$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json) Hash identifier: 0BzK1AmfvrEucm57hdCXOtidhFHrZU2pU6u+O9zgp2Y= Subject key identifier: DF:84:04:5B:66:87:BC:AA:A6:EA:04:CF:FA:0A:42:4F:3B:46:74:65 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847768E64197C6402D647BC1880 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa Signing time: Mon 07 Oct 2024 14:32:14 +0000 ROA not before: Mon 07 Oct 2024 14:32:14 +0000 ROA not after: Sun 05 Jan 2025 15:32:14 +0000 asID: 398210 IP address blocks: 168.220.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:8e:64:19:7c:64:02:d6:47:bc:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:32:14 2024 GMT Not After : Jan 5 15:32:14 2025 GMT Subject: CN=9527d040-0369-4df4-a164-8a2e7bbf18c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6f:c1:98:13:cb:ff:58:ab:fd:de:c6:48:ac: f1:1b:9f:c4:5a:32:c1:20:1c:6c:c4:f6:53:a3:8a: b3:6d:25:c4:82:24:af:22:ff:13:93:b9:b4:b5:6a: 24:62:aa:d3:67:a8:82:27:bc:08:9b:ea:60:b1:02: eb:75:20:eb:92:69:c1:88:7b:0d:15:01:1d:0b:93: 70:a0:ad:87:3b:25:d2:be:8b:50:4a:79:bd:49:4d: 93:aa:ad:6c:34:45:16:e2:4b:27:02:17:cc:73:ab: ac:60:45:85:2f:ef:b9:bf:a7:1c:1e:12:ff:26:ca: 12:73:e5:58:46:e5:0d:51:28:90:75:c6:d5:39:0f: 55:7b:df:d3:13:1f:b6:5f:a3:f3:46:de:71:cd:98: f2:ad:4a:c6:26:3a:55:6d:3d:7b:45:4e:45:43:0e: 15:43:2a:ad:57:40:93:3d:aa:95:c9:d7:87:d4:e0: dc:8a:b6:27:67:e8:15:53:26:77:f5:28:62:ea:3e: 95:c8:d6:31:f3:80:c3:fe:08:5c:74:3b:63:c2:e1: 73:49:23:ab:e8:78:0c:38:b5:f4:81:68:17:63:50: 99:45:01:10:fe:1d:d0:3d:db:cf:af:80:a3:fa:eb: 5d:76:d8:24:28:87:2b:d4:85:48:dd:a9:dd:9b:17: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:84:04:5B:66:87:BC:AA:A6:EA:04:CF:FA:0A:42:4F:3B:46:74:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:12:41:b2:0b:f9:64:bf:85:13:2a:30:49:54:4e:a9:84:2d: a5:61:a5:6d:e5:04:83:cf:b1:1c:7d:08:8f:39:68:98:97:82: 14:bc:96:dd:f2:49:e9:b1:e4:b7:91:86:09:d9:e6:b7:e1:87: 44:c1:e5:d4:75:c8:4b:04:2e:78:17:d9:7a:81:78:52:52:8a: a2:37:0e:1a:81:f2:c2:99:7b:ec:46:d9:fb:01:fe:26:d9:63: f4:84:e1:63:7d:4e:f4:2d:54:c5:e9:d6:ad:27:f9:85:88:9e: 41:91:42:c1:6f:1e:1f:bf:27:0b:6e:b0:c1:1a:dd:e0:fe:b8: 33:d9:97:cb:14:6e:fa:d9:05:e6:d2:88:63:9c:2c:8c:67:f7: aa:02:68:a1:57:21:e6:37:86:f1:90:f9:4f:b9:8e:09:b8:a1: 79:e9:b1:7f:0a:14:4c:a7:5f:25:e3:7f:f4:07:f5:88:19:34: 8a:4c:b3:97:22:8b:c1:3b:79:2a:53:9e:6c:30:dc:8c:11:b8: a9:88:be:5f:e4:7a:9a:92:29:e1:59:0e:03:18:88:7c:10:59: 57:1e:b8:30:c9:1e:ae:e0:42:0f:75:f5:dc:d5:5f:ac:49:62: b8:a6:9d:63:10:ad:c3:f1:f7:e9:50:41:15:52:de:07:75:ca: a4:7f:6b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2jmQZfGQC1ke8GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MzIxNFoXDTI1MDEwNTE1MzIxNFowLzEtMCsGA1UEAxMk OTUyN2QwNDAtMDM2OS00ZGY0LWExNjQtOGEyZTdiYmYxOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm/BmBPL/1ir/d7GSKzxG5/EWjLBIBxsxPZT o4qzbSXEgiSvIv8Tk7m0tWokYqrTZ6iCJ7wIm+pgsQLrdSDrkmnBiHsNFQEdC5Nw oK2HOyXSvotQSnm9SU2Tqq1sNEUW4ksnAhfMc6usYEWFL++5v6ccHhL/JsoSc+VY RuUNUSiQdcbVOQ9Ve9/TEx+2X6PzRt5xzZjyrUrGJjpVbT17RU5FQw4VQyqtV0CT PaqVydeH1ODcirYnZ+gVUyZ39Shi6j6VyNYx84DD/ghcdDtjwuFzSSOr6HgMOLX0 gWgXY1CZRQEQ/h3QPdvPr4Cj+utddtgkKIcr1IVI3andmxePXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+EBFtmh7yqpuoEz/oKQk87RnRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzYxMmIxN2EtMmQ3Mi0z OGYwLWJmMGUtOGY4ZDg0MWY0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYSQbIL+WS/hRMqMElUTqmELaVhpW3lBIPPsRx9CI85aJiXghS8lt3y Semx5LeRhgnZ5rfhh0TB5dR1yEsELngX2XqBeFJSiqI3DhqB8sKZe+xG2fsB/ibZ Y/SE4WN9TvQtVMXp1q0n+YWInkGRQsFvHh+/JwtusMEa3eD+uDPZl8sUbvrZBebS iGOcLIxn96oCaKFXIeY3hvGQ+U+5jgm4oXnpsX8KFEynXyXjf/QH9YgZNIpMs5ci i8E7eSpTnmww3IwRuKmIvl/kepqSKeFZDgMYiHwQWVceuDDJHq7gQg919dzVX6xJ YrimnWMQrcPx9+lQQRVS3gd1yqR/a7g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org