$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa File: 661fc493-e5f2-3843-b87f-cec243b8a026.roa (raw, json) Hash identifier: 7hP09NGnolu5FYCS4WbgZBO6LpwOyNSK1eUrqQKDLSs= Subject key identifier: B9:FE:8B:7B:77:C4:B0:7E:EE:26:44:B4:2D:91:3E:FF:6D:77:F2:81 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847768AD5F3C4804DEE35C69F80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa Signing time: Mon 07 Oct 2024 14:25:04 +0000 ROA not before: Mon 07 Oct 2024 14:25:04 +0000 ROA not after: Sun 05 Jan 2025 15:25:04 +0000 asID: 398210 IP address blocks: 168.220.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:8a:d5:f3:c4:80:4d:ee:35:c6:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:25:04 2024 GMT Not After : Jan 5 15:25:04 2025 GMT Subject: CN=3a1621a2-eefb-4370-b1c9-880023a4eaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:0c:6a:79:87:e8:6f:8a:4b:38:59:ed:50: b2:d7:fa:5a:b7:ee:98:4a:f3:8f:a3:f2:ba:1b:3a: 4c:99:9e:25:e3:39:4e:7b:e4:98:0f:9e:b4:88:b9: 88:31:ff:4e:51:5f:fe:c0:41:46:a7:a3:d4:de:36: c5:1e:47:90:09:15:a0:e7:11:2e:8c:aa:54:90:16: ed:27:56:cd:1a:01:70:9f:ca:25:16:ac:ca:28:68: e0:e3:e8:bd:b1:fb:41:d2:f3:8b:c9:a8:02:95:67: ee:95:d4:5b:f8:17:33:96:0c:d5:be:6d:36:85:ff: 3c:8e:c8:0c:37:ea:fe:7a:d1:f4:cb:ad:2f:e2:e6: a1:0e:af:e2:ca:cd:fe:b5:d9:7d:88:0d:bd:21:77: 14:7c:a9:15:96:aa:a1:f0:1a:a7:a9:e5:fb:ca:95: 17:fc:b3:4e:4c:23:01:cb:0b:b2:02:9f:bc:68:bf: 2d:ae:f2:57:25:c5:86:0c:fb:9a:64:78:57:2a:ca: f4:21:ad:12:dd:18:57:97:10:20:47:ea:e1:ef:98: 9b:79:14:c0:fd:29:05:0e:da:d7:a2:fa:8b:ea:c6: 40:36:3d:5c:bb:98:5c:5d:14:d5:0a:cb:52:c0:b3: 0b:17:d5:c1:d3:bb:ad:9f:55:6a:fc:92:aa:3b:ec: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FE:8B:7B:77:C4:B0:7E:EE:26:44:B4:2D:91:3E:FF:6D:77:F2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e3:74:6a:5d:c7:11:d1:5c:a0:c3:fa:4c:6b:43:9d:4c:1f: 29:fb:49:4e:9a:8b:8d:d2:ad:85:eb:1f:21:75:46:28:d3:a4: 35:58:ce:7b:bc:2f:d9:52:61:70:58:59:49:07:41:50:b8:96: 54:d2:9e:81:9c:ab:d8:2a:f1:2a:5a:88:3f:be:e5:1e:66:37: c2:8e:be:7a:43:4e:5e:af:ff:32:d3:c2:e5:40:6d:05:eb:7b: 26:cd:f2:d9:78:e9:a9:2f:5e:5e:cd:71:89:83:67:b7:73:f7: 03:e0:78:dc:86:9d:e2:60:f3:b9:b9:40:33:cf:85:0e:44:ea: e2:32:cd:73:ef:57:a1:91:4f:ca:ae:46:34:da:db:18:da:df: 68:3c:86:5b:36:df:81:a5:90:75:3d:ff:28:42:95:48:46:b1: 29:b7:71:d0:50:46:58:30:3a:e6:6d:2a:47:49:e6:63:df:2c: 41:46:75:24:78:18:5a:16:09:62:af:6a:4c:96:39:ff:aa:26: be:0c:c7:3a:7b:6b:0c:37:56:fb:f8:ab:48:97:a3:44:d8:14: 04:70:a9:ba:01:90:75:5a:f3:35:c4:b5:12:4d:3c:b6:60:1c: 3b:74:1a:79:39:9c:8e:80:37:0b:8c:f4:bd:37:b5:96:d3:d6: 59:39:25:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2itXzxIBN7jXGn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MjUwNFoXDTI1MDEwNTE1MjUwNFowLzEtMCsGA1UEAxMk M2ExNjIxYTItZWVmYi00MzcwLWIxYzktODgwMDIzYTRlYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1IManmH6G+KSzhZ7VCy1/pat+6YSvOPo/K6 GzpMmZ4l4zlOe+SYD560iLmIMf9OUV/+wEFGp6PU3jbFHkeQCRWg5xEujKpUkBbt J1bNGgFwn8olFqzKKGjg4+i9sftB0vOLyagClWfuldRb+BczlgzVvm02hf88jsgM N+r+etH0y60v4uahDq/iys3+tdl9iA29IXcUfKkVlqqh8BqnqeX7ypUX/LNOTCMB ywuyAp+8aL8trvJXJcWGDPuaZHhXKsr0Ia0S3RhXlxAgR+rh75ibeRTA/SkFDtrX ovqL6sZANj1cu5hcXRTVCstSwLMLF9XB07utn1Vq/JKqO+xf7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn+i3t3xLB+7iZEtC2RPv9td/KBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNjYxZmM0OTMtZTVmMi0z ODQzLWI4N2YtY2VjMjQzYjhhMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPjdGpdxxHRXKDD+kxrQ51MHyn7SU6ai43SrYXrHyF1RijTpDVYznu8 L9lSYXBYWUkHQVC4llTSnoGcq9gq8SpaiD++5R5mN8KOvnpDTl6v/zLTwuVAbQXr eybN8tl46akvXl7NcYmDZ7dz9wPgeNyGneJg87m5QDPPhQ5E6uIyzXPvV6GRT8qu RjTa2xja32g8hls234GlkHU9/yhClUhGsSm3cdBQRlgwOuZtKkdJ5mPfLEFGdSR4 GFoWCWKvakyWOf+qJr4Mxzp7aww3Vvv4q0iXo0TYFARwqboBkHVa8zXEtRJNPLZg HDt0Gnk5nI6ANwuM9L03tZbT1lk5JRQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:28 2024 by rpki-client on console-fra.rpki-client.org