$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa File: a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa (raw, json) Hash identifier: 9GrcpE/bJ2yzHZVSNoYVKbyOoIsHm9W5etOejaKlRRY= Subject key identifier: 86:4D:8C:4E:A9:E6:F0:6B:AF:8F:C5:B8:FC:5A:CB:D5:42:6A:1E:23 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847768E0960D046EA2A5C28DD80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa Signing time: Mon 07 Oct 2024 14:31:31 +0000 ROA not before: Mon 07 Oct 2024 14:31:31 +0000 ROA not after: Sun 05 Jan 2025 15:31:31 +0000 asID: 398210 IP address blocks: 168.220.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:8e:09:60:d0:46:ea:2a:5c:28:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:31:31 2024 GMT Not After : Jan 5 15:31:31 2025 GMT Subject: CN=8cdb5d23-7798-4852-945f-3594952818d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:39:6e:a4:68:1a:93:5d:7c:75:10:8a:16:21: d8:20:2c:08:0e:24:76:9c:5e:d5:40:32:6c:70:85: 94:01:21:97:72:bb:74:89:96:6f:59:fd:72:12:64: 5f:86:d8:62:a4:29:2b:4b:3a:f4:62:11:93:89:23: 54:e6:31:ae:d4:d2:42:92:36:0f:5a:7d:f0:94:5e: a3:49:d0:4c:d2:30:71:d7:55:08:81:19:90:a3:43: 7b:bf:fc:fb:26:a2:c9:81:7a:7e:b0:75:7a:64:1a: c8:24:26:8d:9f:a6:fb:c2:02:54:75:de:0a:5c:cb: 85:d4:68:bd:de:73:6a:50:a1:62:4a:c8:75:b4:fe: 2f:ef:a9:31:ff:80:ad:05:96:d0:4d:2a:f8:aa:cd: eb:64:1c:63:78:28:23:24:b2:0b:fa:e4:86:c0:c1: f1:9c:e0:70:35:e6:80:a0:dc:13:4c:c9:c6:e8:ff: a5:c0:cc:ad:f8:82:50:40:2d:93:f2:03:51:c1:36: 76:3d:b5:b0:6d:2f:75:0a:92:bc:73:bb:36:3a:8c: 22:d8:89:0b:5e:58:ab:f7:ee:27:e5:d2:af:e6:df: 9d:27:03:ea:a3:3f:e5:25:48:ea:95:c0:74:d2:cc: 0b:bf:f4:ce:d3:59:f9:64:fb:b7:16:2f:7b:28:91: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4D:8C:4E:A9:E6:F0:6B:AF:8F:C5:B8:FC:5A:CB:D5:42:6A:1E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ef:7e:5b:e3:a3:9c:28:13:7a:64:2d:bc:33:39:8d:f9:85: 80:f8:a2:b9:96:17:20:d0:4c:a6:69:48:4d:c5:92:7d:ec:ee: 6c:1d:d8:8d:7d:83:bb:1d:48:e0:b7:38:85:f5:9a:35:3d:1f: 95:eb:0f:d1:53:3f:a7:6b:b6:5d:14:23:8c:2d:95:94:1e:f6: d1:06:48:df:59:6b:25:a1:be:31:54:43:2a:6b:21:3a:13:de: dd:50:de:ec:5f:b8:e5:7d:6f:8e:fd:e0:32:35:82:71:54:4e: 62:52:4f:b2:1e:d5:77:c4:b3:f2:ca:18:25:72:1b:ca:51:1e: b9:d0:7a:d7:cd:59:c9:fb:06:66:41:ba:66:8a:71:e5:53:6a: 1d:75:ec:38:14:3b:6d:13:e7:b4:a5:46:ce:26:a6:84:a0:e9: 39:2c:15:bb:c7:26:a6:b0:3f:87:5f:43:6c:56:78:88:15:d6: 48:4e:28:94:8f:5a:40:e1:fc:e7:11:f6:49:6d:aa:2a:f4:c9: 41:b0:25:cf:e3:62:a6:79:f5:ff:4c:b1:14:40:e8:3a:90:08: 92:6f:5d:9a:73:13:67:ec:f0:2b:bc:16:f6:56:55:5e:9c:3f: a8:33:d7:d1:57:4a:8d:e0:b4:c6:ea:1f:61:0a:c2:ff:83:d5: d7:95:e7:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2jglg0EbqKlwo3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MzEzMVoXDTI1MDEwNTE1MzEzMVowLzEtMCsGA1UEAxMk OGNkYjVkMjMtNzc5OC00ODUyLTk0NWYtMzU5NDk1MjgxOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDlupGgak118dRCKFiHYICwIDiR2nF7VQDJs cIWUASGXcrt0iZZvWf1yEmRfhthipCkrSzr0YhGTiSNU5jGu1NJCkjYPWn3wlF6j SdBM0jBx11UIgRmQo0N7v/z7JqLJgXp+sHV6ZBrIJCaNn6b7wgJUdd4KXMuF1Gi9 3nNqUKFiSsh1tP4v76kx/4CtBZbQTSr4qs3rZBxjeCgjJLIL+uSGwMHxnOBwNeaA oNwTTMnG6P+lwMyt+IJQQC2T8gNRwTZ2PbWwbS91CpK8c7s2Oowi2IkLXlir9+4n 5dKv5t+dJwPqoz/lJUjqlcB00swLv/TO01n5ZPu3Fi97KJGrcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZNjE6p5vBrr4/FuPxay9VCah4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYTZlOTBhN2EtYWQ2Yy0z MTVjLWI2YzctYjg0NzUyOTdkZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/vflvjo5woE3pkLbwzOY35hYD4ormWFyDQTKZpSE3Fkn3s7mwd2I19 g7sdSOC3OIX1mjU9H5XrD9FTP6drtl0UI4wtlZQe9tEGSN9ZayWhvjFUQyprIToT 3t1Q3uxfuOV9b4794DI1gnFUTmJST7Ie1XfEs/LKGCVyG8pRHrnQetfNWcn7BmZB umaKceVTah117DgUO20T57SlRs4mpoSg6TksFbvHJqawP4dfQ2xWeIgV1khOKJSP WkDh/OcR9kltqir0yUGwJc/jYqZ59f9MsRRA6DqQCJJvXZpzE2fs8Cu8FvZWVV6c P6gz19FXSo3gtMbqH2EKwv+D1deV568= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org