$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa File: 1e04535b-d086-34a9-8637-4a3090cb4ca1.roa (raw, json) Hash identifier: VNzqkL0bg8P3YSZFDzTn8UuDmWvtxWFKUz4bQ+rkbyU= Subject key identifier: 18:91:2E:38:F5:FB:A5:1E:9F:9F:40:C7:E6:7B:15:6A:F2:69:DE:CD Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285847A0414BF91D0E7DE5D2A4F300 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 3356 IP address blocks: 204.167.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:4b:f9:1d:0e:7d:e5:d2:a4:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=29c100e5-c5f3-4773-a3d3-1333a4c0d606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:ee:4b:c3:85:db:7b:e6:70:8b:bd:18:87: 6f:56:7d:1c:6b:1b:4f:e6:69:e7:d6:a6:77:c9:7e: 19:69:6d:ea:39:54:94:a8:49:03:36:62:89:d8:8a: f7:f0:af:1b:f6:e0:a5:dc:d6:5c:6a:bc:50:22:b9: 25:b1:83:87:d9:69:a7:fc:b6:4a:47:04:ca:5f:80: 7d:65:98:f3:89:f4:56:99:b2:e2:a3:1e:d3:64:4f: 5b:2c:42:08:d2:9c:14:24:fd:03:83:97:9c:47:3c: fe:16:70:f7:74:12:59:a9:d5:fe:68:25:bf:f8:c4: b9:25:06:55:58:58:4e:70:39:b6:63:cb:8a:62:d3: b6:e4:16:78:c0:37:11:e7:97:ba:3e:e0:37:21:2f: 48:d6:06:38:da:01:39:c3:52:48:9a:32:47:55:cc: 9e:47:12:40:17:60:26:be:9c:79:da:9e:85:16:5a: 51:c1:e7:03:48:e6:8f:b7:cd:ff:1e:94:1e:d2:89: 4d:81:2d:ad:27:06:16:bf:da:3d:46:fb:5b:44:7a: 7a:99:3a:f3:7d:3c:1d:5c:94:04:bc:32:cc:ab:f6: d0:a3:a1:52:eb:a6:66:f1:ed:1e:1b:b2:b8:d8:44: 7b:2c:d3:82:84:a7:e8:a2:33:f3:db:c2:78:07:54: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:2E:38:F5:FB:A5:1E:9F:9F:40:C7:E6:7B:15:6A:F2:69:DE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1e04535b-d086-34a9-8637-4a3090cb4ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 204.167.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:61:45:d2:2d:86:40:6a:eb:ce:0e:59:f5:b5:7f:47:4d:04: 52:59:03:fc:02:a7:a5:21:f2:70:12:9d:38:73:7e:47:63:bf: 56:70:ad:ec:c0:e9:c0:37:17:07:e9:af:a4:d3:b7:1e:2e:7c: 4a:6c:6d:6b:95:3c:1c:fc:27:60:17:61:db:b1:15:77:d4:35: cf:b0:cd:4b:1f:07:20:4e:60:8c:71:4c:be:e7:33:9a:8a:e5: b5:36:34:a4:84:df:b9:98:d1:01:3d:03:77:f4:55:c1:c3:47: 9e:75:47:41:de:6a:43:9b:34:27:e6:ea:4a:de:70:76:27:06: 85:50:e2:8f:91:1a:88:43:60:06:3c:0a:79:ec:99:b6:f4:c2: fc:0b:41:0e:52:d5:bc:bd:6a:9a:6e:d8:89:61:48:0b:34:9b: eb:b3:0e:89:3d:a1:55:17:53:5d:35:00:1b:60:ab:45:a1:be: eb:4c:cf:83:f7:41:1f:e8:6e:21:f6:36:a2:11:ae:30:d9:ff: a7:0d:1c:d4:e7:de:45:85:65:cd:ae:93:75:75:85:e2:45:20: 86:a1:e5:21:d0:20:01:2d:08:b9:79:f2:68:2b:da:b3:c5:56: 6c:72:30:0b:09:28:eb:56:97:ed:06:69:58:8d:b8:41:9e:01: 04:cc:e8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUv5HQ595dKk8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk MjljMTAwZTUtYzVmMy00NzczLWEzZDMtMTMzM2E0YzBkNjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyfuS8OF23vmcIu9GIdvVn0caxtP5mnn1qZ3 yX4ZaW3qOVSUqEkDNmKJ2Ir38K8b9uCl3NZcarxQIrklsYOH2Wmn/LZKRwTKX4B9 ZZjzifRWmbLiox7TZE9bLEII0pwUJP0Dg5ecRzz+FnD3dBJZqdX+aCW/+MS5JQZV WFhOcDm2Y8uKYtO25BZ4wDcR55e6PuA3IS9I1gY42gE5w1JImjJHVcyeRxJAF2Am vpx52p6FFlpRwecDSOaPt83/HpQe0olNgS2tJwYWv9o9RvtbRHp6mTrzfTwdXJQE vDLMq/bQo6FS66Zm8e0eG7K42ER7LNOChKfoojPz28J4B1Ql0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiRLjj1+6Uen59Ax+Z7FWryad7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWUwNDUzNWItZDA4Ni0z NGE5LTg2MzctNGEzMDkwY2I0Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzKfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdhRdIthkBq684OWfW1f0dNBFJZA/wCp6Uh8nASnThzfkdjv1ZwrezA 6cA3Fwfpr6TTtx4ufEpsbWuVPBz8J2AXYduxFXfUNc+wzUsfByBOYIxxTL7nM5qK 5bU2NKSE37mY0QE9A3f0VcHDR551R0HeakObNCfm6krecHYnBoVQ4o+RGohDYAY8 Cnnsmbb0wvwLQQ5S1by9appu2IlhSAs0m+uzDok9oVUXU101ABtgq0WhvutMz4P3 QR/obiH2NqIRrjDZ/6cNHNTn3kWFZc2uk3V1heJFIIah5SHQIAEtCLl58mgr2rPF VmxyMAsJKOtWl+0GaViNuEGeAQTM6HM= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org