$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa File: 27938e9c-3192-3793-af30-042a052457c7.roa (raw, json) Hash identifier: Vj1lQQRInZt7K4JYm9T8tQWh5YzhJhmoR9FF11d/r34= Subject key identifier: 11:C5:A9:34:75:C4:63:7E:F9:7A:B9:9E:4C:26:F2:50:2B:18:88:9F Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847767A75AA933AB87E91242F40 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa Signing time: Mon 07 Oct 2024 13:52:05 +0000 ROA not before: Mon 07 Oct 2024 13:52:05 +0000 ROA not after: Sun 05 Jan 2025 14:52:05 +0000 asID: 398210 IP address blocks: 168.220.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:7a:75:aa:93:3a:b8:7e:91:24:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 13:52:05 2024 GMT Not After : Jan 5 14:52:05 2025 GMT Subject: CN=ea30ddb1-b615-4c8d-94ea-be56dcab0c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:82:02:82:5d:32:89:9e:ca:04:ba:fe:22: dc:03:d9:14:c9:4c:11:b9:02:9e:3c:03:6c:63:93: 9a:31:5a:4c:33:85:e2:12:60:a2:9c:d2:85:57:2e: 6f:02:74:a8:78:03:1e:62:53:1b:40:02:04:eb:3d: 4f:68:3a:d4:73:ec:4a:25:e2:b8:5f:99:41:58:ce: be:a6:de:ae:fa:0b:96:53:6c:4d:22:cd:e5:cd:2a: c1:98:a4:9d:e4:dd:55:e0:96:bd:b2:ff:4a:5b:f9: bc:88:03:1b:cf:57:fd:15:69:be:33:18:f8:ab:1c: 3c:70:3b:88:81:a1:79:c3:43:fc:f7:25:e7:fe:23: f4:cd:09:ee:2d:29:96:62:6c:72:50:0d:6e:fc:6e: 73:16:b7:dc:c3:2a:3e:b1:25:5a:c8:f0:84:a7:f8: a0:0c:6f:7c:1b:43:0c:af:d8:7a:d2:e5:ad:b3:21: 54:72:61:d6:e9:bb:ed:f9:a9:e8:e0:13:15:29:bf: e6:05:63:2d:12:4e:90:bd:d6:e9:e4:eb:8d:f7:45: cc:9b:7f:40:08:ed:81:23:c9:1d:cc:7f:db:4f:66: 09:d5:b6:2e:5a:3f:46:83:19:eb:63:38:e8:87:75: b9:4f:a8:77:34:da:fd:cd:b3:d2:d9:0e:35:b6:dd: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C5:A9:34:75:C4:63:7E:F9:7A:B9:9E:4C:26:F2:50:2B:18:88:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2b:9a:cd:61:9d:a7:a3:bc:35:7b:de:58:d7:77:af:82:71: d0:d3:0b:56:48:96:e8:af:d2:81:2f:b6:f5:c9:03:dd:6b:0e: ee:f0:a3:0c:e9:86:fb:cd:66:a1:11:6e:59:b1:0e:cb:41:70: aa:b2:b8:a6:82:df:82:52:f7:b8:aa:44:4d:ac:cc:5f:54:d2: 85:20:68:ac:20:cd:a9:d8:20:87:f3:a0:d9:80:ff:22:1d:6a: e7:3f:6f:ea:79:0e:b7:8e:64:b5:42:eb:e6:4e:10:32:e1:34: 14:b2:ac:18:e8:46:df:1d:2d:34:07:88:40:7d:49:15:3f:ca: a8:50:53:92:de:0a:cc:e6:00:70:3e:60:26:cf:39:21:1f:68: 58:a5:a0:a3:d8:1d:23:1d:ed:48:eb:c8:5b:47:e2:74:b6:84: 08:af:fa:dd:f2:79:6d:fe:f0:03:a2:5f:12:3e:1d:b9:63:95: 11:95:b4:5e:71:f5:c0:e8:8b:06:0c:44:5d:01:7f:12:db:2f: 52:ce:98:a0:9d:de:b0:09:fe:75:ec:25:83:ff:14:29:97:c1: e7:3a:27:16:5b:15:01:94:e4:08:50:a2:92:b7:98:74:6b:2d: 4d:36:9c:fc:0d:9d:04:64:d6:1c:0e:ae:7e:9c:94:bd:ff:f3: b5:48:d0:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2enWqkzq4fpEkL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzEzNTIwNVoXDTI1MDEwNTE0NTIwNVowLzEtMCsGA1UEAxMk ZWEzMGRkYjEtYjYxNS00YzhkLTk0ZWEtYmU1NmRjYWIwYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3OCAoJdMomeygS6/iLcA9kUyUwRuQKePANs Y5OaMVpMM4XiEmCinNKFVy5vAnSoeAMeYlMbQAIE6z1PaDrUc+xKJeK4X5lBWM6+ pt6u+guWU2xNIs3lzSrBmKSd5N1V4Ja9sv9KW/m8iAMbz1f9FWm+Mxj4qxw8cDuI gaF5w0P89yXn/iP0zQnuLSmWYmxyUA1u/G5zFrfcwyo+sSVayPCEp/igDG98G0MM r9h60uWtsyFUcmHW6bvt+ano4BMVKb/mBWMtEk6Qvdbp5OuN90XMm39ACO2BI8kd zH/bT2YJ1bYuWj9GgxnrYzjoh3W5T6h3NNr9zbPS2Q41tt2njQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHFqTR1xGN++Xq5nkwm8lArGIifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjc5MzhlOWMtMzE5Mi0z NzkzLWFmMzAtMDQyYTA1MjQ1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0rms1hnaejvDV73ljXd6+CcdDTC1ZIluiv0oEvtvXJA91rDu7wowzp hvvNZqERblmxDstBcKqyuKaC34JS97iqRE2szF9U0oUgaKwgzanYIIfzoNmA/yId auc/b+p5DreOZLVC6+ZOEDLhNBSyrBjoRt8dLTQHiEB9SRU/yqhQU5LeCszmAHA+ YCbPOSEfaFiloKPYHSMd7UjryFtH4nS2hAiv+t3yeW3+8AOiXxI+HbljlRGVtF5x 9cDoiwYMRF0BfxLbL1LOmKCd3rAJ/nXsJYP/FCmXwec6JxZbFQGU5AhQopK3mHRr LU02nPwNnQRk1hwOrn6clL3/87VI0Dk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org