$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa File: 0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa (raw, json) Hash identifier: kS2n+sfDM6SAaF0UhGoOzvmY/a276lfVvkoj2l9l2Os= Subject key identifier: BA:B7:8D:84:F1:77:8F:73:4D:E6:15:76:61:0C:51:4F:15:06:04:65 Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Certificate serial: 010D0C9F432858479AABE05A3956096661D24E80 Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 31859 IP address blocks: 208.180.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e0:5a:39:56:09:66:61:d2:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=65a7942b-7396-4dfb-9e10-2860cc8bc451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:82:38:18:68:f0:f1:24:9f:db:99:fa:69: d3:88:82:0b:21:ed:55:df:5d:f4:c7:38:7c:03:62: 82:b4:a6:1f:47:b5:69:a9:ef:fa:02:b7:48:6d:c1: 12:d8:b5:5b:16:36:df:e7:f6:e0:a2:06:0a:e2:6a: 7f:d0:2a:c8:bf:81:9e:a2:d8:0c:be:1a:c2:9d:e5: 6c:d9:a1:03:f0:a3:fe:91:4c:3f:02:bd:c8:40:23: d9:2d:d0:2d:a1:5f:9d:95:cf:59:12:38:24:01:b9: 42:bb:28:fd:ae:5f:c4:23:2c:9e:f8:7c:80:66:3d: 86:b7:9f:52:c6:60:9d:30:40:a5:b5:34:20:76:8c: fc:9d:20:96:55:43:32:9a:e1:f4:07:85:79:1a:9f: 2f:49:31:07:dc:40:71:15:57:06:07:15:f4:10:40: b8:2c:98:1e:48:6f:7b:68:fc:c8:56:37:1d:77:77: cc:bb:08:78:ab:36:69:1f:88:33:3b:19:70:f3:24: af:c0:58:02:9d:5b:dc:ea:e0:1e:f2:b4:2e:c1:1b: 49:f3:80:8e:3c:ea:4d:d9:59:32:cb:63:54:06:9e: 8a:09:82:28:78:a3:e5:f3:4b:87:35:e3:cd:e6:1c: 19:a0:33:80:f9:67:07:69:dd:58:29:01:84:2a:c9: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B7:8D:84:F1:77:8F:73:4D:E6:15:76:61:0C:51:4F:15:06:04:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/0cb9851a-d0e4-358b-8e8f-4beca40470d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl X509v3 Authority Key Identifier: keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer sbgp-ipAddrBlock: critical IPv4: 208.180.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:9d:72:ca:f3:a4:73:8d:e9:fa:36:a5:cc:78:e4:f0:1c:d1: 6e:1c:37:bc:d2:f9:68:02:ca:6c:fd:83:59:8e:6c:04:10:90: c8:df:e4:eb:f1:3f:4b:df:6f:d8:6f:b8:49:3c:8b:89:b1:12: 8e:18:d7:a1:37:65:1d:5c:d5:fb:8e:94:cf:e8:09:80:cb:67: 60:39:b1:28:dc:eb:ac:fb:09:e2:05:45:1d:68:a0:37:dc:e2: 6c:6e:32:23:17:4c:c7:d4:93:2f:37:af:0d:bf:a3:3d:6e:f7: 84:25:ce:f0:89:b2:1b:ab:e4:dc:ce:51:20:ef:51:b5:01:72: 1e:e0:72:a8:ab:53:d2:fd:2f:bd:92:33:ba:2d:1f:65:88:c7: 3f:cd:84:62:aa:b9:02:f6:40:92:b6:55:0b:cc:fe:eb:56:f2: a8:15:3f:46:9e:f7:3f:61:8f:c7:84:c8:d3:54:51:77:6c:1c: 23:71:01:72:c1:16:d2:92:1e:92:8b:12:43:f8:5a:b1:5e:7b: e2:4c:02:45:10:a1:f8:b0:f1:96:22:72:3f:5b:d4:92:cf:30: f6:13:79:bc:ca:24:ae:f3:9b:64:d9:58:dd:cb:ee:2c:9b:61: 7e:52:0e:23:75:f3:88:ea:e0:00:0b:bf:05:c5:85:24:36:4b: 43:a7:80:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+BaOVYJZmHSToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E3YWJlZmYtZmVhYy00Y2M5LTkwNzctODY2ZjBiYjFi OGNjMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NjVhNzk0MmItNzM5Ni00ZGZiLTllMTAtMjg2MGNjOGJjNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksOCOBho8PEkn9uZ+mnTiIILIe1V3130xzh8 A2KCtKYfR7Vpqe/6ArdIbcES2LVbFjbf5/bgogYK4mp/0CrIv4GeotgMvhrCneVs 2aED8KP+kUw/Ar3IQCPZLdAtoV+dlc9ZEjgkAblCuyj9rl/EIyye+HyAZj2Gt59S xmCdMECltTQgdoz8nSCWVUMymuH0B4V5Gp8vSTEH3EBxFVcGBxX0EEC4LJgeSG97 aPzIVjcdd3fMuwh4qzZpH4gzOxlw8ySvwFgCnVvc6uAe8rQuwRtJ84COPOpN2Vky y2NUBp6KCYIoeKPl80uHNePN5hwZoDOA+WcHad1YKQGEKsllMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq3jYTxd49zTeYVdmEMUU8VBgRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTdh YmVmZi1mZWFjLTRjYzktOTA3Ny04NjZmMGJiMWI4Y2MvMGNiOTg1MWEtZDBlNC0z NThiLThlOGYtNGJlY2E0MDQ3MGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2E3YWJlZmYtZmVhYy00Y2M5LTkw NzctODY2ZjBiYjFiOGNjLzdhN2FiZWZmLWZlYWMtNGNjOS05MDc3LTg2NmYwYmIx YjhjYy5jcmwwHwYDVR0jBBgwFoAU+79+OuW9smvC3UATG67xRb6sEjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTdhYmVmZi1mZWFjLTRjYzktOTA3Ny04NjZm MGJiMWI4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LRKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJadcsrzpHON6fo2pcx45PAc0W4cN7zS+WgCymz9g1mObAQQkMjf5Ovx P0vfb9hvuEk8i4mxEo4Y16E3ZR1c1fuOlM/oCYDLZ2A5sSjc66z7CeIFRR1ooDfc 4mxuMiMXTMfUky83rw2/oz1u94QlzvCJshur5NzOUSDvUbUBch7gcqirU9L9L72S M7otH2WIxz/NhGKquQL2QJK2VQvM/utW8qgVP0ae9z9hj8eEyNNUUXdsHCNxAXLB FtKSHpKLEkP4WrFee+JMAkUQofiw8ZYicj9b1JLPMPYTebzKJK7zm2TZWN3L7iyb YX5SDiN184jq4AALvwXFhSQ2S0OngJk= -----END CERTIFICATE-----Generated at Mon Nov 25 16:23:41 2024 by rpki-client on console-ams.rpki-client.org