$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f17605a-d17d-33dd-b2a8-b7756f9f3d62.roa File: 8f17605a-d17d-33dd-b2a8-b7756f9f3d62.roa (raw, json) Hash identifier: /hh/yXpOR6OfY3tWGv7SUKUnA6lkWWdK2PMIshKOHkc= Subject key identifier: 00:45:7C:E2:D1:75:03:0B:9D:1F:F8:6A:8F:EC:1B:85:14:94:3A:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584734C5D879A8C91EBC197ECA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f17605a-d17d-33dd-b2a8-b7756f9f3d62.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 33490 IP address blocks: 24.20.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c5:d8:79:a8:c9:1e:bc:19:7e:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=a61ee98b-5317-423d-954f-733a4766dbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:dc:45:88:3d:91:23:e3:1a:17:6c:ce:67: 84:6f:a7:46:b0:97:95:a7:e4:70:38:e9:7b:6e:43: 51:ce:51:4b:eb:91:b2:71:76:8e:5a:2e:5c:4c:d8: 1f:d0:d3:be:e2:24:47:c4:b1:85:0e:64:29:72:c0: a2:72:8a:02:62:65:e4:6f:62:86:8c:2d:dd:13:eb: d2:38:2f:8a:7f:dc:de:af:91:44:63:db:31:fe:fc: 58:e3:c6:ed:ae:79:de:d5:92:d2:5d:42:39:6f:a0: 82:a0:44:5f:a7:ee:f3:5a:ee:71:16:09:88:57:93: 6e:87:69:98:8b:bb:4f:9f:8b:52:96:28:be:24:a7: 68:5a:4d:93:95:94:4a:32:f9:4d:fd:98:a2:cc:03: 64:d8:b9:2e:e9:46:fd:86:b3:c0:b3:d1:69:5e:a0: c5:03:c5:49:5c:a5:27:03:e6:74:b0:09:26:ba:82: 91:14:87:3f:83:eb:ee:fc:0e:53:96:a6:3c:21:8e: 36:c9:59:da:51:ae:20:b2:73:96:d7:89:b4:0f:98: 9b:71:57:15:1e:df:cd:d3:54:75:72:7e:57:ca:b4: 9d:a5:72:29:0e:cc:ad:41:d6:dc:16:9b:25:b3:66: 0a:27:5c:7e:f9:b1:be:a6:7e:f9:d8:e7:50:10:2c: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:45:7C:E2:D1:75:03:0B:9D:1F:F8:6A:8F:EC:1B:85:14:94:3A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f17605a-d17d-33dd-b2a8-b7756f9f3d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.20.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:82:6b:c1:b6:d8:ca:b0:f1:fb:26:15:9e:33:b5:fa:f0:23: a1:ef:04:a5:c5:db:28:52:ed:5b:11:d0:7c:3c:a7:27:1f:19: 3d:27:7a:2d:6d:a3:8c:a4:d4:36:6a:96:2d:21:5c:d7:64:d8: ab:62:09:78:f0:cf:e5:c1:e1:a4:60:4e:3d:af:dd:82:ae:c7: 8b:54:e2:0b:45:b9:ee:a7:39:80:9b:33:16:1d:9a:5f:61:b0: d2:2c:24:d9:d6:03:c8:1f:d2:75:bf:2b:0b:40:13:e3:e6:f3: 8a:0d:30:9b:53:5c:0b:43:ca:47:38:e4:00:4c:10:6a:34:6f: a5:ba:7c:ec:e5:bc:b7:76:e7:44:b3:6d:58:24:84:b5:dd:c1: 94:7b:5a:38:df:d1:f8:cc:00:01:27:b5:a6:ec:ae:48:cd:21: 0f:1f:07:a1:6f:37:1a:aa:d4:46:f9:66:35:b4:09:bb:0d:9f: de:00:03:ca:e1:db:1c:7d:e8:20:57:39:ec:df:7c:5e:f9:42: 5b:3a:45:bb:dd:a8:83:44:f4:28:f1:a1:46:c5:85:cc:b8:22: 84:ca:38:a4:30:cb:3a:b5:24:76:0b:19:c6:65:e4:67:55:ad: 3a:4c:6b:b0:2f:3d:c7:3b:c0:d1:67:63:80:b9:59:c4:75:1d: 10:bb:a5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xdh5qMkevBl+ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YTYxZWU5OGItNTMxNy00MjNkLTk1NGYtNzMzYTQ3NjZkYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw/cRYg9kSPjGhdszmeEb6dGsJeVp+RwOOl7 bkNRzlFL65GycXaOWi5cTNgf0NO+4iRHxLGFDmQpcsCicooCYmXkb2KGjC3dE+vS OC+Kf9zer5FEY9sx/vxY48btrnne1ZLSXUI5b6CCoERfp+7zWu5xFgmIV5Nuh2mY i7tPn4tSlii+JKdoWk2TlZRKMvlN/ZiizANk2Lku6Ub9hrPAs9FpXqDFA8VJXKUn A+Z0sAkmuoKRFIc/g+vu/A5TlqY8IY42yVnaUa4gsnOW14m0D5ibcVcVHt/N01R1 cn5XyrSdpXIpDsytQdbcFpsls2YKJ1x++bG+pn752OdQECxgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABFfOLRdQMLnR/4ao/sG4UUlDrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYxNzYwNWEtZDE3ZC0z M2RkLWIyYTgtYjc3NTZmOWYzZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGBTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGCa8G22Mqw8fsmFZ4ztfrwI6HvBKXF2yhS7VsR0Hw8pycfGT0nei1t o4yk1DZqli0hXNdk2KtiCXjwz+XB4aRgTj2v3YKux4tU4gtFue6nOYCbMxYdml9h sNIsJNnWA8gf0nW/KwtAE+Pm84oNMJtTXAtDykc45ABMEGo0b6W6fOzlvLd250Sz bVgkhLXdwZR7Wjjf0fjMAAEntabsrkjNIQ8fB6FvNxqq1Eb5ZjW0CbsNn94AA8rh 2xx96CBXOezffF75Qls6RbvdqINE9CjxoUbFhcy4IoTKOKQwyzq1JHYLGcZl5GdV rTpMa7AvPcc7wNFnY4C5WcR1HRC7pb8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:29:54 2024 by rpki-client on console-fra.rpki-client.org