$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa File: a0241a87-ee63-3ca4-8762-01bd022707da.roa (raw, json) Hash identifier: jPWGGRJagp+qDqN2gdi/Exb+qx6Jd2Z2KylRwK7Zyi8= Subject key identifier: 3F:85:CC:28:54:22:5D:B6:9D:29:8A:68:2B:CF:CE:76:FD:15:F2:B9 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F43285847A8A14FD580DD88FFBEC9D8C0 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 8075 IP address blocks: 208.90.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:4f:d5:80:dd:88:ff:be:c9:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=dd9d66e3-c414-48ed-be79-d63f12d17803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:e1:16:a0:0e:da:d4:67:db:60:2b:e5:04: ac:ed:23:23:d6:db:14:48:bb:55:b1:4c:f4:b5:b5: 1f:fc:51:b5:34:b7:62:42:f4:b6:ab:7c:5c:0a:d1: ba:e7:61:01:f5:b8:45:67:5c:91:45:d6:06:c8:a1: e4:91:44:99:1e:30:74:12:19:0d:4c:de:b6:5e:35: 87:c1:6c:a8:48:0d:cb:7f:00:be:d3:1e:c0:17:55: ff:31:02:bc:26:73:19:33:63:e7:e6:db:62:8e:46: 72:f2:9d:9e:aa:fb:1c:16:02:c6:06:6b:b6:ef:40: c3:b0:2f:c4:dd:b6:72:56:f2:97:6c:32:60:10:ee: 6c:48:87:51:1b:ba:24:c4:a4:62:b5:86:f1:33:25: cd:9e:e7:fe:77:a8:00:f5:aa:8e:c8:f5:e9:9d:f2: 54:7e:3d:97:31:d4:31:41:6b:e0:ab:3e:36:d2:d2: 95:b1:a4:0c:0f:86:28:2c:13:52:17:d6:25:ef:eb: c7:c8:db:41:d4:02:7a:5c:9f:bf:b5:e1:36:48:c4: b2:fb:e2:6e:64:60:ca:7f:9b:58:8c:1d:ea:78:bb: de:74:83:1d:63:48:7c:c5:2a:e8:7a:60:08:6a:68: 37:24:07:c6:09:36:c6:ae:14:aa:dc:d2:c4:25:6d: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:85:CC:28:54:22:5D:B6:9D:29:8A:68:2B:CF:CE:76:FD:15:F2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:96:3b:d6:31:56:aa:0e:86:49:6c:04:34:2b:bc:67:cc:13: a2:c5:9b:64:1c:e3:0a:0c:e2:a3:b1:c5:d7:eb:6e:70:d1:64: 02:98:05:29:d2:15:d4:73:98:c8:bf:3f:0f:56:6b:86:bf:f5: 76:01:e7:94:c7:3d:20:99:5b:9d:44:df:1d:af:72:98:e9:ff: 5b:d3:46:2b:c2:ab:4a:94:0f:80:76:57:00:22:ad:35:bb:9f: 31:fe:6b:53:01:1b:ec:29:91:5f:50:4a:c3:7f:3a:7e:f8:f2: b3:4a:66:04:8f:48:43:d3:90:92:78:db:6e:fc:6a:2b:77:60: a3:72:af:74:92:5f:40:46:67:62:b4:24:27:f1:d2:de:f6:b3: 18:d7:cd:c4:8f:7a:81:20:56:75:4f:13:08:79:dc:aa:a0:c4: ea:51:9a:81:bb:5d:7c:11:3a:e4:33:15:40:e3:b8:9b:6b:95: 78:3e:1b:1a:e4:af:58:8d:d3:35:3d:ee:61:f3:78:e9:94:4f: cb:db:ad:da:f2:ed:6a:cc:b6:ab:69:ae:dc:75:2d:e7:c5:47: ff:7d:b1:bf:b6:3f:a3:d1:4e:95:8f:cd:a8:9e:17:1b:4c:87: e2:a8:3d:1c:cd:23:d7:1c:d9:ba:e8:61:35:dc:bf:4c:3d:21: 56:bf:d8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooU/VgN2I/77J2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk ZGQ5ZDY2ZTMtYzQxNC00OGVkLWJlNzktZDYzZjEyZDE3ODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEzhFqAO2tRn22Ar5QSs7SMj1tsUSLtVsUz0 tbUf/FG1NLdiQvS2q3xcCtG652EB9bhFZ1yRRdYGyKHkkUSZHjB0EhkNTN62XjWH wWyoSA3LfwC+0x7AF1X/MQK8JnMZM2Pn5ttijkZy8p2eqvscFgLGBmu270DDsC/E 3bZyVvKXbDJgEO5sSIdRG7okxKRitYbxMyXNnuf+d6gA9aqOyPXpnfJUfj2XMdQx QWvgqz420tKVsaQMD4YoLBNSF9Yl7+vHyNtB1AJ6XJ+/teE2SMSy++JuZGDKf5tY jB3qeLvedIMdY0h8xSroemAIamg3JAfGCTbGrhSq3NLEJW3F7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+FzChUIl22nSmKaCvPznb9FfK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvYTAyNDFhODctZWU2My0z Y2E0LTg3NjItMDFiZDAyMjcwN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6WO9YxVqoOhklsBDQrvGfME6LFm2Qc4woM4qOxxdfrbnDRZAKYBSnS FdRzmMi/Pw9Wa4a/9XYB55THPSCZW51E3x2vcpjp/1vTRivCq0qUD4B2VwAirTW7 nzH+a1MBG+wpkV9QSsN/On748rNKZgSPSEPTkJJ42278ait3YKNyr3SSX0BGZ2K0 JCfx0t72sxjXzcSPeoEgVnVPEwh53KqgxOpRmoG7XXwROuQzFUDjuJtrlXg+Gxrk r1iN0zU97mHzeOmUT8vbrdry7WrMtqtprtx1LefFR/99sb+2P6PRTpWPzaieFxtM h+KoPRzNI9cc2broYTXcv0w9IVa/2Mw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:26 2024 by rpki-client on console-fra.rpki-client.org