$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa File: 609552ca-a27a-357f-b6b6-3b4483c88884.roa (raw, json) Hash identifier: D4OQQx9wedYwPms6n8R6YMTBB+jw8uNfERmVCFhJfe8= Subject key identifier: 64:79:19:D5:32:AC:4D:D9:BC:95:4C:39:3C:04:D5:CF:3D:F6:14:59 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475910CB1569133DF1A1FECB00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 14717 IP address blocks: 207.156.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:cb:15:69:13:3d:f1:a1:fe:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=b38dcd84-f6ea-4ba3-8b40-01de42d7b92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:af:12:a7:c0:09:e1:21:c1:c8:02:30:22: 1d:ac:51:72:39:27:fb:88:b0:b1:b9:da:54:12:f0: cc:34:f5:39:db:ac:aa:03:28:cf:09:25:4b:2c:94: 91:46:05:76:26:91:cc:b3:9b:4a:88:df:ba:bc:d5: 2b:23:3c:f7:c9:31:88:f8:11:69:21:ce:7e:d4:b6: 14:10:78:19:be:b3:05:d6:d5:df:7d:23:7f:43:d4: 8f:26:aa:38:d4:73:6e:df:4d:d5:80:24:06:fc:23: 26:c4:16:4c:ae:db:a7:9a:50:5d:a2:75:52:76:6d: 48:44:c7:aa:7d:68:7b:12:97:0c:93:c2:f6:34:c1: 79:a2:7b:70:7e:a4:b2:61:f6:2d:b7:2c:87:40:6a: 16:4e:56:34:8e:93:9a:b9:60:c4:e3:cb:6e:a5:57: 48:66:80:15:77:8c:90:b4:8c:32:00:38:89:ce:b8: 1a:59:9a:67:3a:39:25:bd:e1:6e:a7:d6:aa:68:ac: 18:b2:a5:94:ce:c2:5b:1d:49:20:c9:ba:41:78:c4: c2:9a:3d:51:1a:83:19:78:ea:e0:57:84:1d:f3:97: 6f:4e:3c:d1:6d:5b:16:1d:87:20:10:39:90:e8:b7: d7:12:f6:f3:11:8c:f1:3a:8e:cf:79:23:2e:48:26: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:79:19:D5:32:AC:4D:D9:BC:95:4C:39:3C:04:D5:CF:3D:F6:14:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.156.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:41:84:0a:bc:ff:12:d0:33:67:fb:ce:a1:25:07:cf:21:68: f0:13:4a:94:1b:b3:18:c8:41:65:f2:7e:cc:99:5e:14:1d:60: 3e:91:67:19:93:3a:61:01:d4:1a:e4:56:1f:da:13:55:5b:6e: a0:da:4c:cb:20:77:55:25:3b:3a:3c:16:1f:02:56:d0:36:4c: 6e:38:51:85:46:12:ac:73:b0:e5:67:e6:54:66:3a:c7:e6:51: 3b:4a:42:16:22:83:24:af:3e:b2:97:27:23:b5:63:0a:9b:33: b8:50:cd:a6:10:83:ef:60:b7:3a:98:28:b2:b9:db:1a:4c:2e: af:b1:82:a2:54:ce:73:9e:2f:4b:ef:d6:e7:22:90:86:e9:2d: 34:0b:f1:5f:68:c9:c6:46:59:f7:fb:4a:c4:f9:d9:11:04:7a: 68:37:a9:71:61:60:40:2d:3c:7e:b4:3f:ec:ce:d9:42:9a:dc: b0:55:2b:16:4b:47:76:07:b0:99:ba:c8:90:21:ac:0e:9f:24: 4d:87:7b:10:58:a6:19:bc:24:66:a4:22:d4:2a:26:f8:3f:6f: 38:19:a9:bc:ba:b2:6d:36:e1:8c:2f:1a:5a:a4:d6:19:ff:4e: 60:d8:49:bc:92:09:42:43:2e:48:b4:eb:8e:f3:8e:a3:76:6c: c2:71:a8:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMsVaRM98aH+ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk YjM4ZGNkODQtZjZlYS00YmEzLThiNDAtMDFkZTQyZDdiOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaOvEqfACeEhwcgCMCIdrFFyOSf7iLCxudpU EvDMNPU526yqAyjPCSVLLJSRRgV2JpHMs5tKiN+6vNUrIzz3yTGI+BFpIc5+1LYU EHgZvrMF1tXffSN/Q9SPJqo41HNu303VgCQG/CMmxBZMrtunmlBdonVSdm1IRMeq fWh7EpcMk8L2NMF5ontwfqSyYfYttyyHQGoWTlY0jpOauWDE48tupVdIZoAVd4yQ tIwyADiJzrgaWZpnOjklveFup9aqaKwYsqWUzsJbHUkgybpBeMTCmj1RGoMZeOrg V4Qd85dvTjzRbVsWHYcgEDmQ6LfXEvbzEYzxOo7PeSMuSCZndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR5GdUyrE3ZvJVMOTwE1c899hRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjA5NTUyY2EtYTI3YS0z NTdmLWI2YjYtM2I0NDgzYzg4ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz5zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1BhAq8/xLQM2f7zqElB88haPATSpQbsxjIQWXyfsyZXhQdYD6RZxmT OmEB1BrkVh/aE1VbbqDaTMsgd1UlOzo8Fh8CVtA2TG44UYVGEqxzsOVn5lRmOsfm UTtKQhYigySvPrKXJyO1YwqbM7hQzaYQg+9gtzqYKLK52xpMLq+xgqJUznOeL0vv 1ucikIbpLTQL8V9oycZGWff7SsT52REEemg3qXFhYEAtPH60P+zO2UKa3LBVKxZL R3YHsJm6yJAhrA6fJE2HexBYphm8JGakItQqJvg/bzgZqby6sm024YwvGlqk1hn/ TmDYSbySCUJDLki0647zjqN2bMJxqAE= -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:12 2024 by rpki-client on console-ams.rpki-client.org