$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa File: f2bf5543-269c-3fbb-bb59-b3484366fb78.roa (raw, json) Hash identifier: QWpVItaNIIIuwrUhnvIhJNNMBuejA/YANTdiNT7RvXI= Subject key identifier: 33:DD:26:F3:D8:3F:1E:4A:79:0B:B8:BF:03:9D:0C:65:10:35:2C:A9 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285847EA5A131F2E219408804470A0 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa Signing time: Mon 18 Nov 2024 02:00:27 +0000 ROA not before: Mon 18 Nov 2024 02:00:27 +0000 ROA not after: Sun 16 Feb 2025 02:00:27 +0000 asID: 398420 IP address blocks: 208.89.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:5a:13:1f:2e:21:94:08:80:44:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Nov 18 02:00:27 2024 GMT Not After : Feb 16 02:00:27 2025 GMT Subject: CN=1064cf6d-9e96-417d-9651-a244d519c826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:42:ed:b7:aa:44:26:4f:0c:13:61:21:ff:04: 68:05:d2:ce:c2:c2:80:d3:f6:51:8e:42:e4:c9:74: e9:b1:6e:bc:67:20:6e:79:2f:cb:4c:26:36:2b:3b: ab:63:54:c5:36:07:39:37:c9:97:c8:65:a8:61:c4: 06:38:aa:a3:e3:e7:a9:34:f5:64:0c:26:3f:7a:50: 73:61:79:b4:38:2f:a9:35:c1:a2:ad:f4:8c:10:12: 5e:69:5f:06:b1:aa:19:ec:e7:99:9c:4a:9a:91:26: 96:40:99:0b:d0:9e:d1:50:bd:ed:e8:58:0b:4b:81: be:5a:2b:35:1a:a5:cc:6e:74:8a:c0:a7:c8:6f:ab: fc:05:6d:ac:01:c6:12:8c:24:ed:e5:8a:2a:ec:68: 7a:61:e7:dc:81:47:87:72:bc:9c:f7:c2:54:f8:50: 35:c0:93:21:6f:46:77:a4:0a:5b:48:10:b9:e0:a8: a1:ba:42:ef:55:a9:75:35:b7:e2:53:96:e4:63:c4: 36:29:3c:ac:a5:62:ea:d9:0c:29:64:76:10:bd:51: 37:f8:ef:c9:5f:0a:a6:d3:da:33:18:a0:46:47:16: c6:61:04:04:cc:62:1a:08:ee:71:b4:54:a8:ad:c2: ff:7d:2a:8d:98:ed:8a:32:a9:4a:10:93:f2:fa:47: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:26:F3:D8:3F:1E:4A:79:0B:B8:BF:03:9D:0C:65:10:35:2C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:40:85:15:58:97:59:c3:37:20:1b:67:4a:36:c6:a7:b7:6d: e0:77:07:a1:e8:e4:7a:4c:7c:25:64:10:f2:c7:60:b6:4f:b1: eb:f2:e1:fa:69:3d:79:25:c3:fb:aa:b2:7f:f4:68:a5:b2:7d: b6:11:f1:ab:d7:0b:41:87:43:41:6a:55:c3:20:77:76:fd:d6: 8c:43:ff:9b:d9:60:5a:5b:a2:31:28:3f:de:69:f9:49:68:7f: f8:a1:cb:86:d9:11:e5:2e:4e:2f:5a:6f:65:8c:cc:50:23:6a: 6d:97:ae:2c:41:9b:b4:60:03:4a:91:7e:24:9b:30:1a:b1:43: 0b:c7:6f:04:74:fb:9d:ed:2f:83:3b:9f:d0:63:c8:b1:a3:2a: c9:2e:7d:19:a7:5e:0c:ae:6c:2e:ff:31:b1:23:4f:b7:e9:2e: 52:83:a4:f5:0a:45:01:8f:ea:02:a6:e1:a1:4c:0c:ee:4a:f5: 01:6b:5a:ee:4a:16:4d:b3:04:0b:d2:e9:68:05:cb:bc:67:4e: 08:95:02:40:c1:22:6c:41:45:38:29:f5:0b:26:d6:34:32:da: 7c:24:ed:84:7f:cd:6c:1b:cf:a4:a7:86:a4:f3:4f:a8:38:fb: b8:e0:7e:92:ba:e5:91:ce:9f:15:ad:92:12:29:a2:d1:72:b5: 1f:b2:9b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWhMfLiGUCIBEcKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk MTA2NGNmNmQtOWU5Ni00MTdkLTk2NTEtYTI0NGQ1MTljODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ELtt6pEJk8ME2Eh/wRoBdLOwsKA0/ZRjkLk yXTpsW68ZyBueS/LTCY2KzurY1TFNgc5N8mXyGWoYcQGOKqj4+epNPVkDCY/elBz YXm0OC+pNcGirfSMEBJeaV8GsaoZ7OeZnEqakSaWQJkL0J7RUL3t6FgLS4G+Wis1 GqXMbnSKwKfIb6v8BW2sAcYSjCTt5Yoq7Gh6YefcgUeHcryc98JU+FA1wJMhb0Z3 pApbSBC54KihukLvVal1NbfiU5bkY8Q2KTyspWLq2QwpZHYQvVE3+O/JXwqm09oz GKBGRxbGYQQEzGIaCO5xtFSorcL/fSqNmO2KMqlKEJPy+kfeYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPdJvPYPx5KeQu4vwOdDGUQNSypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjJiZjU1NDMtMjY5Yy0z ZmJiLWJiNTktYjM0ODQzNjZmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJAhRVYl1nDNyAbZ0o2xqe3beB3B6Ho5HpMfCVkEPLHYLZPsevy4fpp PXklw/uqsn/0aKWyfbYR8avXC0GHQ0FqVcMgd3b91oxD/5vZYFpbojEoP95p+Ulo f/ihy4bZEeUuTi9ab2WMzFAjam2XrixBm7RgA0qRfiSbMBqxQwvHbwR0+53tL4M7 n9BjyLGjKskufRmnXgyubC7/MbEjT7fpLlKDpPUKRQGP6gKm4aFMDO5K9QFrWu5K Fk2zBAvS6WgFy7xnTgiVAkDBImxBRTgp9Qsm1jQy2nwk7YR/zWwbz6SnhqTzT6g4 +7jgfpK65ZHOnxWtkhIpotFytR+ym6c= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org