$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa File: b9b41ebd-8408-373c-9f8a-7115febbd080.roa (raw, json) Hash identifier: 1j8jkYxN8t8zQR2KELwAjlcujdvJ3XjLr+we+Za0+no= Subject key identifier: AE:56:05:F0:EE:FD:17:14:57:F7:8C:9C:BF:64:F1:E8:32:F4:BA:53 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584776968CFEC4A1B84200B21100 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa Signing time: Mon 07 Oct 2024 14:48:41 +0000 ROA not before: Mon 07 Oct 2024 14:48:41 +0000 ROA not after: Sun 05 Jan 2025 15:48:41 +0000 asID: 398210 IP address blocks: 207.211.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:96:8c:fe:c4:a1:b8:42:00:b2:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:48:41 2024 GMT Not After : Jan 5 15:48:41 2025 GMT Subject: CN=97ed2800-ce10-4104-ac0f-9aea76595f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:51:99:e7:95:93:a2:1b:b9:3c:47:14:80: a4:16:d2:57:80:c1:f8:14:a6:d0:a9:d2:21:6d:4f: 34:08:c6:2a:3b:a9:68:a9:50:c6:1a:0f:8b:42:e5: 9a:b9:a8:28:2d:59:04:a2:74:4c:9f:fc:8e:51:fa: fa:e4:ae:31:45:c9:1a:13:b0:bd:b9:63:b8:99:ca: 8b:23:d1:40:90:49:1a:ef:fe:bb:cc:1b:45:09:3b: 54:c6:28:a2:83:b2:5f:ee:3c:80:f7:81:94:7e:c7: 9d:51:4d:b1:06:59:9a:18:23:f4:45:03:f7:cc:df: fb:60:d3:cc:30:68:28:a5:74:49:bb:f8:2b:37:c3: 54:41:fb:c0:e0:05:9a:1c:25:ca:a4:e2:ff:31:fe: 33:f5:40:40:42:cd:6e:fb:fb:ea:26:50:35:9c:1d: 7a:5b:fb:dc:75:e2:c4:2e:37:93:16:10:20:db:0c: 0b:75:35:35:7f:09:c9:54:d2:0d:76:44:81:9f:db: c2:7a:33:86:8f:8a:8f:58:8a:bc:2f:59:6a:6f:2d: 0d:55:52:1b:9a:0d:8b:cb:68:f9:c5:e6:20:6d:1c: 5c:c5:68:f6:f0:9f:c8:67:d5:6a:fa:04:e1:40:71: 5b:c1:f7:7c:4f:b4:6e:bc:5c:fd:9e:97:fe:ca:82: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:56:05:F0:EE:FD:17:14:57:F7:8C:9C:BF:64:F1:E8:32:F4:BA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:45:64:68:ab:25:c7:02:54:2b:ec:fc:6f:4e:8f:ab:63:55: b9:57:a5:32:fa:59:6c:e8:08:c3:12:4c:f7:fb:74:8f:a6:da: df:86:be:63:21:ed:db:f9:e0:db:20:3d:e0:2f:86:ec:88:29: a8:1d:45:b3:a9:16:d9:6c:55:a5:6c:16:95:95:5e:aa:05:a1: 03:8d:36:b4:a7:cc:2a:6f:3b:c7:c5:db:40:fb:4a:a2:26:7a: 1c:cd:d5:f2:80:c5:41:27:74:6b:0c:be:1f:21:76:cc:e5:2f: 7d:1f:40:49:81:c0:19:0e:1a:4e:8b:66:76:f4:cd:0c:52:b9: 95:7d:03:34:85:e3:67:25:a6:47:45:18:c7:12:be:99:6f:80: 41:d9:3a:80:94:11:8f:9f:fa:73:6f:cc:83:b3:e2:f9:57:a9: 15:a4:82:73:1a:96:66:90:e3:ab:76:d6:d1:ef:45:95:b2:8d: 05:5f:df:0a:52:57:55:5d:82:69:fa:c4:c6:c0:57:cb:a4:4a: 96:54:d5:d9:73:c6:4b:63:1f:b9:cb:c6:2a:01:2a:0a:5e:d0: ee:97:55:35:33:e8:3c:4f:ee:66:eb:39:32:19:0d:e1:8d:25: 5f:4c:5f:ff:de:ae:0b:0c:c6:83:58:da:02:b6:7f:b0:95:b3: 8a:75:45:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2loz+xKG4QgCyEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0NDg0MVoXDTI1MDEwNTE1NDg0MVowLzEtMCsGA1UEAxMk OTdlZDI4MDAtY2UxMC00MTA0LWFjMGYtOWFlYTc2NTk1ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQJRmeeVk6IbuTxHFICkFtJXgMH4FKbQqdIh bU80CMYqO6loqVDGGg+LQuWauagoLVkEonRMn/yOUfr65K4xRckaE7C9uWO4mcqL I9FAkEka7/67zBtFCTtUxiiig7Jf7jyA94GUfsedUU2xBlmaGCP0RQP3zN/7YNPM MGgopXRJu/grN8NUQfvA4AWaHCXKpOL/Mf4z9UBAQs1u+/vqJlA1nB16W/vcdeLE LjeTFhAg2wwLdTU1fwnJVNINdkSBn9vCejOGj4qPWIq8L1lqby0NVVIbmg2Ly2j5 xeYgbRxcxWj28J/IZ9Vq+gThQHFbwfd8T7RuvFz9npf+yoKIewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5WBfDu/RcUV/eMnL9k8egy9LpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYjliNDFlYmQtODQwOC0z NzNjLTlmOGEtNzExNWZlYmJkMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpFZGirJccCVCvs/G9Oj6tjVblXpTL6WWzoCMMSTPf7dI+m2t+GvmMh 7dv54NsgPeAvhuyIKagdRbOpFtlsVaVsFpWVXqoFoQONNrSnzCpvO8fF20D7SqIm ehzN1fKAxUEndGsMvh8hdszlL30fQEmBwBkOGk6LZnb0zQxSuZV9AzSF42clpkdF GMcSvplvgEHZOoCUEY+f+nNvzIOz4vlXqRWkgnMalmaQ46t21tHvRZWyjQVf3wpS V1Vdgmn6xMbAV8ukSpZU1dlzxktjH7nLxioBKgpe0O6XVTUz6DxP7mbrOTIZDeGN JV9MX//ergsMxoNY2gK2f7CVs4p1Rew= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:28 2024 by rpki-client on console-fra.rpki-client.org