$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa File: 0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa (raw, json) Hash identifier: 15hlraIhperfbBHGkEfY/IKv2gtv++/MFmI6YhlitrQ= Subject key identifier: 3B:66:9A:9D:DE:D6:BC:F6:A1:AF:5C:B0:F1:B0:C9:75:54:23:A9:7B Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F432858479AABEC52BDD777D623E2F200 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 23465 IP address blocks: 208.186.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:ec:52:bd:d7:77:d6:23:e2:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=2bd509fd-323e-4a66-94e7-19aadd565578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:6f:79:fd:7b:d4:01:62:91:80:f3:d8:7a: ce:5e:4f:03:8e:95:3c:fc:b2:cb:df:ab:fe:ff:a9: e1:da:e0:5e:9d:29:5b:fd:95:54:34:11:61:b1:47: 41:f2:a7:21:a3:29:97:1e:84:ca:c6:19:06:69:9b: 8c:ee:0c:b1:0b:86:7f:a9:cf:c1:e2:d3:20:bc:77: 71:a8:b2:a0:1c:9f:42:5f:bd:ae:e0:c8:74:ad:ff: fd:53:59:54:9d:72:cc:8d:00:9b:f3:78:0b:7c:5b: 57:b9:af:5e:c5:e2:b2:0c:a4:a3:1a:e1:31:06:d8: 80:ab:79:2c:8b:f9:f7:b6:9d:f5:c1:57:32:5f:9c: 29:0c:06:8b:b6:6e:10:fa:01:54:d3:02:a9:a9:f7: 5f:0c:82:e4:7d:17:b0:09:c1:a7:7c:82:1f:81:eb: 89:bb:8a:a1:63:f1:c3:bf:73:2d:20:8c:cc:f6:2b: 99:36:20:72:93:a0:8c:26:5d:5e:a9:85:b7:af:f1: 41:6f:9c:bb:3a:50:af:d7:44:9d:fc:01:7f:fb:86: ea:14:32:42:8d:18:5f:d7:14:6c:33:4e:7a:30:98: c3:b8:0b:42:b4:b2:0b:15:35:cf:d8:62:69:65:57: 8c:fc:b9:9a:6c:78:ff:9b:28:6d:93:86:43:99:f3: b9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:66:9A:9D:DE:D6:BC:F6:A1:AF:5C:B0:F1:B0:C9:75:54:23:A9:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.186.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f6:27:ac:30:5d:a6:67:48:93:32:fb:bc:b7:f3:e2:73:f4: 33:1b:d1:1a:5b:19:4b:15:71:a2:d9:19:80:92:45:d1:53:4e: 08:f5:ab:ff:71:7e:0d:81:a2:a7:31:f3:32:69:f7:77:8c:fb: a4:d6:00:61:df:ba:24:39:cc:ca:9c:c2:3c:26:b3:e5:4a:96: 50:10:18:5a:45:e1:c0:09:64:2c:f3:18:ca:6b:c9:ce:32:e6: a6:b6:a9:b6:e4:b7:2d:5a:12:7e:c7:e2:69:4e:ae:e9:f5:00: df:f8:77:a0:dd:b7:b6:0f:76:f9:07:a5:c2:a7:d8:ff:c6:66: 7a:06:e7:21:00:8f:58:bf:24:3a:70:62:94:5d:80:d9:a2:b5: 4a:f1:e4:f5:21:0c:c4:c8:aa:86:cc:d4:6a:db:99:23:1b:9c: 34:da:25:7f:e2:4b:c9:92:ed:c5:d7:96:0a:8b:87:0f:c7:5a: 39:97:b3:d5:3d:55:22:93:e4:96:07:fe:ca:d8:9f:e5:bd:61: 79:0a:86:a3:f5:a9:d8:8f:07:fe:4c:a9:0f:b8:83:38:28:7f: 56:a9:56:9b:94:06:12:1b:aa:c0:2a:8d:84:26:f0:1f:3d:14: da:d2:28:31:50:1f:b6:1b:a3:45:dd:b7:8a:c9:4d:ac:f9:f7: 0f:e8:37:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+xSvdd31iPi8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MmJkNTA5ZmQtMzIzZS00YTY2LTk0ZTctMTlhYWRkNTY1NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16pvef171AFikYDz2HrOXk8DjpU8/LLL36v+ /6nh2uBenSlb/ZVUNBFhsUdB8qchoymXHoTKxhkGaZuM7gyxC4Z/qc/B4tMgvHdx qLKgHJ9CX72u4Mh0rf/9U1lUnXLMjQCb83gLfFtXua9exeKyDKSjGuExBtiAq3ks i/n3tp31wVcyX5wpDAaLtm4Q+gFU0wKpqfdfDILkfRewCcGnfIIfgeuJu4qhY/HD v3MtIIzM9iuZNiByk6CMJl1eqYW3r/FBb5y7OlCv10Sd/AF/+4bqFDJCjRhf1xRs M056MJjDuAtCtLILFTXP2GJpZVeM/LmabHj/myhtk4ZDmfO5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtmmp3e1rz2oa9csPGwyXVUI6l7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMGNmZDFlNDMtOTliMC0z YzJmLThiMDQtZjU1ZGQ5ZWIwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALT2J6wwXaZnSJMy+7y38+Jz9DMb0RpbGUsVcaLZGYCSRdFTTgj1q/9x fg2Boqcx8zJp93eM+6TWAGHfuiQ5zMqcwjwms+VKllAQGFpF4cAJZCzzGMpryc4y 5qa2qbbkty1aEn7H4mlOrun1AN/4d6Ddt7YPdvkHpcKn2P/GZnoG5yEAj1i/JDpw YpRdgNmitUrx5PUhDMTIqobM1GrbmSMbnDTaJX/iS8mS7cXXlgqLhw/HWjmXs9U9 VSKT5JYH/srYn+W9YXkKhqP1qdiPB/5MqQ+4gzgof1apVpuUBhIbqsAqjYQm8B89 FNrSKDFQH7Ybo0Xdt4rJTaz59w/oN5w= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:06 2024 by rpki-client on console-ams.rpki-client.org