$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json) Hash identifier: HpODjS1Za7kqqyZ6SL3L/GTmFq9fsx+irJGPo9OqYwA= Subject key identifier: 93:AE:2C:3F:55:1B:D4:06:BF:D6:A5:D0:27:17:00:A0:71:B4:B5:2C Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847769645FBE6042C0844D25B32 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa Signing time: Mon 07 Oct 2024 14:48:07 +0000 ROA not before: Mon 07 Oct 2024 14:48:07 +0000 ROA not after: Sun 05 Jan 2025 15:48:07 +0000 asID: 398210 IP address blocks: 207.211.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:96:45:fb:e6:04:2c:08:44:d2:5b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:48:07 2024 GMT Not After : Jan 5 15:48:07 2025 GMT Subject: CN=663af18f-2e47-46f9-a3ff-08bc3b1feb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:1c:aa:bb:8c:b6:db:80:f5:21:eb:d7:50: 97:cd:cb:40:ae:55:42:38:de:5f:e2:cc:8f:28:10: f3:70:6b:9f:d7:4a:4b:7c:78:cd:cc:b3:8d:be:7a: 21:8b:10:ae:9e:fb:90:87:a5:0f:4e:53:d3:97:fb: c5:23:55:d2:e9:16:44:ab:a8:9c:7a:ab:0e:2f:91: 56:69:c1:c3:df:8d:24:e7:c9:f4:c2:5b:3c:e7:fd: f0:8c:b0:47:6a:e2:6c:33:21:88:89:51:1f:49:a3: df:0e:59:a6:00:af:96:1d:d4:ec:36:0d:42:d7:cb: 7f:32:72:09:36:4c:8d:8b:8a:3a:0c:62:c1:56:0b: 69:e0:77:bc:53:eb:e5:a3:c0:b1:53:9f:f7:23:95: 6e:f8:0b:a3:be:3c:d7:de:76:b3:90:ff:71:f6:d2: 16:8b:2b:21:59:6c:eb:f6:76:67:0d:48:e3:bd:90: 25:aa:51:c5:e5:d0:82:e2:35:0a:b1:56:46:2d:14: 5a:92:e8:49:1a:8f:78:8f:bf:16:dc:bf:3c:04:a3: 2e:df:6a:db:77:e7:16:3d:37:11:91:61:aa:05:12: 89:97:3d:55:26:0b:9c:f6:49:c1:85:09:ea:24:1f: 3f:ae:1e:ee:48:99:75:5e:46:2a:9d:14:a9:4b:30: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AE:2C:3F:55:1B:D4:06:BF:D6:A5:D0:27:17:00:A0:71:B4:B5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ab:b2:81:33:f3:aa:03:f2:11:97:f0:cb:78:41:80:c8:58: 60:7c:63:76:8c:9b:59:61:df:27:f4:f4:af:f4:19:01:aa:df: 2a:f8:50:58:b1:5c:44:65:8d:3e:c5:14:89:09:3f:7a:30:a8: cf:2d:c7:d4:88:02:fc:c2:e7:5e:f5:26:d6:dd:dc:fd:44:eb: da:2f:76:18:55:6e:aa:99:21:fc:b8:86:b8:d2:a2:77:1f:2c: d0:4f:b9:4f:ec:71:b2:2b:65:2f:93:25:a6:8f:6e:35:21:22: 37:e7:fa:33:b1:e2:47:a5:79:c6:a1:cd:21:f9:eb:ff:be:e5: 7c:6a:b0:aa:e0:20:fa:40:e1:98:06:05:84:12:f7:1d:f8:08: 2e:2e:aa:af:93:33:cc:5b:46:17:cd:ea:1f:66:26:43:2a:79: b5:06:58:ad:84:8f:8a:16:bf:98:99:3c:7f:3f:b4:5c:6e:60: d3:93:fa:58:1f:aa:2b:36:54:cd:b0:89:02:04:d1:d3:42:fb: 86:23:2a:7f:9f:65:cb:62:b8:d4:c0:ef:3c:71:ca:96:17:af: 8e:f1:ba:b0:11:6a:ba:38:18:6a:1e:2f:c2:72:ee:c4:3c:b0: 47:0e:3e:1f:eb:4f:fa:50:23:c3:9c:a4:7a:fa:3e:74:47:ef: bd:4c:84:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2lkX75gQsCETSWzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0NDgwN1oXDTI1MDEwNTE1NDgwN1owLzEtMCsGA1UEAxMk NjYzYWYxOGYtMmU0Ny00NmY5LWEzZmYtMDhiYzNiMWZlYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBEcqruMttuA9SHr11CXzctArlVCON5f4syP KBDzcGuf10pLfHjNzLONvnohixCunvuQh6UPTlPTl/vFI1XS6RZEq6iceqsOL5FW acHD340k58n0wls85/3wjLBHauJsMyGIiVEfSaPfDlmmAK+WHdTsNg1C18t/MnIJ NkyNi4o6DGLBVgtp4He8U+vlo8CxU5/3I5Vu+AujvjzX3nazkP9x9tIWiyshWWzr 9nZnDUjjvZAlqlHF5dCC4jUKsVZGLRRakuhJGo94j78W3L88BKMu32rbd+cWPTcR kWGqBRKJlz1VJguc9knBhQnqJB8/rh7uSJl1XkYqnRSpSzDilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOuLD9VG9QGv9al0CcXAKBxtLUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTAyZGEyOTItMDhhOC0z Yjc1LWJjNGItOGQzOTBlNWZlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6rsoEz86oD8hGX8Mt4QYDIWGB8Y3aMm1lh3yf09K/0GQGq3yr4UFix XERljT7FFIkJP3owqM8tx9SIAvzC5171Jtbd3P1E69ovdhhVbqqZIfy4hrjSoncf LNBPuU/scbIrZS+TJaaPbjUhIjfn+jOx4kelecahzSH56/++5XxqsKrgIPpA4ZgG BYQS9x34CC4uqq+TM8xbRhfN6h9mJkMqebUGWK2Ej4oWv5iZPH8/tFxuYNOT+lgf qis2VM2wiQIE0dNC+4YjKn+fZctiuNTA7zxxypYXr47xurARaro4GGoeL8Jy7sQ8 sEcOPh/rT/pQI8OcpHr6PnRH771MhHo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org