$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa File: da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa (raw, json) Hash identifier: oTGhfPrBCN9nTrYqpxFvUDJZw7WK+zZ1rXAQRyZRZOo= Subject key identifier: BB:36:72:13:2C:DF:8F:AB:F3:A1:44:6A:34:DE:F0:FD:DE:BC:C5:8C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475A763C891CA5E370786D2B18 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 397601 IP address blocks: 204.2.56.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:3c:89:1c:a5:e3:70:78:6d:2b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=5c45d9e1-b21f-4d48-a800-696087656bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:13:54:cc:79:84:95:73:47:6f:d0:5c:6b: ba:d2:c4:b8:3e:0a:a5:6f:dd:b2:35:58:a1:8b:da: f9:63:24:74:dc:0f:bc:bf:fa:b6:51:22:9c:ea:4e: e5:70:aa:86:6b:85:69:34:2d:cc:e1:e9:76:77:ab: 68:42:e6:94:1c:40:00:2a:4e:11:da:64:c6:e1:84: b9:f0:d2:4b:46:c7:f2:bd:d9:22:d2:b5:a6:0a:95: 5e:21:b7:3e:2b:80:c9:1a:e5:ce:10:44:22:fd:6e: 44:40:09:31:13:35:58:eb:d6:0b:cb:36:6c:de:62: 5a:26:fe:e1:81:b0:27:ae:b6:c9:43:6c:0a:d8:97: fe:30:0f:61:94:95:79:de:54:6f:e6:70:7e:47:6d: 9f:54:87:61:50:3f:69:96:24:08:16:b4:f5:cf:53: 38:b3:76:ab:f9:c0:78:d0:84:e4:c3:46:56:c5:77: 6e:b3:f5:68:2d:2d:81:db:62:2b:1e:23:bd:7e:fd: f1:0b:5b:07:be:14:3c:d9:00:0c:b2:71:fb:f8:df: a8:4d:5a:78:dd:eb:4d:ee:b5:94:ea:d8:53:fa:6f: 30:b9:00:d5:2c:15:76:ff:3d:0e:9b:0c:11:23:64: be:1d:a4:5a:e5:85:ca:27:73:14:a6:66:6f:34:2f: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:36:72:13:2C:DF:8F:AB:F3:A1:44:6A:34:DE:F0:FD:DE:BC:C5:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.56.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:87:cf:23:35:b2:35:56:17:cf:21:ec:2b:99:22:79:80:b3: 89:3e:b7:92:d9:46:bf:57:b9:ec:09:4b:c7:59:41:e7:7f:4d: 9a:9c:e4:ae:68:68:eb:15:02:95:67:b3:82:f2:77:fb:d4:e1: 17:d5:ab:79:a9:b4:70:6e:67:36:01:28:40:19:3a:de:50:cb: a0:ec:be:f7:97:df:fc:9d:ce:82:8d:dc:02:21:85:f7:cd:a6: 98:4d:d0:1d:06:95:71:78:72:28:65:81:49:13:5d:f5:93:cc: aa:e3:39:73:65:34:c1:15:37:ed:9b:e3:ea:3a:a5:06:05:5e: 0e:ce:41:7e:cb:6b:7b:f0:49:02:2b:e3:a5:59:de:78:e8:f2: d6:e4:ee:7a:b4:92:d7:84:1a:b8:17:bd:ee:22:5e:2f:ee:02: 29:21:63:8b:01:22:ca:42:5a:0c:05:a4:e5:1f:f0:b2:a2:ff: d0:d5:98:e9:fd:a1:1a:6d:85:fd:7d:26:50:88:fc:4f:46:a8: 91:1a:f0:66:24:3a:a6:65:b1:9b:59:5f:2b:a0:b7:86:46:f4: 49:a3:ce:96:6f:9f:d2:6c:7b:2a:da:41:d7:cf:30:44:06:98: c3:3e:04:81:af:97:1f:37:93:c6:ee:70:89:30:2d:5c:54:96: df:1b:2e:d4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdadjyJHKXjcHhtKxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NWM0NWQ5ZTEtYjIxZi00ZDQ4LWE4MDAtNjk2MDg3NjU2YmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHATVMx5hJVzR2/QXGu60sS4Pgqlb92yNVih i9r5YyR03A+8v/q2USKc6k7lcKqGa4VpNC3M4el2d6toQuaUHEAAKk4R2mTG4YS5 8NJLRsfyvdki0rWmCpVeIbc+K4DJGuXOEEQi/W5EQAkxEzVY69YLyzZs3mJaJv7h gbAnrrbJQ2wK2Jf+MA9hlJV53lRv5nB+R22fVIdhUD9pliQIFrT1z1M4s3ar+cB4 0ITkw0ZWxXdus/VoLS2B22IrHiO9fv3xC1sHvhQ82QAMsnH7+N+oTVp43etN7rWU 6thT+m8wuQDVLBV2/z0OmwwRI2S+HaRa5YXKJ3MUpmZvNC/NJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLs2chMs34+r86FEajTe8P3evMWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGExY2M1ZjQtMGE5ZC0z ZTA3LTk0NDMtODUzMmNjZmE2NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAI4gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWh88jNbI1VhfPIewrmSJ5gLOJPreS2Ua/V7nsCUvHWUHnf02anOSu aGjrFQKVZ7OC8nf71OEX1at5qbRwbmc2AShAGTreUMug7L73l9/8nc6CjdwCIYX3 zaaYTdAdBpVxeHIoZYFJE131k8yq4zlzZTTBFTftm+PqOqUGBV4OzkF+y2t78EkC K+OlWd546PLW5O56tJLXhBq4F73uIl4v7gIpIWOLASLKQloMBaTlH/Cyov/Q1Zjp /aEabYX9fSZQiPxPRqiRGvBmJDqmZbGbWV8roLeGRvRJo86Wb5/SbHsq2kHXzzBE BpjDPgSBr5cfN5PG7nCJMC1cVJbfGy7U -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:18 2024 by rpki-client on console-ams.rpki-client.org