$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json) Hash identifier: mkrE9+TQHCadzGs4RePrjtry/wF9yd54nyzd+EZ1dOo= Subject key identifier: 96:51:AA:AE:F7:00:3C:EA:63:94:0B:03:6F:E2:AD:75:88:E8:14:25 Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F43285847537B5ADDA28042D0324D63C0 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 33368 IP address blocks: 208.86.24.0/22 maxlen: 22 2620:0:1a20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:5a:dd:a2:80:42:d0:32:4d:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=719dc4d4-db55-4147-9b82-c877adbd9bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:81:22:a7:ea:8f:dd:72:37:fc:02:9e:79: 64:cc:c6:53:c0:22:b6:57:4e:52:c0:14:36:97:c3: 20:59:25:b1:91:31:44:06:66:95:a6:ea:3d:5b:7c: 19:43:71:98:01:51:a9:e0:dc:2a:d9:72:cc:a5:ef: 85:9e:5d:02:7f:27:4f:d3:5b:e4:33:cd:44:94:a7: 51:19:e3:b9:42:df:d0:a3:ff:bc:65:8a:a3:69:67: 93:1d:4b:9a:ef:84:ff:25:14:47:e6:29:14:53:27: a5:8c:4d:a6:d1:5e:e9:b9:5b:b4:90:68:99:2f:e5: 78:cd:52:49:61:b4:e3:20:ae:ba:dd:34:c5:ef:af: d7:8f:0c:6a:8e:79:ee:fd:5e:98:0b:ab:cf:5d:3e: 3e:40:35:f3:ba:07:6b:e1:ea:ce:c1:81:90:2c:2c: d1:ca:b2:9d:49:dc:61:8c:cd:b8:59:bf:0d:a8:11: ec:c3:15:fe:b2:b4:6e:63:5f:ad:6a:b7:cc:ed:36: bb:0f:08:8d:b1:fa:fc:4d:4d:04:93:c0:51:5a:53: 1c:c8:7b:60:6c:0d:2e:00:83:ec:e1:aa:e3:8b:42: 51:8b:e2:56:21:b0:f2:b0:44:d6:19:c4:a9:e0:ce: d0:70:7d:4c:aa:a5:76:15:c2:09:1a:0c:8c:19:ba: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:51:AA:AE:F7:00:3C:EA:63:94:0B:03:6F:E2:AD:75:88:E8:14:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: 208.86.24.0/22 IPv6: 2620:0:1a20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2d:e3:fc:30:aa:73:0f:3b:ac:49:e5:d9:af:d6:c8:de:7d: 6f:4b:04:12:39:58:ad:d5:eb:d2:8b:a4:b3:68:5d:dc:dd:c2: 99:c4:da:af:a4:18:11:4d:fa:2c:c9:b0:9e:74:af:05:ae:96: 86:7e:b7:b5:07:c0:67:17:7d:b2:2c:dd:b9:d4:35:c9:f7:de: 32:45:7e:10:b7:e3:f0:56:db:8d:6f:0f:04:aa:e8:dd:4b:40: 8e:17:66:a4:43:1c:a1:35:aa:23:42:8b:9b:3d:fc:e1:59:57: 21:25:3a:1e:29:e8:0c:62:93:4e:bd:41:d0:9d:67:26:22:46: 64:1e:60:60:82:86:0e:ff:a9:2b:b3:89:7f:f2:cd:df:d3:ba: 26:98:db:d6:eb:a1:0d:d0:79:58:b7:45:2f:f1:0b:4a:a0:ac: 94:fe:8d:4b:2f:c4:59:e1:4e:38:9f:eb:b1:36:73:20:74:18: d4:1a:97:82:8a:f2:5c:8a:03:92:8e:b7:51:a7:a9:4e:93:f8: 49:45:de:59:35:7a:40:d6:4a:53:c8:f7:6b:b3:e3:bb:2e:ee: 7f:31:81:5b:a3:39:5c:e7:2d:a5:45:8b:68:37:02:9d:77:7d: a5:42:cc:84:58:d6:ab:c4:5f:1a:6a:29:7b:c8:7a:bc:6a:7f: 1a:06:6e:14 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEdTe1rdooBC0DJNY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk NzE5ZGM0ZDQtZGI1NS00MTQ3LTliODItYzg3N2FkYmQ5YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyiBIqfqj91yN/wCnnlkzMZTwCK2V05SwBQ2 l8MgWSWxkTFEBmaVpuo9W3wZQ3GYAVGp4Nwq2XLMpe+Fnl0CfydP01vkM81ElKdR GeO5Qt/Qo/+8ZYqjaWeTHUua74T/JRRH5ikUUyeljE2m0V7puVu0kGiZL+V4zVJJ YbTjIK663TTF76/Xjwxqjnnu/V6YC6vPXT4+QDXzugdr4erOwYGQLCzRyrKdSdxh jM24Wb8NqBHswxX+srRuY1+tarfM7Ta7DwiNsfr8TU0Ek8BRWlMcyHtgbA0uAIPs 4arji0JRi+JWIbDysETWGcSp4M7QcH1MqqV2FcIJGgyMGbrEQwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJZRqq73ADzqY5QLA2/irXWI6BQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvZWEwYjVkMWYtYTUwNS0z ODIxLWE2N2MtYjI5NmQwNzFiYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC0FYYMA8E AgACMAkDBwAmIAAAGiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEC3j/DCqcw87rEnl2a/WyN59b0sEEjlY rdXr0ouks2hd3N3CmcTar6QYEU36LMmwnnSvBa6Whn63tQfAZxd9sizdudQ1yffe MkV+ELfj8FbbjW8PBKro3UtAjhdmpEMcoTWqI0KLmz384VlXISU6HinoDGKTTr1B 0J1nJiJGZB5gYIKGDv+pK7OJf/LN39O6Jpjb1uuhDdB5WLdFL/ELSqCslP6NSy/E WeFOOJ/rsTZzIHQY1BqXgoryXIoDko63UaepTpP4SUXeWTV6QNZKU8j3a7Pjuy7u fzGBW6M5XOctpUWLaDcCnXd9pULMhFjWq8RfGmope8h6vGp/GgZuFA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:48 2024 by rpki-client on console-ams.rpki-client.org