$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa File: 06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa (raw, json) Hash identifier: d3F7EN1+PtbfgcA3eA9XgHW8FbcogjIvMmmJKtFbp5k= Subject key identifier: 46:12:A0:76:10:01:35:BD:FB:C6:14:53:EE:A3:06:3A:E9:96:27:A5 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285847CA3F841B0C8429ADEF60E2F8 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 401104 IP address blocks: 204.197.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:84:1b:0c:84:29:ad:ef:60:e2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=557ca18f-3a8e-4558-b01a-09ed0906dc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:fc:fd:4c:c5:23:55:41:97:6f:9e:9a:cf: 64:fd:e8:f7:84:d8:c1:4a:eb:ec:9c:50:97:b9:80: e1:d7:28:91:54:28:05:f8:b2:72:fb:e1:d4:1c:a5: f3:29:46:ee:a0:e4:76:38:87:e3:63:69:e5:98:d8: a8:89:8c:51:74:7a:30:53:ce:80:39:64:0b:71:54: 52:b8:ce:2f:7a:aa:20:e4:f5:53:48:8f:e6:7c:b1: a4:0d:74:55:75:65:df:12:57:f8:a8:20:09:4b:65: c1:8c:b2:db:1c:b2:17:7e:23:b4:66:d3:dd:b0:ce: dd:10:92:0c:9b:ac:0d:0b:9a:f2:30:71:0d:af:23: 33:7c:54:b4:71:2e:1e:a4:52:f7:c9:be:1b:03:32: 17:3d:6f:7e:e3:bf:87:53:15:ad:92:7e:c1:3e:a2: d7:b4:63:80:4a:b9:87:8c:05:de:ff:0e:64:e6:c5: e6:b8:72:0f:8f:8e:62:2e:33:2a:5d:44:1b:48:14: 24:62:ca:b6:52:7f:08:51:d4:4b:c5:3d:85:f4:38: eb:d5:82:31:ac:91:b8:03:a1:74:66:1a:b2:4d:51: c5:8f:06:e2:00:c3:a6:dd:3d:ac:ce:7f:3c:8a:ca: 5d:f0:90:28:59:a2:ab:64:aa:12:d4:dc:26:97:12: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:A0:76:10:01:35:BD:FB:C6:14:53:EE:A3:06:3A:E9:96:27:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:41:2f:38:6a:74:b7:71:40:90:04:6a:cd:70:92:8a:97:6d: 07:50:f1:13:32:4f:48:7f:97:4e:64:47:7c:05:cf:d0:16:5d: 2d:32:82:e8:79:97:ba:0c:84:a4:5c:40:80:17:65:39:29:25: 0e:b2:f2:d4:68:4a:93:95:9a:f6:ba:c1:fc:2b:85:b5:c0:a6: 6d:64:b2:88:d4:66:ab:d4:65:f0:0e:a6:9b:8c:88:87:68:c1: e1:6c:e9:2e:b0:cc:74:93:47:70:0c:a4:20:18:93:fc:e0:61: 84:c7:6b:34:f7:9a:c9:ac:6c:18:51:d1:0b:ac:fe:8c:c6:e9: 97:6f:15:2e:78:88:a6:34:25:d7:fc:7a:c9:c2:66:bf:47:20: 39:cd:29:ae:30:a8:8e:22:f0:c8:e3:6a:9e:92:c3:37:8f:f4: 95:a7:46:de:21:d2:0d:49:56:fb:24:de:14:0e:9a:95:8e:99: fb:9e:55:9f:c3:b2:7b:ff:6c:fc:c5:80:45:ca:17:99:e5:c6: 9e:1f:0d:d4:80:3b:18:50:7e:1b:de:7a:09:84:95:84:e7:d6: e3:6c:52:50:a2:ba:c5:53:8b:f1:87:67:85:24:5a:95:3f:b5: c0:09:ab:c8:08:b2:78:5a:b3:33:f3:d0:0b:fa:1a:88:b1:6f: c9:f4:20:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4QbDIQpre9g4vgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTU3Y2ExOGYtM2E4ZS00NTU4LWIwMWEtMDllZDA5MDZkYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZj8/UzFI1VBl2+ems9k/ej3hNjBSuvsnFCX uYDh1yiRVCgF+LJy++HUHKXzKUbuoOR2OIfjY2nlmNioiYxRdHowU86AOWQLcVRS uM4veqog5PVTSI/mfLGkDXRVdWXfElf4qCAJS2XBjLLbHLIXfiO0ZtPdsM7dEJIM m6wNC5ryMHENryMzfFS0cS4epFL3yb4bAzIXPW9+47+HUxWtkn7BPqLXtGOASrmH jAXe/w5k5sXmuHIPj45iLjMqXUQbSBQkYsq2Un8IUdRLxT2F9Djr1YIxrJG4A6F0 ZhqyTVHFjwbiAMOm3T2szn88ispd8JAoWaKrZKoS1NwmlxKjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYSoHYQATW9+8YUU+6jBjrplielMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDZiYzdkYjktYTFlMy0z NWVmLTgzMjYtYjQ3YTk4ZDA5YTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhBLzhqdLdxQJAEas1wkoqXbQdQ8RMyT0h/l05kR3wFz9AWXS0yguh5 l7oMhKRcQIAXZTkpJQ6y8tRoSpOVmva6wfwrhbXApm1ksojUZqvUZfAOppuMiIdo weFs6S6wzHSTR3AMpCAYk/zgYYTHazT3msmsbBhR0Qus/ozG6ZdvFS54iKY0Jdf8 esnCZr9HIDnNKa4wqI4i8Mjjap6SwzeP9JWnRt4h0g1JVvsk3hQOmpWOmfueVZ/D snv/bPzFgEXKF5nlxp4fDdSAOxhQfhveegmElYTn1uNsUlCiusVTi/GHZ4UkWpU/ tcAJq8gIsnhaszPz0Av6Goixb8n0II0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:30 2024 by rpki-client on console-ams.rpki-client.org