$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/077d88df-74ad-3d96-8254-ecede6c0c4ad.roa File: 077d88df-74ad-3d96-8254-ecede6c0c4ad.roa (raw, json) Hash identifier: n/Sx4z2XtGLD79hIqi3aB4gdnHYbnUjtie5PZcH+O3A= Subject key identifier: 43:25:CF:84:DB:16:10:3A:7E:58:D2:D3:24:73:08:39:61:64:DA:64 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858476667FFD3D84520B030239B00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/077d88df-74ad-3d96-8254-ecede6c0c4ad.roa Signing time: Tue 01 Oct 2024 19:41:57 +0000 ROA not before: Tue 01 Oct 2024 19:41:57 +0000 ROA not after: Mon 30 Dec 2024 20:41:57 +0000 asID: 18186 IP address blocks: 206.54.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:66:67:ff:d3:d8:45:20:b0:30:23:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 1 19:41:57 2024 GMT Not After : Dec 30 20:41:57 2024 GMT Subject: CN=aa903e9e-fef6-455b-b3c8-d6f0ce53901a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:93:a7:14:ff:9d:5b:ce:ab:89:3f:65:11: b1:9d:8c:6f:70:ac:78:49:59:9f:cd:69:76:b1:04: fc:f6:71:f0:86:3e:bf:57:bc:41:36:ae:41:19:e5: 6f:24:07:9b:9c:da:33:38:36:87:97:6b:dc:07:f6: 7f:34:5c:d8:4a:58:ee:96:2b:6a:de:e8:81:b8:62: 3b:35:15:19:e2:5b:8e:f4:64:7a:3b:46:75:7a:ed: 55:c2:07:1a:9c:11:f2:cf:21:3c:a5:3b:37:5c:68: 7d:e7:31:ce:80:23:00:ef:3c:66:16:78:f1:17:b6: a2:e9:65:5d:d8:47:a6:5e:24:cf:3d:94:c3:46:28: 3b:c3:eb:37:3e:69:e6:15:57:d5:03:05:76:6c:07: 9f:c8:fa:4c:2d:6f:d4:64:b7:b1:f7:4b:55:c1:fd: 1b:1d:15:dd:79:0f:5f:2c:54:5a:10:ef:0d:b5:37: ea:87:a6:91:70:03:0e:c3:f9:cc:d9:b7:34:cb:a9: 56:fc:6c:a6:99:d3:3a:28:1f:9e:ae:ec:9c:09:d3: 75:9b:cb:f8:28:33:5a:d0:57:9c:87:3a:a9:80:42: c9:75:e8:5f:c8:4a:bd:b5:64:c0:38:b5:a2:23:b7: 25:90:4c:0b:4d:a6:14:65:4b:dc:ec:b8:f9:e9:f0: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:25:CF:84:DB:16:10:3A:7E:58:D2:D3:24:73:08:39:61:64:DA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/077d88df-74ad-3d96-8254-ecede6c0c4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:01:29:1f:c1:87:67:97:aa:b3:de:4e:40:f9:32:8e:17:fb: d2:56:15:04:30:ff:15:74:27:16:0d:3e:09:6e:cf:c2:51:c1: 0b:ce:21:ea:37:e6:7a:e5:53:f3:47:31:31:22:ba:60:bc:bc: 7c:d0:d8:37:14:6e:d1:29:65:68:2b:a2:95:01:ca:74:06:6c: 24:7e:b7:86:08:ee:25:be:62:85:e6:44:a3:94:42:82:ab:fd: 4d:ce:61:be:27:ad:10:88:e1:72:6b:8f:57:c6:e1:3f:4c:0a: 4c:34:8f:cd:b0:f5:3e:93:7b:1c:32:cb:e7:85:f9:91:5f:f5: 84:bd:28:b3:41:aa:42:af:9e:90:e5:38:df:63:11:b5:09:16: f8:93:21:04:ad:67:06:11:ba:b7:e4:0c:81:63:47:37:27:59: a1:b0:7e:08:69:2a:91:06:1e:bb:1a:da:9e:42:67:c9:10:98: d0:3e:cb:b3:da:c4:24:44:7d:00:ae:06:6f:ae:10:f1:4d:db: 1e:ea:8c:cf:9b:09:a3:53:2b:00:eb:91:80:9d:5b:b4:26:3b: 57:1b:0a:dc:b5:9b:da:0a:b5:dd:aa:92:df:f8:b3:c3:c2:a5: c3:a0:96:45:a5:9b:0d:06:3e:08:ff:08:b0:c8:a5:92:7e:cd: 61:53:87:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmZ//T2EUgsDAjmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MTAwMTE5NDE1N1oXDTI0MTIzMDIwNDE1N1owLzEtMCsGA1UEAxMk YWE5MDNlOWUtZmVmNi00NTViLWIzYzgtZDZmMGNlNTM5MDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/WTpxT/nVvOq4k/ZRGxnYxvcKx4SVmfzWl2 sQT89nHwhj6/V7xBNq5BGeVvJAebnNozODaHl2vcB/Z/NFzYSljulitq3uiBuGI7 NRUZ4luO9GR6O0Z1eu1VwgcanBHyzyE8pTs3XGh95zHOgCMA7zxmFnjxF7ai6WVd 2EemXiTPPZTDRig7w+s3PmnmFVfVAwV2bAefyPpMLW/UZLex90tVwf0bHRXdeQ9f LFRaEO8NtTfqh6aRcAMOw/nM2bc0y6lW/GymmdM6KB+eruycCdN1m8v4KDNa0Fec hzqpgELJdehfyEq9tWTAOLWiI7clkEwLTaYUZUvc7Lj56fB4sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMlz4TbFhA6fljS0yRzCDlhZNpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDc3ZDg4ZGYtNzRhZC0z ZDk2LTgyNTQtZWNlZGU2YzBjNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUBKR/Bh2eXqrPeTkD5Mo4X+9JWFQQw/xV0JxYNPgluz8JRwQvOIeo3 5nrlU/NHMTEiumC8vHzQ2DcUbtEpZWgropUBynQGbCR+t4YI7iW+YoXmRKOUQoKr /U3OYb4nrRCI4XJrj1fG4T9MCkw0j82w9T6Texwyy+eF+ZFf9YS9KLNBqkKvnpDl ON9jEbUJFviTIQStZwYRurfkDIFjRzcnWaGwfghpKpEGHrsa2p5CZ8kQmNA+y7Pa xCREfQCuBm+uEPFN2x7qjM+bCaNTKwDrkYCdW7QmO1cbCty1m9oKtd2qkt/4s8PC pcOglkWlmw0GPgj/CLDIpZJ+zWFTh4M= -----END CERTIFICATE-----Generated at Thu Nov 21 15:28:57 2024 by rpki-client on console-fra.rpki-client.org