$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa File: 6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa (raw, json) Hash identifier: lUPEGUvE9J0yxj7ky94EN8S10KKV+F1zSBd/B2oONfI= Subject key identifier: C8:13:29:7A:FA:09:21:21:C2:B2:E0:57:00:DC:F6:D2:7A:42:A9:CE Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847768937A2F1D6345C959578C0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa Signing time: Mon 07 Oct 2024 14:21:49 +0000 ROA not before: Mon 07 Oct 2024 14:21:49 +0000 ROA not after: Sun 05 Jan 2025 15:21:49 +0000 asID: 398210 IP address blocks: 168.220.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:89:37:a2:f1:d6:34:5c:95:95:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:21:49 2024 GMT Not After : Jan 5 15:21:49 2025 GMT Subject: CN=f6973631-49b7-4ad0-a795-9dc5a3bcf780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:96:95:39:ee:0c:34:97:17:0c:b3:9f:98: 5f:13:88:bc:37:67:ac:a7:ff:78:8b:22:20:67:54: 2f:5f:f2:f6:44:c4:3a:03:2c:b6:a4:76:28:f3:b5: 53:31:0a:db:20:5a:42:48:19:2b:94:48:c8:0c:79: 7b:90:e9:95:25:bd:7e:4b:9f:6b:02:75:1d:0c:5c: d4:18:be:c8:87:73:30:db:52:b5:a7:50:9f:d5:c6: 0c:11:15:4a:5f:30:ec:b7:b6:3f:70:d2:2b:8b:f9: db:53:84:b6:70:68:f1:35:40:2c:9a:d9:07:cd:46: 7b:03:91:ed:00:b1:2f:52:a9:e5:9a:cc:ae:1e:0d: 33:81:a1:0d:68:d2:7d:1c:39:44:3e:f8:35:cc:8d: 39:39:5a:34:00:e3:e2:d2:00:e5:86:44:ee:bb:f5: c3:26:38:15:a6:12:44:00:7e:5b:76:7a:fc:45:1a: 4b:49:a2:44:f6:0c:e1:7f:85:fa:0d:d5:ed:2a:43: b5:cd:05:c1:2a:e2:e9:39:26:34:30:9d:54:a5:56: 2d:6a:55:ec:c6:c6:18:66:46:bb:5d:11:c7:b0:a9: 0f:61:78:5f:7d:5d:81:9c:96:eb:bd:90:3f:fb:37: 96:5d:db:e6:31:f9:95:15:43:0e:60:60:23:42:12: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:13:29:7A:FA:09:21:21:C2:B2:E0:57:00:DC:F6:D2:7A:42:A9:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ec:da:88:8b:b1:6e:44:48:6e:5d:c8:2e:23:74:88:4a:b2: 6b:49:e4:17:46:ba:59:b6:c8:f1:78:99:8b:eb:21:a9:a0:43: 13:b6:52:b3:eb:77:1a:a8:e6:81:5e:4c:c5:58:2a:f1:75:b5: 32:5c:32:13:f4:68:f0:30:38:6a:23:fe:9e:94:17:d1:7a:36: 9c:a6:b9:ab:b2:12:ff:30:37:8f:aa:a2:1e:ee:f8:b5:58:56: 60:1e:a6:ee:14:8a:cf:65:f8:78:88:93:29:36:f7:d1:aa:82: bc:36:28:fa:01:1d:db:d3:6f:d7:1d:0e:88:a9:43:27:51:1e: 68:21:34:a1:41:2b:3d:5c:10:9c:30:9a:30:12:3a:5c:73:29: 28:1d:4c:1a:3b:df:9f:52:b5:a8:0e:88:68:85:10:0c:29:3e: 89:27:96:39:1a:cd:80:22:25:2b:fb:67:58:5d:84:49:c2:e6: f1:33:85:35:5a:5e:1a:a1:75:55:8b:55:98:08:d0:c2:a9:e7: 20:47:40:a0:0b:b3:26:52:6c:ba:b1:eb:8e:50:f1:27:61:3e: ac:79:6c:77:fc:fc:63:8b:8a:c5:db:e3:04:b8:b7:08:e9:ba: d2:91:a4:83:81:63:32:11:78:a9:85:a4:72:84:75:69:e5:c4: 3d:72:ee:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2iTei8dY0XJWVeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MjE0OVoXDTI1MDEwNTE1MjE0OVowLzEtMCsGA1UEAxMk ZjY5NzM2MzEtNDliNy00YWQwLWE3OTUtOWRjNWEzYmNmNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2viWlTnuDDSXFwyzn5hfE4i8N2esp/94iyIg Z1QvX/L2RMQ6Ayy2pHYo87VTMQrbIFpCSBkrlEjIDHl7kOmVJb1+S59rAnUdDFzU GL7Ih3Mw21K1p1Cf1cYMERVKXzDst7Y/cNIri/nbU4S2cGjxNUAsmtkHzUZ7A5Ht ALEvUqnlmsyuHg0zgaENaNJ9HDlEPvg1zI05OVo0AOPi0gDlhkTuu/XDJjgVphJE AH5bdnr8RRpLSaJE9gzhf4X6DdXtKkO1zQXBKuLpOSY0MJ1UpVYtalXsxsYYZka7 XRHHsKkPYXhffV2BnJbrvZA/+zeWXdvmMfmVFUMOYGAjQhIMxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgTKXr6CSEhwrLgVwDc9tJ6QqnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNmY0YTllZjAtZmJmZC0z MDVjLTlkMjItNzYzNDdiYmMwYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNyyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTs2oiLsW5ESG5dyC4jdIhKsmtJ5BdGulm2yPF4mYvrIamgQxO2UrPr dxqo5oFeTMVYKvF1tTJcMhP0aPAwOGoj/p6UF9F6NpymuauyEv8wN4+qoh7u+LVY VmAepu4Uis9l+HiIkyk299Gqgrw2KPoBHdvTb9cdDoipQydRHmghNKFBKz1cEJww mjASOlxzKSgdTBo7359StagOiGiFEAwpPoknljkazYAiJSv7Z1hdhEnC5vEzhTVa XhqhdVWLVZgI0MKp5yBHQKALsyZSbLqx645Q8SdhPqx5bHf8/GOLisXb4wS4twjp utKRpIOBYzIReKmFpHKEdWnlxD1y7sI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org