$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa File: acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa (raw, json) Hash identifier: MdHCFyGwa8EPtPWRW3eo2CcqI1PEFUEdGgxUjs1WON4= Subject key identifier: 37:E5:9D:6A:1E:DB:2C:0A:B5:D5:A9:EE:31:74:02:73:D3:F9:00:4E Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285847A30BF471DB36FDA0E4A01A00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 13536 IP address blocks: 208.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:f4:71:db:36:fd:a0:e4:a0:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=c87e34d6-df4b-4415-a596-fbff6b6ede31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:21:48:e2:48:1b:01:10:6e:51:75:de:4a: 18:2b:c4:b3:10:9f:bb:99:a0:32:b8:81:4e:13:7e: 0a:b5:26:20:27:e5:2d:e0:d2:75:f0:48:dc:54:c5: 84:ec:9a:ea:3e:d3:15:72:49:9b:75:49:85:da:87: 35:4f:30:4d:9c:cd:41:13:d4:ce:11:e2:b9:aa:8b: b1:8a:7f:b9:92:ab:46:fe:90:73:17:0e:fd:35:3a: 89:9d:bf:ef:41:34:1f:3d:71:63:97:6c:21:75:5d: fe:c4:19:ef:8e:51:14:a2:e9:4e:b9:9f:40:5e:7f: 51:89:2a:2c:f2:ec:51:ff:60:82:66:82:30:36:b6: 09:37:5f:82:4c:58:75:e3:98:0a:ea:69:ab:42:cf: 91:e5:d6:f4:fb:c0:28:a1:10:95:a5:e4:88:85:a3: 5a:f4:e9:e7:2a:09:b2:ea:93:4e:c6:83:19:9f:fd: 56:e8:98:90:18:13:a4:19:c9:fb:d4:e4:65:c6:1f: 53:fd:52:e4:0e:15:63:e4:fd:27:15:5d:b7:16:81: a8:12:10:57:78:43:f6:25:41:e2:78:17:de:53:3b: df:b8:22:1a:9f:fe:1d:4f:86:89:0e:e3:12:90:7d: 04:7f:a6:bd:89:d8:89:68:f6:b1:86:c7:0c:9b:3b: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:9D:6A:1E:DB:2C:0A:B5:D5:A9:EE:31:74:02:73:D3:F9:00:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b9:07:41:a4:92:5f:c0:fa:5e:63:2b:d8:0a:09:e2:e0:2e: 8f:7d:49:96:7d:a7:5f:87:4b:c9:d2:dd:75:09:f8:01:c3:8a: 56:46:14:91:36:48:75:17:3c:3c:c2:cc:7e:0f:ff:1a:d2:6a: a3:b7:8d:21:63:17:68:2d:0d:5d:50:7d:05:bf:bf:96:a8:40: a2:13:f5:bf:d0:19:f3:ab:1d:1a:35:7a:f9:dc:0c:8e:7b:43: 9e:08:08:30:60:2f:53:5b:be:26:27:98:35:66:b2:87:7c:29: fa:ef:cc:ea:1d:d8:74:72:de:fb:5e:5a:1b:a9:3e:2c:56:80: 9c:06:1d:9f:32:77:26:1d:e5:c5:27:c9:20:72:41:9f:8b:cb: d9:32:7c:f5:0c:33:15:6b:6e:14:dc:30:77:49:5d:a7:09:9f: 70:a1:04:9c:83:c3:ee:81:75:78:73:3d:93:12:b1:65:48:b8: 9b:e9:60:a6:0d:d3:75:19:ec:a4:86:b2:ee:9a:2c:b3:dc:13: 16:54:c6:79:34:99:da:fb:5f:4d:39:89:3d:9b:a8:23:d4:46: 2c:6d:60:8b:c4:b7:45:7d:e1:73:6f:db:aa:b3:4a:b4:ea:cd: 70:f8:e7:1c:32:ed:3e:b3:80:d4:df:89:97:6b:f0:78:12:2d: 74:50:97:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/Rx2zb9oOSgGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk Yzg3ZTM0ZDYtZGY0Yi00NDE1LWE1OTYtZmJmZjZiNmVkZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGAhSOJIGwEQblF13koYK8SzEJ+7maAyuIFO E34KtSYgJ+Ut4NJ18EjcVMWE7JrqPtMVckmbdUmF2oc1TzBNnM1BE9TOEeK5qoux in+5kqtG/pBzFw79NTqJnb/vQTQfPXFjl2whdV3+xBnvjlEUoulOuZ9AXn9RiSos 8uxR/2CCZoIwNrYJN1+CTFh145gK6mmrQs+R5db0+8AooRCVpeSIhaNa9OnnKgmy 6pNOxoMZn/1W6JiQGBOkGcn71ORlxh9T/VLkDhVj5P0nFV23FoGoEhBXeEP2JUHi eBfeUzvfuCIan/4dT4aJDuMSkH0Ef6a9idiJaPaxhscMmzsCDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDflnWoe2ywKtdWp7jF0AnPT+QBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYWNmMDA3MGEtYmNmMS0z MWY3LWI5YjUtMDNlNmI0MGY0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS5B0Gkkl/A+l5jK9gKCeLgLo99SZZ9p1+HS8nS3XUJ+AHDilZGFJE2 SHUXPDzCzH4P/xrSaqO3jSFjF2gtDV1QfQW/v5aoQKIT9b/QGfOrHRo1evncDI57 Q54ICDBgL1NbviYnmDVmsod8KfrvzOod2HRy3vteWhupPixWgJwGHZ8ydyYd5cUn ySByQZ+Ly9kyfPUMMxVrbhTcMHdJXacJn3ChBJyDw+6BdXhzPZMSsWVIuJvpYKYN 03UZ7KSGsu6aLLPcExZUxnk0mdr7X005iT2bqCPURixtYIvEt0V94XNv26qzSrTq zXD45xwy7T6zgNTfiZdr8HgSLXRQl58= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org