$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fde56992-3511-3c88-bedd-9c86a63b9a61.roa File: fde56992-3511-3c88-bedd-9c86a63b9a61.roa (raw, json) Hash identifier: jCM5MH6NxQqOW4zoOrGwX7lZrkSC/9LJujoRACGIbe4= Subject key identifier: 3B:FD:80:E0:97:5C:6A:DA:0B:05:31:2F:CF:DE:0F:CA:A3:75:37:CC Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F432858474585FC1670383EB058A35C10 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fde56992-3511-3c88-bedd-9c86a63b9a61.roa Signing time: Fri 20 Sep 2024 01:00:31 +0000 ROA not before: Fri 20 Sep 2024 01:00:31 +0000 ROA not after: Thu 19 Dec 2024 02:00:31 +0000 asID: 16696 IP address blocks: 208.101.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:85:fc:16:70:38:3e:b0:58:a3:5c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Sep 20 01:00:31 2024 GMT Not After : Dec 19 02:00:31 2024 GMT Subject: CN=5cac1fc4-7a05-4d0f-82e5-2f1c832a85a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:32:2a:8c:eb:5b:75:73:c0:9a:f6:e9:28: 92:45:9f:15:22:55:53:da:72:f6:52:e5:1f:4b:4f: ef:62:79:50:06:04:92:83:bf:92:55:7f:3a:07:ed: 30:82:ed:36:7b:89:02:e2:79:a1:5e:ca:f0:b7:aa: c7:57:6a:74:2c:31:48:45:8f:22:cc:9f:99:92:94: ba:c1:d6:bd:e5:83:26:12:76:ab:82:87:f9:d6:f8: 0e:fc:7e:5c:8b:bb:a0:b0:8e:9f:80:12:3b:ba:6e: f8:bb:65:88:09:7e:ff:f2:a1:2e:02:a3:d7:92:82: 3f:39:84:95:c5:a1:79:9a:a0:07:81:de:c2:58:c1: 37:31:1f:4a:0c:c7:05:c5:92:6f:05:d4:fe:84:52: 75:6a:08:74:1d:4a:1e:3b:b8:e3:e2:67:70:c6:ba: c1:20:f9:03:09:10:5d:39:ad:2f:1d:60:46:fb:b7: 32:41:47:3b:d0:eb:8a:0a:87:b0:2f:35:19:07:08: 51:95:9b:2b:eb:e9:78:69:80:9b:ae:c3:d9:2f:c8: 21:65:a3:20:5c:4e:73:16:38:da:d4:e3:37:e9:ff: a3:5c:fe:dd:32:b5:6d:b2:25:8e:28:50:cf:47:f9: 8e:2c:aa:53:a4:d6:cf:b6:99:f7:9d:3e:93:d1:1f: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FD:80:E0:97:5C:6A:DA:0B:05:31:2F:CF:DE:0F:CA:A3:75:37:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fde56992-3511-3c88-bedd-9c86a63b9a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 208.101.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ad:db:4c:b1:e1:3a:51:43:b5:f4:12:67:59:ff:9a:5c:15: c0:7f:41:24:af:8d:84:da:22:fa:c9:cb:fd:1e:94:00:6e:65: 65:a6:ab:10:48:f4:03:3c:1c:36:00:85:8f:b1:97:5e:4c:0a: 90:bd:21:1b:5c:c9:56:71:6b:11:6e:03:b5:e7:26:28:68:df: c2:c2:77:af:ae:3b:16:e4:c7:78:37:c6:0a:d5:05:54:d5:ac: 88:d4:63:0c:80:26:a0:64:3b:be:c3:10:6f:4a:96:b4:c7:a7: cb:6d:52:4a:c2:a7:ec:9d:b4:48:a3:25:7f:33:c1:2d:60:26: 3f:14:66:f6:2a:61:0b:bc:b9:7c:c3:f0:ae:e5:0b:12:9e:92: 97:bd:2c:8f:93:81:03:29:63:29:34:b6:07:77:05:da:77:ed: 95:d4:c9:99:1d:08:6b:63:3e:dd:c0:cc:80:20:41:27:aa:c1: 1a:62:33:ea:f0:86:29:71:36:49:89:28:c4:ea:df:ab:9f:86: d8:f4:05:01:05:ea:3c:dc:f8:3d:ad:0f:72:6b:7b:7f:e0:9f: f1:68:1d:7b:1c:04:e3:79:71:1e:a7:3a:28:b0:34:5a:fc:5c: 79:c9:6e:82:00:a8:89:cc:0f:79:3e:c5:2f:c4:33:6a:75:19: e9:de:b8:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhfwWcDg+sFijXBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk NWNhYzFmYzQtN2EwNS00ZDBmLTgyZTUtMmYxYzgzMmE4NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M4yKozrW3VzwJr26SiSRZ8VIlVT2nL2UuUf S0/vYnlQBgSSg7+SVX86B+0wgu02e4kC4nmhXsrwt6rHV2p0LDFIRY8izJ+ZkpS6 wda95YMmEnargof51vgO/H5ci7ugsI6fgBI7um74u2WICX7/8qEuAqPXkoI/OYSV xaF5mqAHgd7CWME3MR9KDMcFxZJvBdT+hFJ1agh0HUoeO7jj4mdwxrrBIPkDCRBd Oa0vHWBG+7cyQUc70OuKCoewLzUZBwhRlZsr6+l4aYCbrsPZL8ghZaMgXE5zFjja 1OM36f+jXP7dMrVtsiWOKFDPR/mOLKpTpNbPtpn3nT6T0R/UxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv9gOCXXGraCwUxL8/eD8qjdTfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmRlNTY5OTItMzUxMS0z Yzg4LWJlZGQtOWM4NmE2M2I5YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACet20yx4TpRQ7X0EmdZ/5pcFcB/QSSvjYTaIvrJy/0elABuZWWmqxBI 9AM8HDYAhY+xl15MCpC9IRtcyVZxaxFuA7XnJiho38LCd6+uOxbkx3g3xgrVBVTV rIjUYwyAJqBkO77DEG9KlrTHp8ttUkrCp+ydtEijJX8zwS1gJj8UZvYqYQu8uXzD 8K7lCxKekpe9LI+TgQMpYyk0tgd3Bdp37ZXUyZkdCGtjPt3AzIAgQSeqwRpiM+rw hilxNkmJKMTq36ufhtj0BQEF6jzc+D2tD3Jre3/gn/FoHXscBON5cR6nOiiwNFr8 XHnJboIAqInMD3k+xS/EM2p1GeneuLs= -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:30 2024 by rpki-client on console-ams.rpki-client.org