$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa File: c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa (raw, json) Hash identifier: JjRVGJlIbmo/YgX9Fw4hUNCG/+jj6un5RaMil6iEz3I= Subject key identifier: 36:0A:05:6F:45:7C:1A:D1:62:40:69:0B:5E:5E:F7:F1:26:A8:5B:12 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285847A30BF44AD4A2CBB5FB542D80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 29968 IP address blocks: 208.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:f4:4a:d4:a2:cb:b5:fb:54:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=d0894a84-10a1-4df6-95b4-23d69cb91309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:44:09:1c:d4:1e:01:96:b9:a3:53:4b:29:e0: 73:3b:9a:a7:b0:76:a8:3f:78:70:0e:9a:40:80:65: e3:75:59:d1:f1:31:b9:30:ba:3a:1e:14:c8:3c:48: 1b:64:51:ed:86:88:9a:cd:b3:84:63:a1:69:d1:f8: 40:3f:04:47:f0:45:1f:73:6e:c6:ed:a3:69:fe:b2: 93:90:dd:28:f2:16:a2:d2:c6:09:76:83:68:d3:15: 75:e1:79:44:cd:83:ed:5d:96:a7:59:84:59:ab:3c: 56:c3:42:1b:9d:f3:03:2b:aa:80:74:86:21:ae:99: 15:eb:d0:9b:6c:04:15:5e:98:0d:8e:a9:56:24:c7: 31:92:64:96:89:30:d4:de:59:9d:f6:78:00:1b:59: aa:da:d8:fd:8d:ad:e8:87:59:cd:71:20:57:6f:c1: 4b:06:16:a4:29:6c:04:3a:02:86:71:8e:c9:67:ad: 1b:11:ce:42:09:2b:56:be:f7:a0:77:0e:a7:9f:2f: 9e:36:b4:e7:8b:81:66:2b:66:ed:f5:bc:ab:b8:db: 83:77:dc:61:fe:87:1f:40:ef:53:90:f4:d8:95:25: f5:a8:3a:64:56:0e:28:5c:19:1d:4e:43:c0:12:f4: b5:b0:c1:9d:ff:da:29:5c:55:9a:fe:f1:ee:95:d3: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:05:6F:45:7C:1A:D1:62:40:69:0B:5E:5E:F7:F1:26:A8:5B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:40:d8:1f:93:33:c5:ff:fb:b3:27:f4:0e:6c:e7:93:81:64: a4:a1:cd:47:7f:b3:8e:d2:9f:39:62:f2:ba:5e:2b:1c:6c:85: 41:ee:1a:2c:74:f6:51:d7:25:81:6b:93:d4:15:f7:b6:0a:86: a5:40:bf:7f:fe:ab:1c:a3:55:58:20:d7:6f:79:92:f4:b3:31: 66:34:97:14:bb:98:f5:69:46:12:eb:7f:eb:b3:70:b7:7b:f9: 51:fe:47:0a:a4:05:59:ed:e9:ea:1f:aa:f0:1e:f6:fe:9a:76: 04:33:d0:58:f0:2f:69:b7:02:dd:1e:c6:73:35:6e:9c:54:3f: ea:e1:c6:98:07:ad:44:d2:5f:3c:57:19:2f:46:6d:75:d4:8d: 51:87:91:87:6a:0e:04:31:21:95:25:db:3d:10:df:69:ec:60: e2:6a:ef:cd:37:21:37:60:4d:2a:39:5b:51:49:c4:8e:6b:0a: 59:b4:8b:82:50:42:18:fc:8c:68:6a:7f:81:39:f9:f2:9a:95: 35:c4:67:de:c0:69:c1:46:49:c6:51:5f:78:2c:61:f4:46:a2: 77:b6:32:e8:ed:57:7a:42:99:fb:a2:03:31:ea:7f:c7:3e:08: e0:fa:a7:07:34:05:12:26:da:66:b7:80:bb:5f:e8:a5:bc:29: 82:af:91:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/RK1KLLtftULYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDA4OTRhODQtMTBhMS00ZGY2LTk1YjQtMjNkNjljYjkxMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkQJHNQeAZa5o1NLKeBzO5qnsHaoP3hwDppA gGXjdVnR8TG5MLo6HhTIPEgbZFHthoiazbOEY6Fp0fhAPwRH8EUfc27G7aNp/rKT kN0o8hai0sYJdoNo0xV14XlEzYPtXZanWYRZqzxWw0IbnfMDK6qAdIYhrpkV69Cb bAQVXpgNjqlWJMcxkmSWiTDU3lmd9ngAG1mq2tj9ja3oh1nNcSBXb8FLBhakKWwE OgKGcY7JZ60bEc5CCStWvvegdw6nny+eNrTni4FmK2bt9byruNuDd9xh/ocfQO9T kPTYlSX1qDpkVg4oXBkdTkPAEvS1sMGd/9opXFWa/vHuldOFhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYKBW9FfBrRYkBpC15e9/EmqFsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYzc4ZTIzZTMtZDUzZS0z YjY5LTg1NDgtMWNiNDM5YTFmYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9A2B+TM8X/+7Mn9A5s55OBZKShzUd/s47Snzli8rpeKxxshUHuGix0 9lHXJYFrk9QV97YKhqVAv3/+qxyjVVgg1295kvSzMWY0lxS7mPVpRhLrf+uzcLd7 +VH+RwqkBVnt6eofqvAe9v6adgQz0FjwL2m3At0exnM1bpxUP+rhxpgHrUTSXzxX GS9GbXXUjVGHkYdqDgQxIZUl2z0Q32nsYOJq7803ITdgTSo5W1FJxI5rClm0i4JQ Qhj8jGhqf4E5+fKalTXEZ97AacFGScZRX3gsYfRGone2MujtV3pCmfuiAzHqf8c+ COD6pwc0BRIm2ma3gLtf6KW8KYKvkfU= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org