$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa File: 7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa (raw, json) Hash identifier: 1p99FOuehL6NWwQNQromlUamYh5J737K8B2gU16zkJM= Subject key identifier: 40:2E:84:A7:D8:73:4C:BD:1D:49:67:81:BD:03:3F:E9:FE:45:85:56 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F43285847C3448F21CCB49906FEADBA80 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 13768 IP address blocks: 65.39.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:8f:21:cc:b4:99:06:fe:ad:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=2c8cd6c8-f0c7-4290-b619-c76ca0ef1f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:4e:be:d7:be:60:55:4f:b6:40:84:92:51: bb:c3:b6:a9:60:cb:7b:fc:ac:e9:7b:9b:04:f9:62: 5e:d9:6d:29:36:48:fd:45:36:b5:ab:9f:41:8e:0f: 57:81:53:69:83:ab:6b:94:d7:ce:80:e6:67:a4:74: e7:70:d5:8a:25:a7:8e:bd:1e:ab:50:b3:c9:54:b8: 39:7d:8f:e5:6b:f5:ce:34:12:b8:46:49:6d:09:15: 16:8f:37:2b:d4:5b:85:89:e2:81:24:e5:af:24:0c: 8a:42:13:2f:ab:cf:b0:84:62:69:1c:9f:99:39:2a: e8:cf:e8:60:b6:32:47:3f:b3:24:f5:8f:40:22:fb: b7:f6:33:9b:62:45:32:85:b0:14:04:bb:f5:10:36: 6c:64:82:5c:5a:8b:00:7e:30:e9:eb:ae:b4:c0:f1: 1e:ad:a2:65:83:25:f3:df:0c:36:8f:1a:e1:19:a1: d6:d3:22:be:fc:0a:2a:99:04:fb:cb:ee:a9:9c:5b: 1f:af:3b:19:61:f8:cb:32:a8:2a:49:b6:5d:88:f2: 16:cf:dc:dc:7d:1a:07:b3:2d:06:ca:62:56:13:e3: 0f:1f:8e:6e:8c:55:93:1d:ab:6d:ee:cc:da:ba:d5: be:a0:c8:06:f1:dc:88:4d:bc:07:15:6e:04:db:75: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2E:84:A7:D8:73:4C:BD:1D:49:67:81:BD:03:3F:E9:FE:45:85:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6b:a6:fa:30:5b:53:85:2b:81:a0:1f:5b:21:d2:53:d8:b2: be:78:71:5c:c2:bc:d1:13:1d:c9:a5:42:48:8c:a4:28:7d:9f: f4:1a:7a:27:3d:91:99:ad:d1:ee:b0:7a:5a:79:44:3a:40:eb: 61:cc:36:55:63:d3:60:e8:5b:a1:d5:ab:dd:aa:00:38:50:97: bb:b7:9f:8a:7c:11:73:c1:58:c4:cf:16:29:4a:aa:57:74:07: da:68:c2:5d:e3:46:7f:37:d2:7d:ed:0d:27:25:b0:25:8f:31: a3:31:be:9c:a7:6e:be:3c:ef:24:95:ce:18:e3:73:3b:6c:c8: 21:2e:cd:59:b3:e6:18:bd:c3:fc:bf:13:c7:6e:29:94:69:e9: 07:45:d3:68:b4:a5:01:bf:04:9d:ef:d9:62:55:cb:9d:5a:35: f9:96:89:dc:54:89:88:c4:d7:c4:80:b3:72:8d:9b:07:1b:dc: 66:32:ee:b0:b9:1f:4b:9b:fd:0d:5a:fa:de:d1:bc:6e:53:1d: 1a:37:40:39:4a:a8:db:69:b9:8e:df:ca:d3:0c:a5:a3:c7:b6: cd:e1:a1:b1:32:d0:8a:16:16:dc:7a:c4:bc:18:29:55:c2:04: 64:6b:02:76:b5:e8:89:fb:6a:f2:7a:e6:7c:97:2f:30:ec:97: 84:2d:99:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRI8hzLSZBv6tuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk MmM4Y2Q2YzgtZjBjNy00MjkwLWI2MTktYzc2Y2EwZWYxZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gFOvte+YFVPtkCEklG7w7apYMt7/Kzpe5sE +WJe2W0pNkj9RTa1q59Bjg9XgVNpg6trlNfOgOZnpHTncNWKJaeOvR6rULPJVLg5 fY/la/XONBK4RkltCRUWjzcr1FuFieKBJOWvJAyKQhMvq8+whGJpHJ+ZOSroz+hg tjJHP7Mk9Y9AIvu39jObYkUyhbAUBLv1EDZsZIJcWosAfjDp6660wPEeraJlgyXz 3ww2jxrhGaHW0yK+/AoqmQT7y+6pnFsfrzsZYfjLMqgqSbZdiPIWz9zcfRoHsy0G ymJWE+MPH45ujFWTHatt7szautW+oMgG8dyITbwHFW4E23WJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAuhKfYc0y9HUlngb0DP+n+RYVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvN2YyYjNmNDYtMmRkNS0z ODFlLWIxMjItZDdjMmFkNjYwMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFrpvowW1OFK4GgH1sh0lPYsr54cVzCvNETHcmlQkiMpCh9n/Qaeic9 kZmt0e6welp5RDpA62HMNlVj02DoW6HVq92qADhQl7u3n4p8EXPBWMTPFilKqld0 B9powl3jRn830n3tDSclsCWPMaMxvpynbr487ySVzhjjcztsyCEuzVmz5hi9w/y/ E8duKZRp6QdF02i0pQG/BJ3v2WJVy51aNfmWidxUiYjE18SAs3KNmwcb3GYy7rC5 H0ub/Q1a+t7RvG5THRo3QDlKqNtpuY7fytMMpaPHts3hobEy0IoWFtx6xLwYKVXC BGRrAna16In7avJ65nyXLzDsl4QtmWE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org