5mJgq2xijPyx7K0YOaSxwbDyRl0DgLb5P6EkgFp/7I wVgvlqJ1SvhjbJH9D8Zj6fvYZbodzhhw+T2xoMxaEWfW04vjwVwJB7taU8muVuPG dzAiAPUlqx2JWOIaX2GqVCqP3wMAHpw= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org