$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa File: 507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa (raw, json) Hash identifier: IxJlUzZ5y8Lh8ScUz2mx2X2KV+oDain/0xrUcTsxDww= Subject key identifier: DC:8E:91:9A:DD:EC:05:0C:69:C6:4B:EA:23:93:B3:7B:78:AA:AF:6E Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847BAC6A4227141460AF2A59200 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 398420 IP address blocks: 208.89.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a4:22:71:41:46:0a:f2:a5:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=1d005eb1-d62b-4448-b19d-ea3d70552901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ee:40:f2:7e:ca:f2:7b:c5:76:6c:39:b4:78: 5f:4d:97:36:21:2f:63:50:13:51:a5:ed:4f:2d:5b: 5e:0c:bb:82:30:76:52:66:61:e6:74:d0:8f:86:b2: 62:1c:d4:fa:de:e3:32:1d:ea:d1:24:c1:eb:0b:12: 25:74:67:fa:10:15:c6:b7:8d:55:12:69:22:cc:98: 5f:04:18:3c:fd:99:e0:10:b3:1d:fa:1d:19:15:70: fe:9a:47:24:c9:bf:c2:36:ca:e0:ec:54:13:3a:b2: 25:9c:e1:7d:fb:3c:63:4b:87:72:16:65:03:29:aa: ef:8d:cc:d5:3f:66:7a:01:e3:1c:a3:93:dc:99:de: 72:b6:fa:20:12:77:79:ab:04:b4:2c:01:a0:66:a9: d8:32:fc:d6:b3:5d:9c:8c:4b:5a:a7:18:3a:61:f7: 41:93:a7:6b:90:a1:c8:2b:a1:89:f3:0b:95:9d:b8: 3e:89:07:35:09:c0:b7:26:c3:3c:8b:72:bb:6b:49: a1:dc:66:1b:cb:1f:2b:73:cb:26:30:bb:8f:ff:5c: 1d:39:33:58:d5:38:78:be:9d:58:b9:78:8b:66:41: 74:55:6d:ac:af:61:9c:a7:19:b1:84:53:60:70:7a: af:03:d5:24:88:a2:bf:f3:00:5c:d8:d7:14:59:e4: f1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:91:9A:DD:EC:05:0C:69:C6:4B:EA:23:93:B3:7B:78:AA:AF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6b:ee:0d:98:67:92:9b:b2:6f:03:a8:1b:1a:83:cf:58:a0: bd:48:7b:91:b9:28:eb:28:5f:5f:e5:46:e3:9b:23:af:e6:d0: ce:b4:35:37:8b:8e:b3:e7:10:8d:eb:f5:c9:d9:29:db:51:a8: 11:de:7d:00:38:34:e0:e2:52:d0:5a:6a:b6:fa:73:51:5d:62: f3:b0:72:e1:e9:e0:f0:0c:34:9d:5f:da:f0:2f:6d:18:06:6d: e6:60:c8:54:1b:6c:d8:d0:2c:3d:2f:fc:b3:85:63:a2:15:b2: 62:74:ee:1c:18:16:ef:a8:b6:f8:6c:e8:0c:5d:3b:36:3b:f3: ca:f2:9b:9f:a9:9a:d0:f3:42:38:06:04:20:b2:c5:10:1e:a9: 0c:3e:85:8b:61:6b:79:c8:89:26:41:1d:b9:6f:94:98:c5:12: 5a:d7:54:f9:12:8b:b7:2c:4b:fe:f2:dd:c0:8a:8b:51:da:e7: f5:02:ac:60:7c:53:80:23:96:01:d3:8e:f9:58:f2:00:45:b9: 82:00:08:e2:be:ca:0a:da:3d:94:7f:74:9c:24:e4:3d:45:a8: c6:5a:c6:bd:fd:1c:c4:2b:e7:9f:ba:72:a1:6f:a7:88:8c:65: c7:79:98:10:c0:00:6b:ef:6c:54:d9:ef:90:87:38:a0:05:2d: 48:fb:c5:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqQicUFGCvKlkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MWQwMDVlYjEtZDYyYi00NDQ4LWIxOWQtZWEzZDcwNTUyOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+5A8n7K8nvFdmw5tHhfTZc2IS9jUBNRpe1P LVteDLuCMHZSZmHmdNCPhrJiHNT63uMyHerRJMHrCxIldGf6EBXGt41VEmkizJhf BBg8/ZngELMd+h0ZFXD+mkckyb/CNsrg7FQTOrIlnOF9+zxjS4dyFmUDKarvjczV P2Z6AeMco5Pcmd5ytvogEnd5qwS0LAGgZqnYMvzWs12cjEtapxg6YfdBk6drkKHI K6GJ8wuVnbg+iQc1CcC3JsM8i3K7a0mh3GYbyx8rc8smMLuP/1wdOTNY1Th4vp1Y uXiLZkF0VW2sr2GcpxmxhFNgcHqvA9UkiKK/8wBc2NcUWeTxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyOkZrd7AUMacZL6iOTs3t4qq9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTA3YmQ4NjktNmE5Ni0z Y2RmLWIzZTMtMjlhNjJlYTkwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5r7g2YZ5Kbsm8DqBsag89YoL1Ie5G5KOsoX1/lRuObI6/m0M60NTeL jrPnEI3r9cnZKdtRqBHefQA4NODiUtBaarb6c1FdYvOwcuHp4PAMNJ1f2vAvbRgG beZgyFQbbNjQLD0v/LOFY6IVsmJ07hwYFu+otvhs6AxdOzY788rym5+pmtDzQjgG BCCyxRAeqQw+hYtha3nIiSZBHblvlJjFElrXVPkSi7csS/7y3cCKi1Ha5/UCrGB8 U4AjlgHTjvlY8gBFuYIACOK+ygraPZR/dJwk5D1FqMZaxr39HMQr55+6cqFvp4iM Zcd5mBDAAGvvbFTZ75CHOKAFLUj7xRI= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org