$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa File: 297bb316-79a6-3af7-a3db-ad1e4f19895e.roa (raw, json) Hash identifier: bEdwc3CYDwAJl2Elq2ygdAMgRAZu06rLtpsnHfTJI4w= Subject key identifier: 35:EF:B8:D7:F7:4E:3D:42:45:8D:9F:FF:1D:83:F7:82:48:DA:A0:CF Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285847A30BF48789E772953F921E00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 29968 IP address blocks: 208.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:f4:87:89:e7:72:95:3f:92:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=238a28c5-4ad4-4460-940e-f87ec34251a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:3b:3b:3a:47:b3:aa:b0:06:88:d4:17:e6: c0:21:59:32:07:88:ee:74:2b:e6:f1:24:7f:0a:ad: 52:94:76:c0:63:14:7f:e0:4f:11:7e:4e:81:64:cb: 62:d9:cf:e4:d5:82:d3:e3:48:f0:5b:53:2b:84:27: 3f:d6:9d:53:1b:f7:7b:e3:0a:8e:41:02:d4:02:f9: 7a:dd:f5:d2:fe:d9:8a:9b:c2:6e:a2:cf:57:a5:e9: 4d:4f:50:3f:c6:94:9b:d8:e8:d2:12:fc:58:0a:a6: 2f:d2:05:ca:d3:ad:8d:21:42:7b:33:53:6f:d6:06: a1:41:cb:6d:b3:f8:ed:55:f8:49:f3:4a:d0:b3:e2: 6a:2c:5d:c7:48:9c:fd:f7:e8:44:c1:65:59:85:ed: 7d:5d:58:52:4d:08:c2:6d:86:7b:2f:8a:4b:f8:83: 6b:9d:2a:11:b9:0b:81:67:e7:3d:ec:26:eb:24:a9: 1f:50:5c:8c:b4:cf:a2:4a:20:19:a8:29:b8:aa:c5: ca:ab:79:ed:88:fc:c8:47:d2:bb:84:e1:07:3f:68: e8:9e:83:18:17:b4:04:4b:40:a4:5f:aa:39:ca:6b: c7:4f:ea:56:e7:00:a3:2f:79:b8:fc:3a:6b:2e:bf: bc:19:7f:e1:0f:cd:6a:3d:11:1c:d8:d3:b2:0e:34: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:B8:D7:F7:4E:3D:42:45:8D:9F:FF:1D:83:F7:82:48:DA:A0:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c5:48:4f:e4:34:aa:72:b4:4e:af:01:33:79:d4:dd:05:d2: 34:22:bf:9f:ca:a6:d7:d3:6e:e4:60:85:53:22:cf:6a:de:57: ba:ab:4c:75:08:0b:83:e9:6f:33:89:07:92:64:37:7c:ea:46: ae:6c:0b:f3:bd:0b:71:9d:cb:68:b0:7b:44:f6:41:8f:3c:f8: 1a:6b:be:43:ba:31:0b:6e:3e:74:8b:a6:34:1c:57:85:46:49: 41:d6:54:37:2b:e7:e0:32:ed:ec:3f:1a:87:fb:e1:1a:24:bb: 41:63:65:d8:72:c8:a8:36:b5:57:bc:2e:5f:f0:ef:94:4c:48: 38:96:57:2c:3f:55:28:2b:d2:6b:c0:ed:51:54:e5:a3:4e:c2: 48:11:95:c2:34:a8:0a:31:eb:ce:ac:fa:9f:a9:01:25:e6:aa: 6e:7c:06:c6:ed:58:94:ef:5f:72:92:c8:9a:3b:6b:5f:44:3c: 67:88:3d:7e:46:0e:56:85:1d:a3:44:89:85:0f:88:52:42:64: ee:16:01:0e:b4:d5:bb:c6:8e:a6:c4:57:17:1e:e4:70:9a:01: df:48:2a:a0:e1:38:a9:7c:4b:95:b3:4f:4b:bb:fd:b0:48:95: de:85:ad:a6:27:c1:f3:60:26:9f:e1:67:0f:69:23:fd:4c:0f: 40:e1:cc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/SHiedylT+SHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk MjM4YTI4YzUtNGFkNC00NDYwLTk0MGUtZjg3ZWMzNDI1MWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjs7OzpHs6qwBojUF+bAIVkyB4judCvm8SR/ Cq1SlHbAYxR/4E8Rfk6BZMti2c/k1YLT40jwW1MrhCc/1p1TG/d74wqOQQLUAvl6 3fXS/tmKm8Juos9XpelNT1A/xpSb2OjSEvxYCqYv0gXK062NIUJ7M1Nv1gahQctt s/jtVfhJ80rQs+JqLF3HSJz99+hEwWVZhe19XVhSTQjCbYZ7L4pL+INrnSoRuQuB Z+c97CbrJKkfUFyMtM+iSiAZqCm4qsXKq3ntiPzIR9K7hOEHP2jonoMYF7QES0Ck X6o5ymvHT+pW5wCjL3m4/DprLr+8GX/hD81qPREc2NOyDjSNcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXvuNf3Tj1CRY2f/x2D94JI2qDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMjk3YmIzMTYtNzlhNi0z YWY3LWEzZGItYWQxZTRmMTk4OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLFSE/kNKpytE6vATN51N0F0jQiv5/KptfTbuRghVMiz2reV7qrTHUI C4PpbzOJB5JkN3zqRq5sC/O9C3Gdy2iwe0T2QY88+BprvkO6MQtuPnSLpjQcV4VG SUHWVDcr5+Ay7ew/Gof74Roku0FjZdhyyKg2tVe8Ll/w75RMSDiWVyw/VSgr0mvA 7VFU5aNOwkgRlcI0qAox686s+p+pASXmqm58BsbtWJTvX3KSyJo7a19EPGeIPX5G DlaFHaNEiYUPiFJCZO4WAQ601bvGjqbEVxce5HCaAd9IKqDhOKl8S5WzT0u7/bBI ld6FraYnwfNgJp/hZw9pI/1MD0DhzLQ= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org