$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/9d72d666-06a7-33ff-9ca9-ff0241a12240.roa File: 9d72d666-06a7-33ff-9ca9-ff0241a12240.roa (raw, json) Hash identifier: dbb+POuNNzqUhJxKvtRfI7cipWpcjaPyRQb6dmWuXjE= Subject key identifier: E7:FE:94:53:AA:02:A8:31:11:44:DF:C0:AA:1E:11:E4:79:11:35:FB Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584754E0C8CE04D59AD2B5EC2240 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/9d72d666-06a7-33ff-9ca9-ff0241a12240.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 31755 IP address blocks: 208.4.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:c8:ce:04:d5:9a:d2:b5:ec:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=526f26d9-98bb-4201-bfe1-87f292b27777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:80:3f:39:94:63:2b:f5:6b:c4:66:05:5f: ce:22:0e:9c:f8:61:a6:0f:27:35:c4:c8:3b:75:93: 82:6c:67:eb:6a:fc:f5:60:9e:f4:7f:5c:2a:e0:38: ff:c6:52:2a:bf:6c:ca:da:49:70:2a:57:ab:32:2a: 51:a5:9d:87:cf:10:a0:72:59:90:4f:6b:49:4f:aa: e4:a9:db:2f:c7:43:df:be:28:be:de:bb:a6:24:e0: 28:f6:61:53:3b:a8:2a:c6:d3:73:24:6d:bf:ac:28: d9:19:57:8b:eb:43:29:e1:b1:c6:33:01:11:e8:8b: 2a:c1:a5:49:4d:73:d5:e7:d8:62:58:ef:db:eb:47: 7e:3e:4e:e7:64:55:82:0a:f5:d3:a1:79:26:20:63: ce:69:06:6e:4d:6a:50:ec:79:d2:69:60:b1:4c:55: 62:5f:e2:1b:37:bb:ed:8e:78:44:e9:f0:9f:59:b8: 45:eb:28:61:7d:c3:2b:d7:51:fe:76:a5:bf:7f:e4: 6f:55:c5:8c:02:09:79:53:e8:7a:cf:87:f8:1b:1c: e3:0b:e7:e6:f2:33:3e:6a:dc:16:b8:72:31:f7:8a: 02:f5:b6:8b:df:4e:78:9f:da:53:43:8c:20:5c:24: 2c:c9:7a:83:eb:05:39:dc:7b:d7:61:5b:31:b6:39: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FE:94:53:AA:02:A8:31:11:44:DF:C0:AA:1E:11:E4:79:11:35:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/9d72d666-06a7-33ff-9ca9-ff0241a12240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.4.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:95:81:78:03:18:1f:7d:fa:cd:4f:b5:cf:1e:a8:c9:64:bf: 1c:a9:e3:c6:a0:2b:a7:a5:79:84:a0:68:ab:72:fb:4a:3f:8f: bb:8b:d4:38:02:e9:31:40:91:fa:e3:48:98:4f:2f:c6:8a:c8: 54:6c:8d:98:ab:b7:1e:00:04:3e:84:63:a8:1c:09:5f:21:62: bc:ba:1a:16:7c:75:63:04:64:1d:81:72:90:a3:c9:57:d9:58: 64:4d:f7:0c:cd:c0:5a:86:60:75:a8:9c:8d:36:e1:dd:ef:6a: fd:db:f1:4b:89:7c:37:bd:c8:c7:61:f4:18:49:89:a0:8f:35: a7:58:15:eb:34:a7:ab:48:ca:bb:59:a5:b1:6c:14:23:81:ca: 77:ca:ad:69:dc:97:4d:7c:30:72:3d:fb:69:f6:67:7b:3c:1c: da:ed:ca:6f:a4:95:0c:c1:58:72:37:fe:c0:52:7d:4f:87:71: 1a:36:54:0a:7e:72:8c:32:b4:d5:32:c2:70:2a:11:68:3f:28: 4f:8b:9b:9d:a5:09:9f:ff:2f:16:2c:0d:da:51:48:c9:e7:72: d1:5a:d0:15:36:d9:08:2d:cd:6f:35:0a:59:a0:32:b2:9a:82: ea:1f:c6:89:82:8e:6a:0b:5b:23:1e:6d:9b:d1:da:2b:20:92: 6a:7d:f6:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4MjOBNWa0rXsIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NTI2ZjI2ZDktOThiYi00MjAxLWJmZTEtODdmMjkyYjI3Nzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGWAPzmUYyv1a8RmBV/OIg6c+GGmDyc1xMg7 dZOCbGfravz1YJ70f1wq4Dj/xlIqv2zK2klwKlerMipRpZ2HzxCgclmQT2tJT6rk qdsvx0Pfvii+3rumJOAo9mFTO6gqxtNzJG2/rCjZGVeL60Mp4bHGMwER6IsqwaVJ TXPV59hiWO/b60d+Pk7nZFWCCvXToXkmIGPOaQZuTWpQ7HnSaWCxTFViX+IbN7vt jnhE6fCfWbhF6yhhfcMr11H+dqW/f+RvVcWMAgl5U+h6z4f4GxzjC+fm8jM+atwW uHIx94oC9baL3054n9pTQ4wgXCQsyXqD6wU53HvXYVsxtjlGcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf+lFOqAqgxEUTfwKoeEeR5ETX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOWQ3MmQ2NjYtMDZhNy0z M2ZmLTljYTktZmYwMjQxYTEyMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0AQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKVgXgDGB99+s1Ptc8eqMlkvxyp48agK6eleYSgaKty+0o/j7uL1DgC 6TFAkfrjSJhPL8aKyFRsjZirtx4ABD6EY6gcCV8hYry6GhZ8dWMEZB2BcpCjyVfZ WGRN9wzNwFqGYHWonI024d3vav3b8UuJfDe9yMdh9BhJiaCPNadYFes0p6tIyrtZ pbFsFCOBynfKrWncl018MHI9+2n2Z3s8HNrtym+klQzBWHI3/sBSfU+HcRo2VAp+ cowytNUywnAqEWg/KE+Lm52lCZ//LxYsDdpRSMnnctFa0BU22QgtzW81ClmgMrKa guofxomCjmoLWyMebZvR2isgkmp99j8= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org