$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa File: ad35477a-7b33-3abf-a97f-75b5a8927582.roa (raw, json) Hash identifier: XYE/S8VLaMODHnDJsOO6AfB1Q/o81hrZqYxh9AoPDLw= Subject key identifier: 69:AC:F7:A7:B1:3B:99:B6:26:89:DB:1A:02:94:C7:F6:84:12:AE:76 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F43285847768A65DF6F3FA7B6D71A2980 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa Signing time: Mon 07 Oct 2024 14:24:11 +0000 ROA not before: Mon 07 Oct 2024 14:24:11 +0000 ROA not after: Sun 05 Jan 2025 15:24:11 +0000 asID: 398210 IP address blocks: 168.220.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:8a:65:df:6f:3f:a7:b6:d7:1a:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:24:11 2024 GMT Not After : Jan 5 15:24:11 2025 GMT Subject: CN=b6bfbce1-2a2f-455b-a1d2-c29788c26049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:44:c2:25:f0:74:9e:27:97:7f:25:17:67: d4:10:03:70:2d:61:77:cd:60:1c:53:e2:32:35:a1: 70:d5:30:d1:3d:24:09:75:b7:28:73:d4:2d:4d:d7: 39:5b:c8:26:c6:e9:4d:ad:c5:62:b3:73:b5:fd:1a: 10:e3:ec:c5:51:41:e0:34:a8:7b:fc:68:06:19:a5: ad:cc:a8:b3:b1:1d:61:c3:da:53:af:80:e6:f0:23: 36:10:dc:ac:bc:b1:e5:29:86:c6:ab:3b:96:32:c2: e9:b5:3d:2d:cd:2d:c3:25:6a:54:f7:66:34:ce:7a: 65:59:6b:e5:53:62:c0:fa:40:a5:a9:06:45:6f:8f: d2:b7:12:71:71:bb:ec:55:c3:b6:7c:b6:87:6d:48: 94:8d:c2:be:05:ad:b1:96:07:ab:ef:83:7d:c8:7e: 75:5b:48:19:a4:0b:76:26:90:b7:70:f0:4d:5c:7c: 1e:1a:f2:03:64:8f:89:f7:8c:0f:9d:aa:02:0c:12: 37:2e:cf:83:bc:ae:3b:d3:8f:6e:0b:ba:7f:be:53: c7:30:f0:c4:e0:69:84:88:89:60:41:d1:c9:41:dc: 41:d6:f9:8f:03:f7:62:dd:f1:a0:9f:27:7a:5d:b1: 79:86:c5:54:fc:a9:62:13:9c:6d:59:0c:49:c4:60: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:F7:A7:B1:3B:99:B6:26:89:DB:1A:02:94:C7:F6:84:12:AE:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6c:7a:da:4c:b0:85:05:57:8a:50:27:74:c4:76:90:f9:0a: 30:13:ba:e1:d7:ad:53:58:41:9a:13:82:84:65:b5:99:8b:b0: 6c:eb:87:3b:ae:b0:47:fe:0b:f4:46:38:1f:1e:87:59:fd:55: 05:1c:b8:08:fa:43:97:a6:16:16:4f:a5:8f:9a:6f:7a:6c:a4: 34:70:e7:1c:1d:fe:91:7b:4f:eb:0a:41:b3:54:62:4e:2c:40: a5:b3:84:20:3b:06:31:b8:e5:b0:7e:2d:28:2c:15:c1:fa:22: df:cc:b1:82:6e:0a:87:88:56:7e:25:0f:d0:53:45:2d:97:2c: 09:29:de:72:5c:bb:78:8a:f9:13:c0:02:67:13:b0:24:78:31: 2c:6f:83:52:b3:6e:68:85:9c:1a:fb:30:88:27:41:f0:af:06: b0:d3:c9:ed:91:27:79:c5:87:9b:da:42:0c:5a:31:95:08:67: 46:94:b0:71:24:61:90:e6:24:b8:65:2c:d0:8e:17:e3:2f:7f: 6d:32:48:9a:4e:d4:b4:03:e6:23:04:d7:bc:a4:61:24:71:d6: 4f:62:d7:e8:31:2a:89:19:37:6b:28:5f:ae:8f:e1:90:3c:7d: a0:56:a1:be:30:8f:46:e3:34:59:48:8a:d8:7e:4c:df:6e:e7: 0c:66:33:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2imXfbz+nttcaKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MjQxMVoXDTI1MDEwNTE1MjQxMVowLzEtMCsGA1UEAxMk YjZiZmJjZTEtMmEyZi00NTViLWExZDItYzI5Nzg4YzI2MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbpEwiXwdJ4nl38lF2fUEANwLWF3zWAcU+Iy NaFw1TDRPSQJdbcoc9QtTdc5W8gmxulNrcVis3O1/RoQ4+zFUUHgNKh7/GgGGaWt zKizsR1hw9pTr4Dm8CM2ENysvLHlKYbGqzuWMsLptT0tzS3DJWpU92Y0znplWWvl U2LA+kClqQZFb4/StxJxcbvsVcO2fLaHbUiUjcK+Ba2xlger74N9yH51W0gZpAt2 JpC3cPBNXHweGvIDZI+J94wPnaoCDBI3Ls+DvK47049uC7p/vlPHMPDE4GmEiIlg QdHJQdxB1vmPA/di3fGgnyd6XbF5hsVU/KliE5xtWQxJxGAYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGms96exO5m2JonbGgKUx/aEEq52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYWQzNTQ3N2EtN2IzMy0z YWJmLWE5N2YtNzViNWE4OTI3NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNsetpMsIUFV4pQJ3TEdpD5CjATuuHXrVNYQZoTgoRltZmLsGzrhzuu sEf+C/RGOB8eh1n9VQUcuAj6Q5emFhZPpY+ab3pspDRw5xwd/pF7T+sKQbNUYk4s QKWzhCA7BjG45bB+LSgsFcH6It/MsYJuCoeIVn4lD9BTRS2XLAkp3nJcu3iK+RPA AmcTsCR4MSxvg1KzbmiFnBr7MIgnQfCvBrDTye2RJ3nFh5vaQgxaMZUIZ0aUsHEk YZDmJLhlLNCOF+Mvf20ySJpO1LQD5iME17ykYSRx1k9i1+gxKokZN2soX66P4ZA8 faBWob4wj0bjNFlIith+TN9u5wxmM2Y= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org