$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/39c22615-9e4b-3071-8dad-0206319460d6.roa File: 39c22615-9e4b-3071-8dad-0206319460d6.roa (raw, json) Hash identifier: sHGpE5kqPmwM0DVYYHWG91MIAA3hbUlccv02JVpgcS4= Subject key identifier: 4C:C2:14:1A:9C:9B:DA:18:18:0B:5A:9F:43:37:5D:F9:F4:F3:E3:76 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584754E0C53A6ABA78158BE38B00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/39c22615-9e4b-3071-8dad-0206319460d6.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 36837 IP address blocks: 208.27.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:c5:3a:6a:ba:78:15:8b:e3:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=3706eb8b-8e56-413f-9457-c5da5246d1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:24:37:30:4a:1b:7d:43:7b:02:0d:94:0e: 4a:9c:e8:2d:ec:6f:04:4d:54:9a:57:25:95:ba:c2: 19:ee:35:41:1c:9c:84:1f:fd:5b:2d:78:0f:c1:08: e4:a9:a2:49:ab:3f:d1:1a:ad:c5:11:08:5b:a8:2b: ba:eb:46:4e:bd:c9:b6:68:9a:12:c7:cc:df:0f:20: d1:a6:9b:c4:af:48:6f:39:e4:01:2a:4e:1a:b1:aa: eb:18:50:70:b3:af:39:75:ee:f1:a4:cf:9c:84:f1: e4:04:6b:45:d5:6d:08:21:10:c2:50:ac:e2:e2:e4: 1a:28:d1:f4:7d:d0:cd:7e:68:58:de:04:18:50:3e: 63:27:f4:d5:71:41:17:d9:83:be:b5:2d:64:e4:ef: dd:e5:cd:2f:9d:ab:26:60:81:4c:24:f3:3e:ea:f6: 27:c7:1b:3f:17:44:52:b6:34:a3:27:16:54:0e:84: 90:f8:62:76:01:aa:99:cd:a7:05:62:28:38:ce:06: 56:70:36:2c:2b:08:9d:9a:ac:a2:50:83:a1:c3:67: c9:3a:8b:e9:a1:b7:3a:ac:53:15:d8:12:04:cd:93: 40:f2:f5:62:cf:58:fa:52:07:7b:7d:e6:7a:f5:de: fb:13:49:fb:b8:27:4c:6d:a3:6f:db:82:44:65:8c: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:14:1A:9C:9B:DA:18:18:0B:5A:9F:43:37:5D:F9:F4:F3:E3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/39c22615-9e4b-3071-8dad-0206319460d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.27.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cb:55:f6:f0:fb:3c:28:2c:87:73:03:0a:cd:da:a0:94:2e: 60:e0:f7:4c:f1:18:0d:fd:7a:83:30:48:49:fb:5c:33:a7:f0: ce:0d:4a:a7:a9:99:14:44:ca:1c:24:d0:ec:f3:f6:1b:87:cf: 1c:ac:29:78:2d:6c:50:c9:22:5e:f3:79:5c:a2:8a:fa:17:bc: fd:eb:17:be:01:c2:d2:06:d7:59:4c:08:97:5c:92:e1:25:32: 46:59:d7:b0:86:1d:67:87:e9:b9:85:29:33:c5:7e:b5:1d:30: be:4f:40:10:b9:0c:ea:d5:72:13:f2:fe:37:99:59:9f:27:7f: ff:f2:e6:e7:5c:e5:ff:69:35:8f:f2:65:59:b9:2a:f3:00:c4: fd:aa:ed:20:4d:17:ba:01:d3:d2:e1:b4:67:01:b7:8f:38:82: 9c:a2:cb:04:f4:dd:94:ce:14:30:01:65:4a:11:99:61:0d:9c: f1:ae:f0:7f:8d:3b:c3:2d:00:2f:3e:e3:17:9c:ec:71:d1:91: ef:05:4a:72:69:88:2e:fe:fc:2c:e6:bc:8e:f4:6a:7b:e4:f7: 7c:eb:73:40:ff:4c:26:06:17:a1:75:f7:90:39:09:f7:76:61: e2:51:a8:49:3a:01:c8:79:73:4c:50:23:75:f7:59:0d:3a:c9: ea:d3:59:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4MU6arp4FYvjiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MzcwNmViOGItOGU1Ni00MTNmLTk0NTctYzVkYTUyNDZkMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNEkNzBKG31DewINlA5KnOgt7G8ETVSaVyWV usIZ7jVBHJyEH/1bLXgPwQjkqaJJqz/RGq3FEQhbqCu660ZOvcm2aJoSx8zfDyDR ppvEr0hvOeQBKk4asarrGFBws685de7xpM+chPHkBGtF1W0IIRDCUKzi4uQaKNH0 fdDNfmhY3gQYUD5jJ/TVcUEX2YO+tS1k5O/d5c0vnasmYIFMJPM+6vYnxxs/F0RS tjSjJxZUDoSQ+GJ2AaqZzacFYig4zgZWcDYsKwidmqyiUIOhw2fJOovpobc6rFMV 2BIEzZNA8vViz1j6Ugd7feZ69d77E0n7uCdMbaNv24JEZYzB2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzCFBqcm9oYGAtan0M3Xfn08+N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMzljMjI2MTUtOWU0Yi0z MDcxLThkYWQtMDIwNjMxOTQ2MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvLVfbw+zwoLIdzAwrN2qCULmDg90zxGA39eoMwSEn7XDOn8M4NSqep mRREyhwk0Ozz9huHzxysKXgtbFDJIl7zeVyiivoXvP3rF74BwtIG11lMCJdckuEl MkZZ17CGHWeH6bmFKTPFfrUdML5PQBC5DOrVchPy/jeZWZ8nf//y5udc5f9pNY/y ZVm5KvMAxP2q7SBNF7oB09LhtGcBt484gpyiywT03ZTOFDABZUoRmWENnPGu8H+N O8MtAC8+4xec7HHRke8FSnJpiC7+/CzmvI70anvk93zrc0D/TCYGF6F195A5Cfd2 YeJRqEk6Ach5c0xQI3X3WQ06yerTWVg= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org