$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa File: 09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa (raw, json) Hash identifier: jTJziYLHXVQcU4wUSOyXP3+gMhiOpg2GDPIfHizs3zY= Subject key identifier: 4A:B1:C8:92:A6:8E:A7:DD:12:1A:10:29:9A:F9:DE:97:84:47:4C:DA Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584769D0D9017D1D69000A59D500 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 6597 IP address blocks: 208.73.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d9:01:7d:1d:69:00:0a:59:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=81870faf-9f59-4131-8726-1ed74a0f3d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:4a:05:af:df:82:bb:b2:1d:87:1d:2e:0c: 1f:3a:53:40:7c:e5:76:5d:5b:8b:2c:a8:6a:db:e1: f6:80:7b:e0:ea:1a:7f:1b:bf:92:94:d9:2b:48:c7: db:8d:8e:58:77:b2:78:4f:f0:b6:2e:fa:64:0a:fe: ad:87:0b:b2:6a:3b:d4:c0:a6:46:2f:33:c1:4d:1b: 3d:f9:90:52:53:8a:a6:ab:52:0d:c3:fb:c9:73:b8: 4f:9a:34:81:bb:15:81:fc:88:49:b5:ef:4e:8b:9e: 29:05:ed:b5:91:49:f6:ed:a2:d2:3b:7d:46:53:ce: 9f:3e:d5:60:a1:6d:36:8f:5b:ee:73:20:71:2e:39: 75:4a:ff:eb:c2:7b:fe:e8:22:f5:b9:ab:4f:5f:a9: b5:6f:86:89:0c:b8:a9:0d:97:44:a4:53:85:33:33: 04:db:c4:a9:ba:cd:cb:4d:c0:d9:52:a9:f0:76:b5: 91:4f:01:79:9d:ab:d7:f9:64:33:aa:00:76:e3:11: 76:d5:18:1a:dd:16:13:82:c7:a1:a0:9c:ac:77:2d: d4:e5:4d:e6:6b:b5:3d:8e:98:6d:26:57:a8:19:f1: 40:43:17:f7:90:c9:12:9b:8d:ad:ef:09:05:3c:78: 26:a9:cc:5c:4e:7a:88:a7:51:0e:b8:62:ff:5e:85: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:C8:92:A6:8E:A7:DD:12:1A:10:29:9A:F9:DE:97:84:47:4C:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/09eadd5e-9c3f-3f81-b80f-f4e5faaa9ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.73.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:df:99:56:e5:91:da:43:94:15:7c:c3:53:f8:9c:5e:8b:c9: ee:bc:0e:ab:27:59:b8:b7:91:cb:a8:fd:d7:b6:bf:63:42:7d: 91:40:88:7b:9b:e9:8d:d5:7c:81:24:f8:9e:19:08:3e:0e:5e: e1:54:cf:ed:c5:3d:e1:e0:1b:b0:55:94:1d:ea:b1:e8:31:b9: 97:72:7b:b7:b4:f5:89:72:c8:b6:ce:13:be:48:f4:02:39:70: bd:df:a6:de:67:8b:4b:07:39:a2:cd:99:ff:f7:62:b3:49:4c: 45:aa:c2:61:60:1e:a9:6d:90:2f:7a:e1:10:40:a5:0d:e7:8f: b7:88:57:76:cd:2d:00:ce:8a:95:4c:fa:75:64:6d:d2:ca:e0: 57:14:7f:17:b8:b5:ba:8e:85:a5:ed:69:2a:a7:fc:3f:ec:4f: 30:20:4d:e6:68:39:87:24:7f:f1:00:0d:57:db:81:95:ef:f1: b2:a3:35:d6:8e:57:fc:d2:c9:70:18:0d:7f:95:06:c7:bb:9e: a8:58:7a:41:16:6e:a0:23:71:d7:d9:c8:6c:bc:0f:99:1a:44: 82:1d:14:4a:65:35:0b:ad:36:e9:fe:d8:2f:2d:32:24:48:05: f0:10:1c:c8:37:ab:56:eb:68:e4:8b:b1:c2:ef:b9:c2:94:ef: 4c:61:af:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0NkBfR1pAApZ1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk ODE4NzBmYWYtOWY1OS00MTMxLTg3MjYtMWVkNzRhMGYzZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD9KBa/fgruyHYcdLgwfOlNAfOV2XVuLLKhq 2+H2gHvg6hp/G7+SlNkrSMfbjY5Yd7J4T/C2LvpkCv6thwuyajvUwKZGLzPBTRs9 +ZBSU4qmq1INw/vJc7hPmjSBuxWB/IhJte9Oi54pBe21kUn27aLSO31GU86fPtVg oW02j1vucyBxLjl1Sv/rwnv+6CL1uatPX6m1b4aJDLipDZdEpFOFMzME28Spus3L TcDZUqnwdrWRTwF5navX+WQzqgB24xF21Rga3RYTgsehoJysdy3U5U3ma7U9jpht JleoGfFAQxf3kMkSm42t7wkFPHgmqcxcTnqIp1EOuGL/XoXzqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqxyJKmjqfdEhoQKZr53peER0zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMDllYWRkNWUtOWMzZi0z ZjgxLWI4MGYtZjRlNWZhYWE5ZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjfmVblkdpDlBV8w1P4nF6Lye68DqsnWbi3kcuo/de2v2NCfZFAiHub 6Y3VfIEk+J4ZCD4OXuFUz+3FPeHgG7BVlB3qsegxuZdye7e09YlyyLbOE75I9AI5 cL3fpt5ni0sHOaLNmf/3YrNJTEWqwmFgHqltkC964RBApQ3nj7eIV3bNLQDOipVM +nVkbdLK4FcUfxe4tbqOhaXtaSqn/D/sTzAgTeZoOYckf/EADVfbgZXv8bKjNdaO V/zSyXAYDX+VBse7nqhYekEWbqAjcdfZyGy8D5kaRIIdFEplNQutNun+2C8tMiRI BfAQHMg3q1braOSLscLvucKU70xhr7k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:53 2024 by rpki-client on console-fra.rpki-client.org