$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa File: 4199fdb2-52b2-3293-9988-f8544855d1a2.roa (raw, json) Hash identifier: ggOcurtcPTKEgXU47obB74fzncg+IIZ9aeT1GqoCE6U= Subject key identifier: 3A:B8:14:0A:9A:95:95:D8:38:90:AC:E6:96:6C:5A:8C:06:D9:CE:A4 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285847792BADBD69DBBD9DD3ECE2E0 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 18594 IP address blocks: 208.70.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:ad:bd:69:db:bd:9d:d3:ec:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=1f99e255-3790-479b-887a-ad6b90d983aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:7a:76:41:7a:0e:45:7f:28:ee:2b:cf:a4: 09:77:a1:78:b6:92:a6:74:ff:a2:05:8a:50:dc:c6: 88:2d:14:d7:ce:e7:00:6a:24:cb:1d:28:ad:7b:82: fc:10:a7:4d:66:1f:80:89:4f:49:33:f8:f3:97:64: b1:c1:04:10:c2:17:f9:7c:6b:ae:cb:66:22:db:73: a4:53:f6:8d:89:42:7f:22:66:b6:fe:44:48:a4:4b: 02:64:c8:4e:86:af:99:e3:e9:b1:06:8f:99:98:fa: ab:68:8f:35:34:95:82:01:b4:f3:0d:dd:64:c0:cc: 56:32:5e:94:df:b3:7c:e8:01:6c:20:86:fa:ed:fb: 28:e1:9f:d8:ce:7a:bf:93:41:f9:bd:bf:93:35:26: 2e:77:62:21:4c:fb:84:df:c4:95:e8:91:87:6c:de: bb:b3:07:cb:09:fd:13:12:fc:29:4a:d4:9c:a3:a1: 71:d6:cd:fe:4b:de:7a:ac:bd:70:0e:fe:5e:23:5c: c1:6d:11:05:ac:b2:c2:d7:e7:ed:95:df:80:46:10: 91:4b:cd:cd:16:7e:77:f2:9b:34:3d:7a:ae:6c:71: b7:b1:6b:af:05:1e:19:24:a3:94:61:e4:57:35:fd: 3e:9a:e5:d1:42:77:51:9f:80:1d:a4:fa:09:d0:8a: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:14:0A:9A:95:95:D8:38:90:AC:E6:96:6C:5A:8C:06:D9:CE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 208.70.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9f:a3:a4:c0:40:62:49:67:ef:e6:b3:7f:17:ff:6b:10:63: fb:1c:35:df:0e:c3:ff:84:2d:b6:c7:4a:fb:75:35:7d:90:c0: ad:4c:bc:f1:d9:6d:fc:81:be:b9:9b:80:99:98:28:f0:03:35: af:db:ec:f7:e3:3a:a2:b9:4d:90:25:9d:2d:0b:a4:2d:2e:0f: 6d:e3:bf:33:ae:1c:99:6d:8f:44:80:03:5e:5e:dc:73:61:e7: 81:43:28:8b:05:6e:8b:df:cb:b7:17:18:9c:cc:cf:e9:8a:5c: 07:97:22:69:18:fd:b0:9e:c4:20:67:5f:72:8b:c9:23:3c:c6: a9:52:c6:24:56:66:26:8c:50:da:fd:81:eb:b1:33:37:2a:27: 96:72:93:87:4a:01:75:0b:3f:df:b2:f7:25:57:14:ec:36:30: dc:d3:09:f6:fe:a9:23:ea:2e:5c:27:c7:48:05:65:d4:ce:8e: 10:c6:34:a4:ba:06:3a:e6:bb:7d:01:8b:66:6d:45:32:59:77: d9:20:e0:93:74:50:73:f6:a5:97:a6:48:5e:dd:da:85:a2:5c: a1:4a:62:9f:c1:ad:8c:97:75:2a:62:d9:e4:5a:26:2d:5a:3d: 9c:86:e4:cf:7c:25:f9:55:26:fa:97:ae:77:c3:33:9d:37:59: 37:02:9d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K629adu9ndPs4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MWY5OWUyNTUtMzc5MC00NzliLTg4N2EtYWQ2YjkwZDk4M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixl6dkF6DkV/KO4rz6QJd6F4tpKmdP+iBYpQ 3MaILRTXzucAaiTLHSite4L8EKdNZh+AiU9JM/jzl2SxwQQQwhf5fGuuy2Yi23Ok U/aNiUJ/Ima2/kRIpEsCZMhOhq+Z4+mxBo+ZmPqraI81NJWCAbTzDd1kwMxWMl6U 37N86AFsIIb67fso4Z/Yznq/k0H5vb+TNSYud2IhTPuE38SV6JGHbN67swfLCf0T EvwpStSco6Fx1s3+S956rL1wDv5eI1zBbREFrLLC1+ftld+ARhCRS83NFn538ps0 PXqubHG3sWuvBR4ZJKOUYeRXNf0+muXRQndRn4AdpPoJ0IogLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq4FAqalZXYOJCs5pZsWowG2c6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNDE5OWZkYjItNTJiMi0z MjkzLTk5ODgtZjg1NDQ4NTVkMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EazMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADufo6TAQGJJZ+/ms38X/2sQY/scNd8Ow/+ELbbHSvt1NX2QwK1MvPHZ bfyBvrmbgJmYKPADNa/b7PfjOqK5TZAlnS0LpC0uD23jvzOuHJltj0SAA15e3HNh 54FDKIsFbovfy7cXGJzMz+mKXAeXImkY/bCexCBnX3KLySM8xqlSxiRWZiaMUNr9 geuxMzcqJ5Zyk4dKAXULP9+y9yVXFOw2MNzTCfb+qSPqLlwnx0gFZdTOjhDGNKS6 Bjrmu30Bi2ZtRTJZd9kg4JN0UHP2pZemSF7d2oWiXKFKYp/BrYyXdSpi2eRaJi1a PZyG5M98JflVJvqXrnfDM503WTcCncs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:46 2024 by rpki-client on console-fra.rpki-client.org