$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa File: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json) Hash identifier: TK1XDMdLmnS3zStbB5C/THgY4IjvExGgD0NIHgl9Uyg= Subject key identifier: 71:6C:63:7A:62:B1:83:5A:D1:B3:E0:99:E0:8A:AE:EA:69:FC:15:B8 Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F43285847600B8BD5F18497B3DFAA5B80 Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 395019 IP address blocks: 208.76.208.0/22 maxlen: 22 2602:fbfd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:8b:d5:f1:84:97:b3:df:aa:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=b743149a-42f6-4629-bf5d-28e732f81f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:5f:1b:9e:92:8f:5a:f0:30:2a:ba:2d:62: 6f:86:d3:38:03:2b:ee:51:a1:8b:02:26:51:51:d4: 7a:2c:36:a3:a0:37:d4:96:9b:77:39:8c:f8:dc:85: 5e:4a:9f:c4:e4:26:15:59:51:dd:c1:2c:60:2b:04: 27:d1:1c:16:3c:15:89:14:16:4f:c9:91:b8:f3:ec: e5:e0:f8:c0:b2:46:77:4d:2f:d4:da:ab:45:77:4b: 94:db:e3:ca:12:03:a0:30:52:e2:41:82:1f:ba:38: 33:0e:d7:9a:6f:44:46:41:93:78:dd:0b:bd:9a:97: 2f:2b:eb:f9:70:75:47:99:62:0c:ae:11:24:89:ca: ea:03:db:54:e9:2a:12:36:0c:bc:6d:a8:b2:ae:61: 21:ab:9a:3f:ac:27:25:ef:50:0c:13:b6:c0:8d:15: df:66:d8:e4:4e:61:8e:de:80:05:15:26:9c:9e:cd: 2c:16:e1:4d:2d:49:ef:f6:ca:43:5e:27:51:3a:0e: d5:1b:c7:ce:ac:db:05:86:fb:8e:e5:87:40:0a:42: 2a:21:d1:ed:97:8e:7a:a1:da:18:16:e5:f8:a1:26: 61:cb:49:d4:42:c9:1c:ae:3c:73:8c:fa:c7:f4:c8: f2:fd:ca:4a:93:96:61:93:a5:db:f6:f1:2e:17:50: 5d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6C:63:7A:62:B1:83:5A:D1:B3:E0:99:E0:8A:AE:EA:69:FC:15:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: 208.76.208.0/22 IPv6: 2602:fbfd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ff:99:22:1f:e9:4d:d0:80:4c:7a:cd:ce:ad:6d:af:22:ce: 93:c5:d7:5c:41:f5:41:ef:96:f7:e4:a0:d0:15:27:5f:15:5c: 64:8f:91:1c:b8:1a:bf:f8:8b:24:a9:ad:45:4c:04:93:3d:56: 0c:3f:cf:46:fd:99:2c:f9:45:41:7a:1b:d4:c4:73:12:c2:3a: 67:03:e9:51:26:55:f0:8b:aa:0e:07:c5:19:5e:0f:c2:9f:1f: a8:6c:30:a2:88:5b:14:d8:89:85:c2:14:28:18:0c:4f:8d:15: 02:61:f6:af:67:7a:0f:1c:ea:c6:bf:b8:31:1e:c3:45:05:2d: e9:7a:94:dd:db:74:7a:3d:62:3b:30:f8:e9:3b:60:23:46:7b: 2f:b9:33:d3:68:0d:f0:35:88:7a:39:e7:3c:a4:a6:b5:d0:f7: b5:ce:a7:8c:80:72:14:34:ad:cd:82:7a:84:bc:51:68:e6:e3: f6:8f:bd:b2:61:97:18:81:89:10:e2:42:9c:24:99:64:15:7c: 73:27:57:36:f4:1f:3b:1f:74:0d:49:a3:06:96:3a:f9:d1:72: f0:1a:5b:88:d9:e1:38:05:18:9b:d1:88:e0:fe:38:e2:0f:8a: 8a:5a:a2:14:1b:81:d6:36:b8:a2:2d:ee:10:d4:99:e8:8f:89: e8:26:7b:61 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdgC4vV8YSXs9+qW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Yjc0MzE0OWEtNDJmNi00NjI5LWJmNWQtMjhlNzMyZjgxZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl65fG56Sj1rwMCq6LWJvhtM4AyvuUaGLAiZR UdR6LDajoDfUlpt3OYz43IVeSp/E5CYVWVHdwSxgKwQn0RwWPBWJFBZPyZG48+zl 4PjAskZ3TS/U2qtFd0uU2+PKEgOgMFLiQYIfujgzDteab0RGQZN43Qu9mpcvK+v5 cHVHmWIMrhEkicrqA9tU6SoSNgy8baiyrmEhq5o/rCcl71AME7bAjRXfZtjkTmGO 3oAFFSacns0sFuFNLUnv9spDXidROg7VG8fOrNsFhvuO5YdACkIqIdHtl456odoY FuX4oSZhy0nUQskcrjxzjPrH9Mjy/cpKk5Zhk6Xb9vEuF1BdiQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHFsY3pisYNa0bPgmeCKrupp/BW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvMDJkNGM4YzEtODExYy0z MDFmLWFlNDctNjFjNmM2MjAzNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0EzQMA4E AgACMAgDBgQmAvv9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD/5kiH+lN0IBMes3OrW2vIs6TxddcQfVB 75b35KDQFSdfFVxkj5EcuBq/+Iskqa1FTASTPVYMP89G/Zks+UVBehvUxHMSwjpn A+lRJlXwi6oOB8UZXg/Cnx+obDCiiFsU2ImFwhQoGAxPjRUCYfavZ3oPHOrGv7gx HsNFBS3pepTd23R6PWI7MPjpO2AjRnsvuTPTaA3wNYh6Oec8pKa10Pe1zqeMgHIU NK3NgnqEvFFo5uP2j72yYZcYgYkQ4kKcJJlkFXxzJ1c29B87H3QNSaMGljr50XLw GluI2eE4BRib0Yjg/jjiD4qKWqIUG4HWNriiLe4Q1Jnoj4noJnth -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:18 2024 by rpki-client on console-ams.rpki-client.org