$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa File: 27d260f7-208f-3bd1-a06b-3da7f77567a0.roa (raw, json) Hash identifier: SzTiLuJIFd/ry0HK8dy5OJ2sfMZhvnVzcE6nHOWDLtM= Subject key identifier: 32:4A:9E:11:E4:F1:2D:DA:AF:69:FF:69:F3:DB:A5:35:8C:60:15:6C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858479D76B7E29D187AB76207FD00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 9009 IP address blocks: 206.123.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b7:e2:9d:18:7a:b7:62:07:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=96c6bfdd-6071-4ad1-af99-5f4a0d82449c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:bb:b0:45:7c:4a:ab:aa:83:ce:66:18:d8: 7d:14:75:67:49:e7:c3:77:c2:bc:d9:4b:df:eb:5f: 9a:cc:eb:82:b9:fa:4b:6f:4c:5d:cd:f7:7a:79:91: c4:e0:18:77:dd:12:32:9e:d4:b4:8a:c9:2a:a5:95: c9:38:bd:a5:bb:40:33:86:f7:cc:1e:25:bf:82:30: 08:33:7d:c4:de:94:17:49:26:8c:75:98:ce:13:15: aa:16:54:43:be:5a:93:c1:be:62:76:27:41:ff:66: be:0e:ec:43:d3:2c:0f:38:4e:e5:6d:dc:71:73:85: 7d:79:e1:1c:44:95:96:1c:4f:79:19:f6:b8:03:e7: 53:85:dc:78:fe:07:44:2b:d3:0a:c9:3b:96:a6:57: 85:18:c6:4e:0d:04:4b:33:40:a4:aa:20:14:cb:35: 35:b1:87:cc:44:fe:12:e0:fe:d9:0d:8b:b4:5f:2f: 10:76:84:7a:0f:8f:4c:73:4a:bd:af:1d:26:5a:20: 66:77:33:78:99:f4:e5:9f:00:09:98:12:0e:70:8b: c2:f6:a7:ef:52:b6:60:36:26:bc:01:fb:7e:89:84: d2:c7:b5:a6:05:02:0d:9b:f5:a0:41:2e:2f:7a:16: f8:36:84:17:7e:da:cd:a0:be:82:27:78:68:1d:5b: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:9E:11:E4:F1:2D:DA:AF:69:FF:69:F3:DB:A5:35:8C:60:15:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6e:eb:23:42:d1:ee:d7:47:e4:be:47:9a:99:9b:04:80:57: 01:ba:67:9f:e4:78:59:05:a3:9d:53:9e:fd:00:3b:7b:84:e0: 63:66:33:a6:4b:85:db:9d:ca:3d:6c:bb:7d:df:2c:d7:bb:e3: ae:2b:61:1a:35:e3:12:c1:ff:20:57:86:bd:ca:5a:92:16:2c: 61:50:c9:40:a3:98:79:3f:95:31:64:34:ad:12:43:a0:0e:c8: 87:88:f0:0e:fc:f7:f7:9c:d0:b5:15:44:cb:d6:f3:3e:bb:58: 3d:ec:ff:ed:10:6f:47:80:2e:2e:10:06:6b:0b:57:d4:ea:05: f9:77:b0:21:a4:71:b2:81:fc:94:23:ba:1d:13:5a:4b:30:c6: e1:e1:f8:2b:37:10:9b:32:79:e4:5d:44:ab:e1:d5:1a:fb:33: 6a:98:b2:aa:c0:37:f0:88:b8:96:16:a6:1a:8b:32:9c:d9:21: 98:09:ab:b1:0b:ea:bc:ac:2d:f1:42:fe:26:4d:8a:60:f8:7c: 18:5f:09:88:a8:5f:c8:ca:f7:11:1a:3d:7b:e2:7d:f0:17:c1: 42:ed:2f:ff:b5:c4:5d:13:1a:ef:b4:f1:43:e8:07:1c:1c:ea: 89:7b:f2:4c:61:06:cf:46:fa:19:b7:81:86:5f:b5:bf:df:cb: 47:aa:a2:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrfinRh6t2IH/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk OTZjNmJmZGQtNjA3MS00YWQxLWFmOTktNWY0YTBkODI0NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+C7sEV8Squqg85mGNh9FHVnSefDd8K82Uvf 61+azOuCufpLb0xdzfd6eZHE4Bh33RIyntS0iskqpZXJOL2lu0AzhvfMHiW/gjAI M33E3pQXSSaMdZjOExWqFlRDvlqTwb5ididB/2a+DuxD0ywPOE7lbdxxc4V9eeEc RJWWHE95Gfa4A+dThdx4/gdEK9MKyTuWpleFGMZODQRLM0CkqiAUyzU1sYfMRP4S 4P7ZDYu0Xy8QdoR6D49Mc0q9rx0mWiBmdzN4mfTlnwAJmBIOcIvC9qfvUrZgNia8 Aft+iYTSx7WmBQINm/WgQS4vehb4NoQXftrNoL6CJ3hoHVv3TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJKnhHk8S3ar2n/afPbpTWMYBVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjdkMjYwZjctMjA4Zi0z YmQxLWEwNmItM2RhN2Y3NzU2N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVu6yNC0e7XR+S+R5qZmwSAVwG6Z5/keFkFo51Tnv0AO3uE4GNmM6ZL hdudyj1su33fLNe7464rYRo14xLB/yBXhr3KWpIWLGFQyUCjmHk/lTFkNK0SQ6AO yIeI8A789/ec0LUVRMvW8z67WD3s/+0Qb0eALi4QBmsLV9TqBfl3sCGkcbKB/JQj uh0TWkswxuHh+Cs3EJsyeeRdRKvh1Rr7M2qYsqrAN/CIuJYWphqLMpzZIZgJq7EL 6rysLfFC/iZNimD4fBhfCYioX8jK9xEaPXviffAXwULtL/+1xF0TGu+08UPoBxwc 6ol78kxhBs9G+hm3gYZftb/fy0eqoqc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org