$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa File: 925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa (raw, json) Hash identifier: hr0PxLslMnezE8Bq49cCfp1SOLaTmpRx/VEg+4JbOs4= Subject key identifier: DD:C1:41:09:B5:A5:2B:C5:D6:8C:37:52:B4:BB:BF:15:45:27:4C:D5 Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Certificate serial: 010D0C9F4328584774FB93D6643D2FE489836280 Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 400427 IP address blocks: 206.225.0.0/22 maxlen: 24 2606:ad40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:93:d6:64:3d:2f:e4:89:83:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=d7b5c438-d5a0-4957-b3bb-dcaf31f4a454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:75:e1:8b:65:45:47:04:2b:ed:e1:06:dc: 48:9e:91:ef:a1:ce:c8:75:17:4e:ab:8d:34:83:ea: 1e:1d:c6:ac:57:d5:3f:11:63:4d:72:f6:7a:a7:ad: cb:8e:4a:02:8f:bc:b6:1e:df:7f:0a:c9:8c:e2:5b: 83:c7:6f:bb:14:2f:f1:fd:d2:2b:a0:66:76:0e:79: f4:fd:23:70:f1:0b:1e:73:db:ef:ae:72:37:75:7b: 1b:97:85:f2:40:fe:a6:63:ae:7e:96:e0:be:1e:e7: 96:a5:ad:16:f6:3b:ed:51:a2:4d:ff:85:d4:23:82: fb:6e:eb:9e:37:51:cd:c3:02:6d:98:12:a2:17:5d: d2:55:1a:6c:5b:8d:18:52:2a:e7:4d:4e:46:dc:7a: 4a:0d:cf:a4:7f:b0:bb:8f:f3:3e:48:b4:df:3b:d1: b2:1f:1b:e7:72:4c:4e:92:1a:2f:1e:88:df:8f:98: b9:89:53:3a:2a:0b:d1:f0:00:87:48:37:76:49:64: cf:b8:c0:05:c2:47:60:cc:1c:a2:74:2e:13:39:32: 25:53:77:2c:07:9f:9e:70:d6:6c:76:e7:17:63:9c: 3e:84:86:ed:05:47:49:91:f7:3e:d0:d6:af:3f:a6: 41:e6:0f:6c:45:56:eb:55:a3:14:38:38:d9:34:c7: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C1:41:09:B5:A5:2B:C5:D6:8C:37:52:B4:BB:BF:15:45:27:4C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl X509v3 Authority Key Identifier: keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer sbgp-ipAddrBlock: critical IPv4: 206.225.0.0/22 IPv6: 2606:ad40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:70:31:7c:97:fe:0f:2c:97:9f:9f:62:58:6a:4c:4d:9d:aa: 71:46:e5:34:d1:d3:8c:4b:a4:32:1b:5a:28:f3:31:2a:88:4c: 53:b6:71:86:db:5c:cc:1c:d4:b3:ee:a6:71:12:56:69:d1:b6: 98:bd:fa:f3:87:aa:35:62:7b:13:8d:15:85:82:e0:0e:e5:4e: 33:b6:35:e1:5b:a6:82:9c:a7:2e:8b:82:4b:6f:56:75:c2:b9: 0a:32:0c:73:39:f5:1d:09:bb:c9:b8:b6:a2:02:a1:7f:19:35: 0c:03:43:cd:e9:07:c2:19:5d:07:61:b3:24:21:86:20:b6:b1: 79:45:61:52:a1:5a:1f:c4:c8:5a:37:4b:53:92:a0:fc:64:65: e7:c7:60:ef:ca:cd:c6:20:32:aa:51:e1:2f:ab:1b:32:68:5c: f1:0a:9b:9b:f4:f3:f2:dd:27:74:17:7e:74:85:dd:b9:81:59: 1b:b4:b4:64:56:9a:38:f2:64:1d:4d:6a:7e:a8:7a:38:a5:4a: ca:08:01:6f:f6:fa:c5:84:a7:ca:35:19:e6:85:3b:64:f4:6e: a6:96:fd:62:a2:5d:64:2d:8c:e7:e7:8c:70:db:f4:26:de:f5: 23:16:75:d6:68:6c:46:21:e5:e1:99:4c:06:43:4b:3a:7d:84: 2d:ed:4f:4a -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEd0+5PWZD0v5ImDYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1 NzhmMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDdiNWM0MzgtZDVhMC00OTU3LWIzYmItZGNhZjMxZjRhNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIx14YtlRUcEK+3hBtxInpHvoc7IdRdOq400 g+oeHcasV9U/EWNNcvZ6p63LjkoCj7y2Ht9/CsmM4luDx2+7FC/x/dIroGZ2Dnn0 /SNw8Qsec9vvrnI3dXsbl4XyQP6mY65+luC+HueWpa0W9jvtUaJN/4XUI4L7buue N1HNwwJtmBKiF13SVRpsW40YUirnTU5G3HpKDc+kf7C7j/M+SLTfO9GyHxvnckxO khovHojfj5i5iVM6KgvR8ACHSDd2SWTPuMAFwkdgzByidC4TOTIlU3csB5+ecNZs ducXY5w+hIbtBUdJkfc+0NavP6ZB5g9sRVbrVaMUODjZNMeKxwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFN3BQQm1pSvF1ow3UrS7vxVFJ0zVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3 YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvOTI1YzhjNmUtN2E2Ni0z YTJjLTk0MGQtNTZiZDU2YzcwZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4 MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm ZDY0ZTU3OGYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzuEAMA0E AgACMAcDBQAmBq1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAJwMXyX/g8sl5+fYlhqTE2dqnFG5TTR04xL pDIbWijzMSqITFO2cYbbXMwc1LPupnESVmnRtpi9+vOHqjViexONFYWC4A7lTjO2 NeFbpoKcpy6LgktvVnXCuQoyDHM59R0Ju8m4tqICoX8ZNQwDQ83pB8IZXQdhsyQh hiC2sXlFYVKhWh/EyFo3S1OSoPxkZefHYO/KzcYgMqpR4S+rGzJoXPEKm5v08/Ld J3QXfnSF3bmBWRu0tGRWmjjyZB1Nan6oejilSsoIAW/2+sWEp8o1GeaFO2T0bqaW /WKiXWQtjOfnjHDb9Cbe9SMWddZobEYh5eGZTAZDSzp9hC3tT0o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:25 2024 by rpki-client on console-ams.rpki-client.org