$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0967298-1da8-32ef-9123-4a50a1143d2b.roa File: e0967298-1da8-32ef-9123-4a50a1143d2b.roa (raw, json) Hash identifier: ysem5aV427RZFkNlzf4DBSAwh/LdPAqB3+nWdN71MCI= Subject key identifier: 9D:1F:C2:6A:E2:DC:DB:65:17:C7:7D:37:58:B0:2C:56:C6:1A:A0:BC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477BABDA3B41A5F10CFD3867C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0967298-1da8-32ef-9123-4a50a1143d2b.roa Signing time: Wed 09 Oct 2024 10:30:38 +0000 ROA not before: Wed 09 Oct 2024 10:30:38 +0000 ROA not after: Tue 07 Jan 2025 11:30:38 +0000 asID: 212238 IP address blocks: 206.123.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:ab:da:3b:41:a5:f1:0c:fd:38:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 9 10:30:38 2024 GMT Not After : Jan 7 11:30:38 2025 GMT Subject: CN=f662d445-5693-4918-96ad-766dce16c715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:3e:97:ab:fa:b5:b2:9f:bb:ee:c1:8c:5f: b9:16:55:70:83:95:20:43:91:d7:c5:ed:ea:6f:3d: ad:71:bf:b9:99:00:44:48:97:75:eb:d2:c1:1c:f6: 98:10:51:e1:a1:a3:55:fe:72:48:94:4f:42:05:bc: 8b:33:d8:7a:b7:93:92:a8:8c:7e:c4:d3:d5:02:3a: f2:ff:26:c0:47:17:5e:52:3d:35:3e:7d:7a:4e:91: 80:32:d3:3f:26:17:0f:01:ef:5e:39:ed:50:c5:3d: 18:6f:70:67:ab:48:09:ef:c6:d9:4e:65:9e:50:d7: c5:6e:4b:b9:e9:93:df:18:a5:bc:7e:a2:df:c3:ca: 54:d4:0c:6b:52:b5:fb:23:36:b0:bc:44:7f:55:9a: 51:3a:19:42:1b:76:a7:bf:da:9f:99:50:cd:e2:fd: ae:eb:c4:d9:da:92:a1:c0:2e:f3:aa:bc:a8:97:7f: 60:de:6c:21:1a:61:2b:16:c2:22:d9:0b:80:69:4d: df:84:3f:91:53:0c:be:fa:34:98:c1:8e:03:bf:6e: a2:15:4b:03:be:34:db:18:42:cd:17:e6:1e:53:a0: 47:c9:da:df:c5:13:0a:2e:47:7b:a9:96:7b:87:cd: 81:e2:54:d2:04:69:27:0b:b9:73:0d:c0:af:54:ff: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1F:C2:6A:E2:DC:DB:65:17:C7:7D:37:58:B0:2C:56:C6:1A:A0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0967298-1da8-32ef-9123-4a50a1143d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:35:6c:7f:c1:0d:7d:34:43:80:4f:86:df:e2:f9:6e:31:36: 5e:b4:e7:ed:5b:55:12:75:d9:a9:5b:e1:6e:5e:6f:5b:88:86: ff:31:a6:67:83:7a:0a:30:82:9e:2c:21:98:90:77:61:d1:97: 8a:bd:27:ad:18:d9:86:ff:38:33:a0:a1:dd:cc:d8:9d:f5:f0: a6:4b:49:17:09:e9:35:d4:e3:bb:dd:f0:80:ae:a2:ad:63:73: 68:37:26:c6:f2:ae:1e:08:af:a3:e3:4b:1c:33:bc:b2:eb:8f: 95:dd:8e:74:d6:7c:d1:8c:06:d3:6a:9c:27:95:74:ae:11:9b: 6d:b7:a4:65:81:65:bd:14:2c:17:80:f0:66:be:03:44:87:d8: 00:6c:7b:f6:ac:d6:3e:0a:09:fb:af:67:6e:2f:e5:6d:31:7b: 18:96:ad:d0:4f:90:bf:f0:69:80:38:fd:b2:db:bf:db:fe:04: c2:09:91:57:af:64:9f:e1:9c:67:a4:45:98:cd:d7:1e:47:c7: e1:69:ea:0f:98:1c:59:72:7a:78:fa:b7:69:8a:b0:e0:5a:14: de:be:0b:de:64:9c:27:95:58:f1:a6:41:9a:4b:d2:4a:60:29: b8:ab:5c:4e:1e:7c:e5:c2:7e:fe:dc:7f:51:20:c3:9f:ba:20: bd:ec:c6:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd7q9o7QaXxDP04Z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwOTEwMzAzOFoXDTI1MDEwNzExMzAzOFowLzEtMCsGA1UEAxMk ZjY2MmQ0NDUtNTY5My00OTE4LTk2YWQtNzY2ZGNlMTZjNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZQ+l6v6tbKfu+7BjF+5FlVwg5UgQ5HXxe3q bz2tcb+5mQBESJd169LBHPaYEFHhoaNV/nJIlE9CBbyLM9h6t5OSqIx+xNPVAjry /ybARxdeUj01Pn16TpGAMtM/JhcPAe9eOe1QxT0Yb3Bnq0gJ78bZTmWeUNfFbku5 6ZPfGKW8fqLfw8pU1AxrUrX7IzawvER/VZpROhlCG3anv9qfmVDN4v2u68TZ2pKh wC7zqryol39g3mwhGmErFsIi2QuAaU3fhD+RUwy++jSYwY4Dv26iFUsDvjTbGELN F+YeU6BHydrfxRMKLkd7qZZ7h82B4lTSBGknC7lzDcCvVP/yVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0fwmri3NtlF8d9N1iwLFbGGqC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTA5NjcyOTgtMWRhOC0z MmVmLTkxMjMtNGE1MGExMTQzZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA81bH/BDX00Q4BPht/i+W4xNl605+1bVRJ12alb4W5eb1uIhv8xpmeD egowgp4sIZiQd2HRl4q9J60Y2Yb/ODOgod3M2J318KZLSRcJ6TXU47vd8ICuoq1j c2g3Jsbyrh4Ir6PjSxwzvLLrj5XdjnTWfNGMBtNqnCeVdK4Rm223pGWBZb0ULBeA 8Ga+A0SH2ABse/as1j4KCfuvZ24v5W0xexiWrdBPkL/waYA4/bLbv9v+BMIJkVev ZJ/hnGekRZjN1x5Hx+Fp6g+YHFlyenj6t2mKsOBaFN6+C95knCeVWPGmQZpL0kpg KbirXE4efOXCfv7cf1Egw5+6IL3sxk0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:34 2024 by rpki-client on console-ams.rpki-client.org