$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa File: 2d4f9a49-dc28-3351-bde3-98642755927b.roa (raw, json) Hash identifier: 87b7zKB82vZT2kCz9av/ydFw8pwjhMlAczAmCsKAzYo= Subject key identifier: E1:36:DA:F9:22:EC:DD:CB:A2:36:71:E4:03:DE:94:77:9C:32:EF:E5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285847564612F8248B827B4B311EC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa Signing time: Thu 26 Sep 2024 01:00:31 +0000 ROA not before: Thu 26 Sep 2024 01:00:31 +0000 ROA not after: Wed 25 Dec 2024 02:00:31 +0000 asID: 13335 IP address blocks: 204.195.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:56:46:12:f8:24:8b:82:7b:4b:31:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 26 01:00:31 2024 GMT Not After : Dec 25 02:00:31 2024 GMT Subject: CN=4bf52d89-7cd5-4dc7-9d9b-deb307d5acba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:0c:b7:2b:0b:4d:d4:14:e4:75:46:d4:68: ba:b0:7b:5a:35:1e:75:9b:f0:42:60:c8:3c:b2:02: 07:5a:ef:f0:b0:38:c9:98:ee:ef:db:a3:96:c3:56: cc:02:09:a3:11:3f:69:a7:5e:41:43:ea:ef:69:4e: f2:7a:1a:bd:43:74:75:d9:03:0e:b5:8d:43:71:e1: e2:7b:1e:09:a9:f5:f4:85:91:97:23:eb:e5:df:79: b5:83:a8:50:ae:87:19:68:58:ae:51:66:8f:15:0a: ce:e4:1a:0f:60:9a:2d:45:99:29:95:49:5b:26:ae: 46:26:ea:c6:68:13:48:fa:42:a8:a4:c7:1a:ed:89: bc:76:6d:c4:83:e6:4d:b7:82:a3:00:0d:60:a6:8f: 75:7d:54:79:80:32:0a:89:1c:60:e9:96:13:be:47: 5a:da:93:14:44:59:00:4e:77:8e:1b:a6:52:6b:97: f8:7b:bd:24:69:89:14:04:c4:2c:eb:e5:07:19:72: ee:b1:0b:d4:6a:65:84:b3:d6:31:06:4a:fd:d9:ff: 8a:0a:0e:9c:e3:6b:ba:94:db:62:a6:50:37:89:a9: 77:5d:ff:ef:3f:f9:6d:f0:4d:c6:f2:29:54:7a:5b: e6:d6:77:75:63:33:82:d8:0b:83:1e:08:4a:8c:79: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:36:DA:F9:22:EC:DD:CB:A2:36:71:E4:03:DE:94:77:9C:32:EF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d5:c8:78:96:ea:d5:bd:08:7e:96:95:53:7b:dc:91:ec:2a: 71:a2:b2:df:07:7b:50:ba:01:c6:4a:02:fd:7d:8f:fa:7a:26: b3:9d:90:b3:76:63:64:59:6c:0d:e0:88:d4:35:f6:3d:15:04: 71:68:20:e6:5a:9e:9b:01:94:cf:b1:df:b9:43:ce:3f:e0:b5: c3:42:e2:cd:6d:1e:62:21:27:85:22:b8:25:d3:89:89:0e:31: 32:c5:56:d7:7d:25:a2:42:8e:53:dc:7b:2b:c6:09:4d:23:58: 0a:a4:c6:48:84:a9:6f:a4:db:5b:77:be:3f:8a:f7:8d:d2:63: ad:a4:20:de:68:0a:be:83:0c:bf:cc:82:39:43:c9:ab:d8:dd: 1d:df:5d:1c:72:4a:7e:bf:44:c7:84:55:7d:21:af:33:dd:2d: 33:b6:2f:73:34:84:b8:a1:70:19:f0:b4:ba:7e:35:1b:f7:f1: 75:56:2b:9c:25:c6:04:8e:60:de:b5:ff:40:8e:97:b8:03:64: d3:76:b8:75:f8:36:46:c9:ec:0b:39:42:48:85:0c:37:99:f5: 9f:04:0d:d0:44:cc:f5:3d:15:58:ec:1d:1a:56:b5:d6:52:7b: eb:f4:e1:d3:1e:26:d5:fe:61:3b:cf:db:15:a7:48:fa:c7:82: e6:38:81:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdWRhL4JIuCe0sxHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDkyNjAxMDAzMVoXDTI0MTIyNTAyMDAzMVowLzEtMCsGA1UEAxMk NGJmNTJkODktN2NkNS00ZGM3LTlkOWItZGViMzA3ZDVhY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVkMtysLTdQU5HVG1Gi6sHtaNR51m/BCYMg8 sgIHWu/wsDjJmO7v26OWw1bMAgmjET9pp15BQ+rvaU7yehq9Q3R12QMOtY1DceHi ex4JqfX0hZGXI+vl33m1g6hQrocZaFiuUWaPFQrO5BoPYJotRZkplUlbJq5GJurG aBNI+kKopMca7Ym8dm3Eg+ZNt4KjAA1gpo91fVR5gDIKiRxg6ZYTvkda2pMURFkA TneOG6ZSa5f4e70kaYkUBMQs6+UHGXLusQvUamWEs9YxBkr92f+KCg6c42u6lNti plA3ial3Xf/vP/lt8E3G8ilUelvm1nd1YzOC2AuDHghKjHm2NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE22vki7N3LojZx5APelHecMu/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQ0ZjlhNDktZGMyOC0z MzUxLWJkZTMtOTg2NDI3NTU5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHVyHiW6tW9CH6WlVN73JHsKnGist8He1C6AcZKAv19j/p6JrOdkLN2 Y2RZbA3giNQ19j0VBHFoIOZanpsBlM+x37lDzj/gtcNC4s1tHmIhJ4UiuCXTiYkO MTLFVtd9JaJCjlPceyvGCU0jWAqkxkiEqW+k21t3vj+K943SY62kIN5oCr6DDL/M gjlDyavY3R3fXRxySn6/RMeEVX0hrzPdLTO2L3M0hLihcBnwtLp+NRv38XVWK5wl xgSOYN61/0COl7gDZNN2uHX4NkbJ7As5QkiFDDeZ9Z8EDdBEzPU9FVjsHRpWtdZS e+v04dMeJtX+YTvP2xWnSPrHguY4gXQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:11 2024 by rpki-client on console-ams.rpki-client.org