$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa File: 9061acde-1566-3f28-a9b6-14f165759f16.roa (raw, json) Hash identifier: /gQ59US4MSMfg4PQiYsXNjGhkewjAKhv2xaq5p0xs5E= Subject key identifier: 0E:5D:A5:88:43:5D:D4:AF:7D:0F:1D:57:6E:19:1D:82:1B:2C:11:DE Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847768DB2CBEC9D65BA0DDAEC80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa Signing time: Mon 07 Oct 2024 14:30:50 +0000 ROA not before: Mon 07 Oct 2024 14:30:50 +0000 ROA not after: Sun 05 Jan 2025 15:30:50 +0000 asID: 398210 IP address blocks: 168.220.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:8d:b2:cb:ec:9d:65:ba:0d:da:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:30:50 2024 GMT Not After : Jan 5 15:30:50 2025 GMT Subject: CN=51afd294-5865-437d-ae79-871eebf83301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:56:40:9c:9d:e1:ee:a0:d6:32:1a:94:4a: e7:fc:19:a9:c4:6e:dd:31:d8:81:48:62:0d:9c:55: a7:f9:8d:64:21:8d:d8:47:2a:03:52:47:b5:36:ac: 15:e7:b9:df:be:06:da:a0:0d:65:b5:3d:b3:d4:69: 3b:90:7a:f1:8f:95:3f:06:09:e7:3f:28:eb:a5:32: 91:5c:1b:dd:18:9e:1c:b6:da:e4:c4:36:f9:e1:45: a8:75:14:11:28:6d:2b:15:25:d9:9c:a6:03:33:aa: e1:47:1d:39:76:a9:36:1c:8d:34:fd:f2:b5:54:61: 8d:d3:5b:d9:05:ce:86:3c:65:63:1a:78:4f:06:3b: 90:b6:12:a3:f8:ce:bc:05:85:3b:e4:d8:53:33:94: e2:96:a9:b9:40:e6:a7:85:41:0c:f9:95:3e:29:2a: 8c:8c:11:95:66:47:98:c1:88:a8:c5:d8:1f:f5:8b: 1d:cf:91:00:10:c9:54:3f:78:01:81:4f:c8:58:08: e1:88:84:76:0c:b5:80:25:b9:29:0c:0d:83:e1:cd: 46:3a:6a:ba:09:6f:1f:5d:b6:e6:12:c6:e4:35:c9: 5c:7b:66:02:59:fa:f8:7e:33:0f:e4:43:2b:b2:62: 2b:69:71:7d:97:a1:cd:62:9e:e4:10:9f:32:e6:44: 33:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:A5:88:43:5D:D4:AF:7D:0F:1D:57:6E:19:1D:82:1B:2C:11:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:72:0a:83:11:d5:48:2f:a7:06:62:44:3e:5e:ad:24:17:11: 7b:3f:49:4c:29:14:6d:bb:88:c5:02:94:81:87:20:96:c8:b1: ac:fc:10:0d:9b:40:02:7d:b5:ca:c5:5d:f5:30:06:78:62:ca: f2:32:8f:03:6f:60:33:e9:27:4a:36:5a:6e:e8:9d:3a:29:22: b3:24:91:54:0e:39:39:3c:5e:d8:2d:55:44:3a:2c:87:cb:bd: 68:00:8a:be:92:d4:91:17:93:6b:2c:5f:f1:17:2c:29:83:7b: a4:8e:93:00:f8:44:ab:ca:2d:d0:7c:ad:29:fb:6c:22:c2:7b: c9:0c:a6:99:b6:3e:db:64:e3:d7:54:9a:27:02:b8:c7:2d:8d: cd:a2:e7:63:f3:ef:ae:c6:ef:df:53:df:af:7f:eb:ff:db:34: df:98:a6:78:05:90:6c:12:f7:02:0e:dc:ad:03:6b:cc:62:ce: e5:9a:1c:e4:72:bf:cb:4c:9f:d4:ca:cb:c2:7b:ea:0a:98:96: 5c:6d:6d:45:59:0a:a3:9c:bb:87:73:17:af:a7:1c:28:01:1f: b5:ec:09:f8:7d:a0:92:e5:b5:59:16:b1:60:7e:e8:e8:da:30: 6f:c1:8a:1f:fb:b3:69:bd:d4:02:91:8a:95:cc:44:ff:c0:0a: 3f:b1:23:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2jbLL7J1lug3a7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MzA1MFoXDTI1MDEwNTE1MzA1MFowLzEtMCsGA1UEAxMk NTFhZmQyOTQtNTg2NS00MzdkLWFlNzktODcxZWViZjgzMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyZWQJyd4e6g1jIalErn/BmpxG7dMdiBSGIN nFWn+Y1kIY3YRyoDUke1NqwV57nfvgbaoA1ltT2z1Gk7kHrxj5U/BgnnPyjrpTKR XBvdGJ4cttrkxDb54UWodRQRKG0rFSXZnKYDM6rhRx05dqk2HI00/fK1VGGN01vZ Bc6GPGVjGnhPBjuQthKj+M68BYU75NhTM5Tilqm5QOanhUEM+ZU+KSqMjBGVZkeY wYioxdgf9Ysdz5EAEMlUP3gBgU/IWAjhiIR2DLWAJbkpDA2D4c1GOmq6CW8fXbbm EsbkNclce2YCWfr4fjMP5EMrsmIraXF9l6HNYp7kEJ8y5kQzoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5dpYhDXdSvfQ8dV24ZHYIbLBHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvOTA2MWFjZGUtMTU2Ni0z ZjI4LWE5YjYtMTRmMTY1NzU5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVyCoMR1UgvpwZiRD5erSQXEXs/SUwpFG27iMUClIGHIJbIsaz8EA2b QAJ9tcrFXfUwBnhiyvIyjwNvYDPpJ0o2Wm7onTopIrMkkVQOOTk8XtgtVUQ6LIfL vWgAir6S1JEXk2ssX/EXLCmDe6SOkwD4RKvKLdB8rSn7bCLCe8kMppm2Pttk49dU micCuMctjc2i52Pz767G799T369/6//bNN+YpngFkGwS9wIO3K0Da8xizuWaHORy v8tMn9TKy8J76gqYllxtbUVZCqOcu4dzF6+nHCgBH7XsCfh9oJLltVkWsWB+6Oja MG/Bih/7s2m91AKRipXMRP/ACj+xI7c= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org