$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa File: f912ae62-732c-3124-96ce-77eea87e00a5.roa (raw, json) Hash identifier: 5WgCJdadqPBVhjD/7+htCrKTiztZvSj4B5ShifgD0aE= Subject key identifier: 1A:DF:EC:FD:4E:F4:38:D4:2D:D0:E3:BA:DF:7E:D0:64:BB:05:46:F1 Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F432858476C9DB6AE65304AB90E334460 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 398125 IP address blocks: 208.71.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b6:ae:65:30:4a:b9:0e:33:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=f187b14b-adcb-478e-ac11-574120cdbfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:24:ff:9f:b6:a5:88:72:26:28:fa:85:51: de:fe:16:d3:40:ff:1c:11:09:49:3b:6d:e6:69:c8: 40:5d:2d:85:f7:b8:a0:91:eb:fd:37:bd:4a:73:2c: 80:e1:0d:52:c8:cd:0f:d8:b3:b2:13:46:7f:4a:37: 65:02:fe:b0:07:ae:82:99:0f:db:bc:f5:ab:91:8b: 84:8e:5f:80:8e:bf:c7:dc:fb:ab:a1:02:d8:00:13: 76:c9:0c:9b:6c:db:4e:ec:ac:17:72:a3:68:a7:34: 42:2e:31:34:94:59:b6:76:3c:e9:f5:1d:fb:1b:b8: 5d:4a:71:a3:ce:6e:74:a8:0c:cc:5e:90:6a:f3:c3: 6d:9a:71:68:00:63:fe:fb:72:b0:e7:3b:e3:01:c0: 51:e5:82:a4:9c:25:b3:f2:da:b8:ad:4b:95:c0:1e: 62:09:f4:5e:0f:20:82:01:82:b9:81:5d:b2:b3:db: 5c:59:f6:81:60:66:3e:3d:8e:04:9b:4b:52:cd:a8: 5a:fb:35:86:06:02:82:33:48:51:ad:47:32:ed:8f: 71:b8:ff:98:6c:55:a2:81:af:bb:a0:44:29:57:ff: 15:02:05:f3:ae:5d:bf:ab:25:a3:e7:66:c1:8b:23: 42:fb:e4:93:5c:3a:fd:dc:d3:9c:2a:ad:39:41:ff: df:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DF:EC:FD:4E:F4:38:D4:2D:D0:E3:BA:DF:7E:D0:64:BB:05:46:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b6:73:45:f0:48:53:f2:90:1a:89:f5:d7:d0:3d:8a:6f:f3: dc:fc:36:51:83:53:f6:16:24:5c:9c:e3:7b:c9:57:43:d8:fa: 45:71:9a:11:95:62:3b:ed:09:8a:ff:a4:f2:a5:0b:8e:62:9b: b9:16:1c:76:25:39:bc:b0:df:64:c1:5d:aa:a1:ca:22:58:c0: 81:f3:5e:be:ca:cd:11:88:85:78:70:4d:ea:46:58:37:a7:02: 1d:e4:e5:20:12:81:d7:1b:78:5a:3c:30:26:b0:e8:3c:7f:6a: 83:18:ed:05:fe:a5:ce:ec:5f:73:74:25:bf:d0:8f:b9:b4:c7: e2:91:87:1b:06:a5:41:97:83:b0:33:dc:4c:43:78:d1:68:d1: 43:80:31:33:83:de:11:2b:32:a6:ea:d6:85:cb:86:fb:3a:89: bb:1c:c2:75:4e:f9:15:ef:5d:ce:c8:be:24:56:09:bb:af:80: 16:78:56:c2:02:04:a8:aa:b8:d1:2c:0d:a7:a5:e5:4a:18:7c: 16:1f:10:b0:9f:3f:56:6f:07:de:64:9d:5a:01:4f:23:8e:29: 22:54:d1:f8:95:e6:47:aa:44:f9:60:a3:ce:89:93:85:74:10: d9:a0:56:e4:fa:0e:ff:e6:c9:8b:d4:ca:7d:c0:1c:2a:11:bf: 8c:9a:b3:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbauZTBKuQ4zRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjE4N2IxNGItYWRjYi00NzhlLWFjMTEtNTc0MTIwY2RiZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Qk/5+2pYhyJij6hVHe/hbTQP8cEQlJO23m achAXS2F97igkev9N71KcyyA4Q1SyM0P2LOyE0Z/SjdlAv6wB66CmQ/bvPWrkYuE jl+Ajr/H3PuroQLYABN2yQybbNtO7KwXcqNopzRCLjE0lFm2djzp9R37G7hdSnGj zm50qAzMXpBq88NtmnFoAGP++3Kw5zvjAcBR5YKknCWz8tq4rUuVwB5iCfReDyCC AYK5gV2ys9tcWfaBYGY+PY4Em0tSzaha+zWGBgKCM0hRrUcy7Y9xuP+YbFWiga+7 oEQpV/8VAgXzrl2/qyWj52bBiyNC++STXDr93NOcKq05Qf/flQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrf7P1O9DjULdDjut9+0GS7BUbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvZjkxMmFlNjItNzMyYy0z MTI0LTk2Y2UtNzdlZWE4N2UwMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW2c0XwSFPykBqJ9dfQPYpv89z8NlGDU/YWJFyc43vJV0PY+kVxmhGV YjvtCYr/pPKlC45im7kWHHYlObyw32TBXaqhyiJYwIHzXr7KzRGIhXhwTepGWDen Ah3k5SASgdcbeFo8MCaw6Dx/aoMY7QX+pc7sX3N0Jb/Qj7m0x+KRhxsGpUGXg7Az 3ExDeNFo0UOAMTOD3hErMqbq1oXLhvs6ibscwnVO+RXvXc7IviRWCbuvgBZ4VsIC BKiquNEsDael5UoYfBYfELCfP1ZvB95knVoBTyOOKSJU0fiV5keqRPlgo86Jk4V0 ENmgVuT6Dv/myYvUyn3AHCoRv4yas/E= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:53 2024 by rpki-client on console-fra.rpki-client.org