$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: x4Wiv4m7Rf47iQua2Iw/7TRxpnEk0Xjvz9Xv7+P9OVU= Subject key identifier: B1:03:5C:F3:08:D3:44:D9:96:9C:D5:23:FE:D6:70:4C:A8:8C:BA:94 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F43285847F584EEB803524F137BC3C6E0 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Fri 22 Nov 2024 02:00:40 +0000 ROA not before: Fri 22 Nov 2024 02:00:40 +0000 ROA not after: Thu 20 Feb 2025 02:00:40 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:84:ee:b8:03:52:4f:13:7b:c3:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Nov 22 02:00:40 2024 GMT Not After : Feb 20 02:00:40 2025 GMT Subject: CN=c6140299-65aa-48fc-bde5-cc6ec3e67fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:8d:62:99:be:da:cd:51:05:ab:c0:c8:c0: 48:f5:86:42:07:b9:40:c5:f7:3d:0e:5a:b5:c5:6c: 28:ee:14:98:0a:e3:05:91:ac:87:9f:e7:b9:f0:ac: ec:ad:62:b4:2f:b4:f0:43:b7:e5:5d:13:ca:6e:cb: e8:af:5d:61:09:68:df:36:3c:d5:19:9d:07:fc:e2: fd:c1:77:c9:ce:45:18:dd:9a:79:ab:2e:4f:f7:ce: 7b:de:b7:9e:d6:8e:20:79:1d:cf:7b:d7:92:24:03: d6:51:b6:22:4c:14:64:c6:7d:de:eb:94:9d:e7:4f: 3e:04:06:34:bf:2d:a8:39:05:33:78:36:6f:2d:0f: 02:62:b4:7f:09:a5:b4:0c:1b:35:1c:35:37:67:39: 47:e1:23:ca:19:0b:15:c2:6a:c5:2a:10:d8:0c:e7: 1d:34:7e:2c:6c:3d:12:6e:f5:05:2d:9c:79:d6:80: d0:8b:b9:a3:71:c1:8e:6d:2b:38:6a:d9:be:d6:38: f6:1b:c7:d7:39:95:dd:21:0a:b2:cf:cf:a6:7b:3b: 29:27:d5:46:50:38:ca:91:bd:4f:ee:db:bd:b5:b5: db:bc:09:37:91:b5:41:d9:10:83:79:6b:ec:d4:fe: b9:07:a1:6c:84:36:e1:6b:50:eb:6c:59:09:ff:74: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:03:5C:F3:08:D3:44:D9:96:9C:D5:23:FE:D6:70:4C:A8:8C:BA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7c:2c:44:8a:d3:4b:43:78:c7:1d:b3:96:d9:d9:fa:de:2d: 75:a2:c9:e3:25:29:66:10:52:fb:52:c4:17:e3:28:48:0a:84: b0:b6:66:e2:ff:5e:1c:81:c9:1d:41:a0:c9:e0:a2:01:e6:8b: 0a:32:ab:42:8c:d8:df:83:77:71:d2:ae:ff:e8:76:13:10:58: 5a:6b:e3:3d:95:35:1f:e3:19:8b:bb:74:68:bd:08:a5:7b:d9: cf:9b:d6:5b:2a:95:02:82:23:fe:8b:b5:04:e6:1c:73:4b:53: 0a:7a:75:e2:bc:17:c1:92:47:91:5c:1f:de:e5:39:be:ac:8c: 78:e3:b0:d0:b8:f4:68:84:ba:89:b6:a1:7f:56:33:0e:85:95: a5:3b:53:88:49:ef:57:fe:de:10:7a:87:d2:c6:87:5a:28:5a: 4a:5f:b6:00:1f:ac:d9:2f:34:f5:70:46:2b:eb:ae:e4:e7:88: 95:58:31:99:73:f8:20:06:1e:66:24:55:32:7e:72:ef:ab:86: a7:38:f2:f5:95:e7:00:da:96:52:85:33:36:ed:be:73:1f:6a: ac:b4:f9:8d:6d:91:6c:bb:bd:fe:f4:a7:15:14:a5:01:84:6c: c0:ef:d2:e9:a2:8a:2a:42:28:7e:22:bc:83:24:2d:7d:93:10: 86:61:fc:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hO64A1JPE3vDxuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk YzYxNDAyOTktNjVhYS00OGZjLWJkZTUtY2M2ZWMzZTY3ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiamNYpm+2s1RBavAyMBI9YZCB7lAxfc9Dlq1 xWwo7hSYCuMFkayHn+e58KzsrWK0L7TwQ7flXRPKbsvor11hCWjfNjzVGZ0H/OL9 wXfJzkUY3Zp5qy5P98573ree1o4geR3Pe9eSJAPWUbYiTBRkxn3e65Sd508+BAY0 vy2oOQUzeDZvLQ8CYrR/CaW0DBs1HDU3ZzlH4SPKGQsVwmrFKhDYDOcdNH4sbD0S bvUFLZx51oDQi7mjccGObSs4atm+1jj2G8fXOZXdIQqyz8+mezspJ9VGUDjKkb1P 7tu9tbXbvAk3kbVB2RCDeWvs1P65B6FshDbha1DrbFkJ/3RDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEDXPMI00TZlpzVI/7WcEyojLqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl8LESK00tDeMcds5bZ2freLXWiyeMlKWYQUvtSxBfjKEgKhLC2ZuL/ XhyByR1BoMngogHmiwoyq0KM2N+Dd3HSrv/odhMQWFpr4z2VNR/jGYu7dGi9CKV7 2c+b1lsqlQKCI/6LtQTmHHNLUwp6deK8F8GSR5FcH97lOb6sjHjjsNC49GiEuom2 oX9WMw6FlaU7U4hJ71f+3hB6h9LGh1ooWkpftgAfrNkvNPVwRivrruTniJVYMZlz +CAGHmYkVTJ+cu+rhqc48vWV5wDallKFMzbtvnMfaqy0+Y1tkWy7vf70pxUUpQGE bMDv0umiiipCKH4ivIMkLX2TEIZh/Aw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:21 2024 by rpki-client on console-ams.rpki-client.org