$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa File: 8a37a60a-eebd-367b-baaf-9445a8a0316f.roa (raw, json) Hash identifier: oafowGhVKDn13AKUak4T0T9vzP9tPT4ntYmCX5osYyQ= Subject key identifier: C5:EC:D8:A4:CF:2E:BC:57:DF:07:6F:AC:6A:17:56:DF:4B:FA:01:B5 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858479C112C29905823A2E4967D48 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 3561 IP address blocks: 208.132.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:2c:29:90:58:23:a2:e4:96:7d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=df922d16-989d-4eb6-a396-b13dc32ccb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:cf:bd:48:4c:09:f0:58:97:7d:c7:a3:5c: 6b:2d:cb:c9:a5:60:e1:73:16:9e:65:b4:f9:0c:a9: 3a:80:14:30:25:f4:f3:f5:13:3f:85:dd:bc:6b:eb: 53:27:c8:6e:0a:bc:b0:14:2b:69:57:1d:a4:78:80: 24:ba:0e:b6:ad:0b:04:03:bb:09:29:c4:97:95:b1: a0:f4:a7:d5:0d:54:e0:18:0d:f5:bb:af:b3:96:90: 01:fc:c5:01:34:14:55:8c:91:01:f1:2e:88:98:e3: a4:01:1a:68:48:b6:21:f9:c2:68:3c:35:53:fa:14: b3:45:e8:c7:98:ea:8a:4f:da:a0:4d:e8:fc:cf:6c: 7c:5d:16:2f:a1:7d:ab:b3:9b:2f:3c:47:a8:db:d4: 42:f8:a9:6b:e1:24:15:8a:5f:90:17:41:d9:60:e6: 13:c5:e7:65:6a:75:28:7a:95:1b:f9:e1:d1:16:39: 5a:42:09:6d:2b:2c:d7:83:9d:10:9e:13:07:1a:43: 3d:df:59:2f:8b:3a:52:50:bd:91:ec:c8:48:77:dc: fd:ff:4b:f1:ea:d6:e1:6c:eb:33:48:37:63:eb:34: 41:fc:ac:7d:7f:69:fd:82:11:84:20:95:70:88:03: 56:6c:6a:a1:fb:9c:c3:34:3f:bb:63:09:52:f6:36: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EC:D8:A4:CF:2E:BC:57:DF:07:6F:AC:6A:17:56:DF:4B:FA:01:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.132.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4b:9a:60:d2:2f:b3:68:f8:32:f4:80:2b:ee:8c:33:76:78: 98:e2:03:03:9d:20:ca:80:d9:f1:fa:b0:bd:32:62:f9:57:8a: ab:bf:59:1c:b8:45:c2:cd:9b:ea:1f:e4:fc:8e:a5:bf:ba:a7: 69:32:bd:e2:66:4d:5f:a5:ad:6e:4a:1b:dd:e4:d7:dd:8b:d4: ae:b4:be:ac:f0:0a:76:f0:8d:a3:3d:7f:e3:55:8a:f2:1f:92: 2b:10:48:73:af:bb:cc:e6:c9:00:0b:f2:0a:f0:39:1c:89:b4: 91:8f:4d:8b:f7:47:a0:70:34:11:87:7c:37:a0:53:c3:9e:13: 01:2d:9c:3a:df:05:bc:3e:4e:59:a2:24:81:30:f2:1c:22:7b: de:60:f9:f2:f5:c9:84:82:c6:94:59:18:27:4d:a7:a1:fa:f4: be:1b:6f:4c:c7:d2:d4:e8:aa:be:b9:26:69:1d:5a:e3:b0:a0: 27:27:48:f5:bb:92:63:b9:a5:43:75:39:17:87:c2:d1:a8:12: 46:88:d9:8f:1e:51:d7:c9:fd:45:22:6b:9d:f8:c1:18:71:62: 1c:6e:93:8b:21:7f:06:99:19:30:3d:e0:8c:39:53:fd:7e:00: 96:ca:b3:e4:fc:bd:64:1d:c0:89:c4:b7:a8:50:9e:5a:c3:12: 9b:bc:fc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESwpkFgjouSWfUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZGY5MjJkMTYtOTg5ZC00ZWI2LWEzOTYtYjEzZGMzMmNjYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6LPvUhMCfBYl33Ho1xrLcvJpWDhcxaeZbT5 DKk6gBQwJfTz9RM/hd28a+tTJ8huCrywFCtpVx2keIAkug62rQsEA7sJKcSXlbGg 9KfVDVTgGA31u6+zlpAB/MUBNBRVjJEB8S6ImOOkARpoSLYh+cJoPDVT+hSzRejH mOqKT9qgTej8z2x8XRYvoX2rs5svPEeo29RC+Klr4SQVil+QF0HZYOYTxedlanUo epUb+eHRFjlaQgltKyzXg50QnhMHGkM931kvizpSUL2R7MhId9z9/0vx6tbhbOsz SDdj6zRB/Kx9f2n9ghGEIJVwiANWbGqh+5zDND+7YwlS9ja9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXs2KTPLrxX3wdvrGoXVt9L+gG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOGEzN2E2MGEtZWViZC0z NjdiLWJhYWYtOTQ0NWE4YTAzMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ISAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNLmmDSL7No+DL0gCvujDN2eJjiAwOdIMqA2fH6sL0yYvlXiqu/WRy4 RcLNm+of5PyOpb+6p2kyveJmTV+lrW5KG93k192L1K60vqzwCnbwjaM9f+NVivIf kisQSHOvu8zmyQAL8grwORyJtJGPTYv3R6BwNBGHfDegU8OeEwEtnDrfBbw+Tlmi JIEw8hwie95g+fL1yYSCxpRZGCdNp6H69L4bb0zH0tToqr65JmkdWuOwoCcnSPW7 kmO5pUN1OReHwtGoEkaI2Y8eUdfJ/UUia534wRhxYhxuk4shfwaZGTA94Iw5U/1+ AJbKs+T8vWQdwInEt6hQnlrDEpu8/JA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org