$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa File: 04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa (raw, json) Hash identifier: Kuy24+LLxbKN7WFdmQUHoQLlRR2ZwQakuRxOErmoRcU= Subject key identifier: 28:68:48:8E:71:61:02:DB:9E:FF:44:7B:51:41:4C:43:98:B1:03:C2 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847767ADBE5921E0D583A00C340 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa Signing time: Mon 07 Oct 2024 13:52:53 +0000 ROA not before: Mon 07 Oct 2024 13:52:53 +0000 ROA not after: Sun 05 Jan 2025 14:52:53 +0000 asID: 398210 IP address blocks: 168.220.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:7a:db:e5:92:1e:0d:58:3a:00:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 13:52:53 2024 GMT Not After : Jan 5 14:52:53 2025 GMT Subject: CN=a7ce97d4-40ae-445e-b67c-3a3137d2c20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:d8:d3:1d:49:1f:7e:68:f2:e4:1c:ff:39: 81:49:60:16:6c:31:4a:dd:22:62:65:f4:e4:28:1a: 95:65:ad:20:94:76:a7:d0:0a:0e:4e:85:7e:b4:e9: ad:c7:46:d5:52:6f:eb:a0:73:30:84:fe:41:09:60: 7d:78:06:67:46:f9:72:0c:6d:2f:75:ef:f2:e0:aa: 19:1b:43:80:4e:bc:fb:3a:13:f7:88:00:c3:8f:ab: 41:f2:43:53:66:04:39:96:7e:38:76:9c:7a:af:5d: 63:6d:24:3e:0b:6a:dd:32:e7:cc:69:28:86:ef:06: 38:6b:26:7d:8e:e3:db:47:0b:f2:23:3b:60:b8:6c: 1c:e6:23:92:ce:66:00:b9:21:5f:1c:ec:d4:f5:0a: ed:73:9d:a9:9f:3e:56:0e:50:c9:ee:51:c9:6e:0e: 0b:9e:3b:ad:ac:6f:31:22:24:6d:02:80:2e:e3:7a: da:94:a2:9f:78:15:45:60:98:dd:a7:90:0e:b8:c2: a9:66:ef:49:8f:f7:3a:1a:6c:74:a4:d0:92:b7:3a: 7b:ea:42:8d:dd:68:e4:e7:4b:bb:2a:c1:2b:aa:a6: 67:d6:42:ec:bc:2e:61:2c:3e:8a:9f:f5:73:c0:a6: d9:d1:49:6c:1f:39:c4:74:ed:d0:54:fa:96:c8:65: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:68:48:8E:71:61:02:DB:9E:FF:44:7B:51:41:4C:43:98:B1:03:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6a:54:fb:05:0f:fc:d4:97:6f:d3:70:c2:fb:2b:30:d1:0c: cd:c7:73:15:66:ed:c3:a1:05:fb:24:fe:45:85:3e:ae:a4:75: 37:a2:af:6b:45:2f:f5:0d:99:b3:e5:51:2d:30:c1:0b:98:44: a1:2e:3a:e4:93:4b:b5:f4:ff:10:bc:7c:07:b1:0c:93:c3:f4: 5e:4d:13:bb:b9:99:37:bd:f4:e2:ec:fb:c4:d9:0e:c0:6f:63: 5c:cf:bf:5a:dd:24:c4:d9:a8:4c:da:0c:ac:c7:a0:5a:07:00: 90:e6:8f:70:6b:a7:f2:2e:cf:1e:8f:b8:76:96:b0:45:b7:c3: fb:60:83:c8:64:e2:9f:2c:9f:0b:c1:7f:68:fc:76:da:94:08: d2:1e:4c:30:0d:bc:6b:46:b6:7f:f4:d9:19:f9:e4:c4:da:32: 40:41:ab:0b:f3:68:b7:27:7a:75:d0:05:62:b4:77:ab:ec:d0: 16:4d:5b:fb:99:7b:23:e3:81:e3:3b:50:fb:ed:2f:e1:33:b4: 78:c6:fc:94:00:5f:e1:5a:90:7b:9a:1a:a1:a3:80:3c:af:df: 45:25:d0:ae:1c:a3:32:69:59:3e:09:a1:a8:9b:68:4f:df:b6: f8:69:f6:fb:30:ec:17:e1:48:55:66:a2:9d:63:45:43:41:7f: aa:81:72:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2etvlkh4NWDoAw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzEzNTI1M1oXDTI1MDEwNTE0NTI1M1owLzEtMCsGA1UEAxMk YTdjZTk3ZDQtNDBhZS00NDVlLWI2N2MtM2EzMTM3ZDJjMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7zY0x1JH35o8uQc/zmBSWAWbDFK3SJiZfTk KBqVZa0glHan0AoOToV+tOmtx0bVUm/roHMwhP5BCWB9eAZnRvlyDG0vde/y4KoZ G0OATrz7OhP3iADDj6tB8kNTZgQ5ln44dpx6r11jbSQ+C2rdMufMaSiG7wY4ayZ9 juPbRwvyIztguGwc5iOSzmYAuSFfHOzU9Qrtc52pnz5WDlDJ7lHJbg4LnjutrG8x IiRtAoAu43ralKKfeBVFYJjdp5AOuMKpZu9Jj/c6Gmx0pNCStzp76kKN3Wjk50u7 KsErqqZn1kLsvC5hLD6Kn/VzwKbZ0UlsHznEdO3QVPqWyGVBAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChoSI5xYQLbnv9Ee1FBTEOYsQPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDRlN2M1NzAtZDFkNy0z OGNhLWFhMTItZjQzZTIyNDBjYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFqVPsFD/zUl2/TcML7KzDRDM3HcxVm7cOhBfsk/kWFPq6kdTeir2tF L/UNmbPlUS0wwQuYRKEuOuSTS7X0/xC8fAexDJPD9F5NE7u5mTe99OLs+8TZDsBv Y1zPv1rdJMTZqEzaDKzHoFoHAJDmj3Brp/Iuzx6PuHaWsEW3w/tgg8hk4p8snwvB f2j8dtqUCNIeTDANvGtGtn/02Rn55MTaMkBBqwvzaLcnenXQBWK0d6vs0BZNW/uZ eyPjgeM7UPvtL+EztHjG/JQAX+FakHuaGqGjgDyv30Ul0K4cozJpWT4JoaibaE/f tvhp9vsw7BfhSFVmop1jRUNBf6qBcgY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org