$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/01c04108-2084-3163-a90d-4fc763d9b1d1.roa File: 01c04108-2084-3163-a90d-4fc763d9b1d1.roa (raw, json) Hash identifier: kZb9pTMwahJH95aLPrjmUB/zyTTbNS+WTgRfDrBx1AY= Subject key identifier: C6:05:34:D7:7C:3A:6A:0C:34:90:EE:68:6B:C4:45:08:A8:0F:DF:DF Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584776974C6971EE25C77BDEB480 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/01c04108-2084-3163-a90d-4fc763d9b1d1.roa Signing time: Mon 07 Oct 2024 14:50:11 +0000 ROA not before: Mon 07 Oct 2024 14:50:11 +0000 ROA not after: Sun 05 Jan 2025 15:50:11 +0000 asID: 398210 IP address blocks: 207.211.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:97:4c:69:71:ee:25:c7:7b:de:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:50:11 2024 GMT Not After : Jan 5 15:50:11 2025 GMT Subject: CN=934ef202-51fc-4017-93d1-65f7f2c99b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:ab:3e:89:5f:55:33:8a:c8:ff:b3:b0:03: ce:63:b9:74:2d:8f:7b:07:2b:bb:8b:b9:ae:71:d2: 75:06:43:91:f4:8d:b9:ba:18:e9:39:66:5e:ed:59: 24:f4:cc:bd:ee:3d:b5:54:f8:23:e6:76:7a:5b:80: 80:4d:28:f0:aa:22:78:f6:3e:c3:6e:36:53:ca:97: 99:39:0c:73:ed:77:87:b2:58:12:3f:f7:bc:c0:3e: 6c:17:58:66:73:0b:6f:27:74:2f:d9:1f:b0:e7:12: 09:56:46:f2:28:10:c1:f3:5d:96:ce:66:f6:8e:1e: df:79:b0:ab:e0:06:d5:13:6d:78:a0:db:5a:ed:a6: c9:fd:51:23:32:69:66:2e:27:c7:ce:24:05:d2:29: 47:7e:c1:7a:c8:0d:75:e0:22:08:ed:35:ce:b6:e4: 33:a8:61:00:47:18:63:36:ea:f6:0f:36:b4:57:91: e6:7f:09:85:c0:08:cd:f8:92:54:92:84:a2:a1:ef: e4:40:c4:43:05:e6:14:cf:4d:d3:3b:52:c4:b2:70: 8d:70:6f:1c:61:94:85:45:d2:e9:d6:a3:0d:77:4a: dd:19:3d:e9:e4:94:1a:c5:9a:2f:82:92:00:9e:cb: 68:aa:2f:5f:15:21:d0:be:08:bc:7c:27:bc:c4:17: 57:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:05:34:D7:7C:3A:6A:0C:34:90:EE:68:6B:C4:45:08:A8:0F:DF:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/01c04108-2084-3163-a90d-4fc763d9b1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:00:19:84:79:5a:fb:fd:f5:73:40:74:59:d4:8a:31:0c:fe: 41:7d:29:43:2e:d2:cd:67:c4:5d:d5:77:23:b0:d4:b3:10:72: 03:dc:2b:56:df:bb:9c:59:9d:99:59:6c:c6:cd:ca:c3:b1:19: 06:f3:49:69:97:13:11:b9:25:f8:de:01:e8:a4:48:3f:77:49: 1c:a6:90:53:ce:d1:b5:30:dc:44:dc:43:88:79:6b:fe:2f:3e: a0:57:d7:16:43:94:41:a1:f0:ad:27:54:5f:e8:55:93:2b:18: 3c:4c:01:b6:37:eb:23:f7:d8:86:92:63:36:f1:cb:3a:9f:7d: f5:71:68:37:35:a8:d2:41:f2:8e:cd:25:ed:66:d1:5a:26:63: ae:02:35:bf:94:1f:ff:87:a5:61:80:00:0f:94:fc:4d:e6:01: dc:c9:10:ea:ef:91:1d:2f:13:5e:07:b3:82:c3:09:8f:b9:fc: 4c:16:e8:31:23:b8:04:bb:50:cc:4e:cb:64:ec:18:48:6d:63: 21:1f:3a:cf:00:dc:3a:33:8d:cb:7a:7a:a3:24:2a:22:b0:f6: 61:58:31:2a:d7:ed:af:3d:b8:ba:e8:b3:63:0c:b0:22:28:fb: d5:3a:41:1f:7d:e9:dc:6b:8b:f8:5f:07:ed:b8:ad:29:ea:f2: d5:e8:08:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2l0xpce4lx3vetIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0NTAxMVoXDTI1MDEwNTE1NTAxMVowLzEtMCsGA1UEAxMk OTM0ZWYyMDItNTFmYy00MDE3LTkzZDEtNjVmN2YyYzk5YjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cWrPolfVTOKyP+zsAPOY7l0LY97Byu7i7mu cdJ1BkOR9I25uhjpOWZe7Vkk9My97j21VPgj5nZ6W4CATSjwqiJ49j7DbjZTypeZ OQxz7XeHslgSP/e8wD5sF1hmcwtvJ3Qv2R+w5xIJVkbyKBDB812Wzmb2jh7febCr 4AbVE214oNta7abJ/VEjMmlmLifHziQF0ilHfsF6yA114CII7TXOtuQzqGEARxhj Nur2Dza0V5HmfwmFwAjN+JJUkoSioe/kQMRDBeYUz03TO1LEsnCNcG8cYZSFRdLp 1qMNd0rdGT3p5JQaxZovgpIAnstoqi9fFSHQvgi8fCe8xBdXWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYFNNd8OmoMNJDuaGvERQioD9/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDFjMDQxMDgtMjA4NC0z MTYzLWE5MGQtNGZjNzYzZDliMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYAGYR5Wvv99XNAdFnUijEM/kF9KUMu0s1nxF3VdyOw1LMQcgPcK1bf u5xZnZlZbMbNysOxGQbzSWmXExG5JfjeAeikSD93SRymkFPO0bUw3ETcQ4h5a/4v PqBX1xZDlEGh8K0nVF/oVZMrGDxMAbY36yP32IaSYzbxyzqfffVxaDc1qNJB8o7N Je1m0VomY64CNb+UH/+HpWGAAA+U/E3mAdzJEOrvkR0vE14Hs4LDCY+5/EwW6DEj uAS7UMxOy2TsGEhtYyEfOs8A3Dozjct6eqMkKiKw9mFYMSrX7a89uLros2MMsCIo +9U6QR996dxri/hfB+24rSnq8tXoCCc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org