$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa File: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (raw, json) Hash identifier: eTzChC1Eah3Ks9LTlu95hFn4lTRV/x3jGCYst/LjMBs= Subject key identifier: B6:A4:2C:B8:63:BC:AD:61:62:27:72:65:77:52:7F:7B:4C:77:A9:77 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F432858477680E70D1BF8A399216507C0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa Signing time: Mon 07 Oct 2024 14:05:03 +0000 ROA not before: Mon 07 Oct 2024 14:05:03 +0000 ROA not after: Sun 05 Jan 2025 15:05:03 +0000 asID: 398210 IP address blocks: 168.220.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:80:e7:0d:1b:f8:a3:99:21:65:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Oct 7 14:05:03 2024 GMT Not After : Jan 5 15:05:03 2025 GMT Subject: CN=393becf7-3cd4-4f1f-a728-309090aa3ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:52:b9:89:64:3f:7f:8d:fc:52:7f:3f:81:41: 91:52:18:a7:16:13:e6:b6:33:9d:e6:45:04:34:9c: 27:d2:9a:b7:78:37:f6:63:e1:d5:a9:b2:8d:4e:30: 93:51:fb:10:d3:88:46:cf:77:c7:39:b8:a7:a2:2a: 96:42:c9:00:18:68:4c:05:97:83:5b:9e:95:60:b0: da:3c:e5:79:f1:24:26:09:9b:b1:2b:a1:5d:df:3b: cb:f7:49:d0:69:76:02:f7:f4:de:29:73:f6:6e:ad: 40:a7:53:f5:82:05:23:c1:33:96:4a:93:8d:8c:6a: 0f:89:ee:c0:77:0d:99:c0:70:28:e4:bd:f0:49:d8: ed:9e:b8:2d:0c:61:e7:44:08:9c:8f:45:ee:a3:07: 4a:6b:62:6c:4a:98:d2:1d:41:7d:af:30:17:ee:54: de:3f:f1:be:6e:17:ca:e2:fd:aa:64:9c:9a:94:ad: f1:52:66:0e:b8:a2:4e:6a:cc:e3:bb:a0:7b:d5:ae: a7:b4:ab:e2:cd:b1:e0:e2:f1:a6:11:e3:02:58:ca: a0:f5:73:fe:34:6a:06:98:b0:2e:c9:46:5e:81:46: ef:bc:26:1a:d3:6b:d4:7e:7e:56:85:d0:20:d2:6e: ef:e3:af:77:9b:d4:80:dc:ab:4c:a9:06:02:d7:29: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:2C:B8:63:BC:AD:61:62:27:72:65:77:52:7F:7B:4C:77:A9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1a:7d:5b:ee:c0:04:83:20:8b:0c:03:63:33:07:b0:4a:92: 8f:3f:17:03:00:d6:10:24:5d:e5:08:ae:98:26:b2:04:48:64: 01:7a:1c:dd:51:fd:1f:41:59:17:34:e2:e8:2c:51:a8:01:25: 43:b5:bb:14:1a:58:b8:9d:45:40:49:5e:62:da:64:be:dc:d4: b0:8f:e6:84:45:d8:89:e0:e2:d8:d8:38:3f:9f:e0:59:88:05: 69:9f:b6:61:c6:96:35:7a:fa:b7:a2:a2:18:f1:27:e7:5b:17: b4:56:05:14:44:e7:8c:1f:51:52:3c:4c:61:a3:96:ed:80:03: b9:3d:7e:26:1f:aa:a5:e7:10:fc:bf:ff:4a:64:fa:4b:80:7c: 46:fd:73:b5:37:9a:30:38:5d:50:70:e6:f3:b6:08:25:e8:e5: 68:a9:f4:f5:d5:6a:a4:b8:15:04:05:09:bd:42:28:a5:83:a3: 43:42:18:ec:8b:70:d8:dd:b0:cf:46:c7:ae:d7:e3:cf:40:39: 40:00:f4:6e:57:9f:48:14:4b:da:02:e8:7d:16:28:b3:79:ad: 3f:a6:6a:c4:d2:42:60:f4:8d:46:1c:a5:38:ea:0e:a4:89:eb: df:be:08:b4:61:a7:4d:64:c6:f0:52:2f:b7:0f:cd:ce:ba:4a: 9f:09:7b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2gOcNG/ijmSFlB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI0MTAwNzE0MDUwM1oXDTI1MDEwNTE1MDUwM1owLzEtMCsGA1UEAxMk MzkzYmVjZjctM2NkNC00ZjFmLWE3MjgtMzA5MDkwYWEzY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1K5iWQ/f438Un8/gUGRUhinFhPmtjOd5kUE NJwn0pq3eDf2Y+HVqbKNTjCTUfsQ04hGz3fHObinoiqWQskAGGhMBZeDW56VYLDa POV58SQmCZuxK6Fd3zvL90nQaXYC9/TeKXP2bq1Ap1P1ggUjwTOWSpONjGoPie7A dw2ZwHAo5L3wSdjtnrgtDGHnRAicj0XuowdKa2JsSpjSHUF9rzAX7lTeP/G+bhfK 4v2qZJyalK3xUmYOuKJOaszju6B71a6ntKvizbHg4vGmEeMCWMqg9XP+NGoGmLAu yUZegUbvvCYa02vUfn5WhdAg0m7v4693m9SA3KtMqQYC1ynvBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLakLLhjvK1hYidyZXdSf3tMd6l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRhYTEyMzYtZGI0OS0z MjNkLTg2MzQtYjVjN2I4MjI0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgafVvuwASDIIsMA2MzB7BKko8/FwMA1hAkXeUIrpgmsgRIZAF6HN1R /R9BWRc04ugsUagBJUO1uxQaWLidRUBJXmLaZL7c1LCP5oRF2Ing4tjYOD+f4FmI BWmftmHGljV6+reiohjxJ+dbF7RWBRRE54wfUVI8TGGjlu2AA7k9fiYfqqXnEPy/ /0pk+kuAfEb9c7U3mjA4XVBw5vO2CCXo5Wip9PXVaqS4FQQFCb1CKKWDo0NCGOyL cNjdsM9Gx67X489AOUAA9G5Xn0gUS9oC6H0WKLN5rT+masTSQmD0jUYcpTjqDqSJ 69++CLRhp01kxvBSL7cPzc66Sp8Je5E= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org