$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: inOFECHs7sdJjHlgiAD31LIRDsKuCAXWzp3cOwA2F00= Subject key identifier: 35:29:CE:6E:14:21:A8:E7:C5:69:D0:0D:5B:44:5C:A9:4E:5C:21:48 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F43285847D999F4AC0469B94D45EA8140 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f4:ac:04:69:b9:4d:45:ea:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=46258e86-c8ed-498d-87e2-40443a912dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:80:cf:57:d7:36:ba:b1:28:90:a2:68:b2: ee:34:2d:ef:b8:24:e7:e3:37:34:5c:bf:d4:d5:a0: 71:dc:c3:e7:26:f9:ff:92:d4:76:44:4d:16:71:07: 44:c7:4e:8a:de:b2:de:5d:86:4e:2f:60:cb:6f:00: ad:67:c4:fa:fa:07:45:36:b6:89:39:97:25:64:06: f4:b6:e4:d8:f8:e1:3c:c6:39:c0:ad:09:0a:f1:c4: 17:ec:a6:1d:d9:40:90:df:35:61:35:e0:e6:24:06: de:61:58:ec:a7:ba:06:01:a8:b2:bf:b2:25:ad:c8: f5:87:ac:d9:f5:4b:a0:2c:ce:5a:6d:d2:d4:86:1e: 7f:07:44:0f:2f:29:5b:5a:92:3e:b7:b7:89:13:46: 9f:65:9d:7d:05:5e:c9:f9:52:f8:6c:42:48:a5:2b: a4:61:d8:f7:c6:ad:52:75:54:87:52:b8:30:ad:fa: b0:85:d7:be:e2:fe:d1:6f:fe:d6:5d:da:6d:11:70: 98:37:b3:80:3d:d5:41:56:e4:37:20:98:15:7e:cc: 67:5f:1a:48:4c:fa:a4:1c:21:fd:55:f5:99:8d:a4: 9a:d9:4e:4e:69:e7:aa:15:22:c3:60:de:14:7e:69: e0:a7:a5:ac:9c:7a:92:ab:52:97:fe:6f:58:8a:ab: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:29:CE:6E:14:21:A8:E7:C5:69:D0:0D:5B:44:5C:A9:4E:5C:21:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c1:a1:27:d8:1a:d0:50:b4:41:a2:4c:8c:da:f3:bb:cf:62: 48:04:ba:1c:e6:08:f4:f4:bc:83:99:eb:58:ce:78:df:3e:71: 41:8d:05:51:d1:6a:64:c1:83:90:6e:b2:5c:b5:19:fe:f0:98: 0b:d1:39:ed:8e:41:bd:eb:25:bd:7e:69:b2:ae:50:3b:56:47: d6:7f:42:f6:f8:2b:7e:96:6a:fa:fb:3e:a1:f1:01:e0:29:78: 4c:d3:09:01:e7:3a:0d:8b:35:2b:a6:7e:92:b5:9f:e4:43:49: 15:07:b5:e8:1c:20:1e:e3:04:b6:65:0d:42:d9:de:ff:fd:56: 70:d8:55:77:b3:0e:a1:ab:19:71:e1:26:44:0b:c5:6d:bf:63: 6e:93:a9:09:91:da:7a:62:9c:04:df:44:0b:34:7a:fb:22:f3: 27:c4:5c:7b:77:a3:9b:03:79:26:ad:59:dc:4d:65:dc:28:34: 5a:2a:9a:29:74:7d:85:55:d6:c7:86:3e:99:ab:bc:55:ad:72: 15:8a:c8:db:a8:49:55:09:03:95:b0:cb:75:58:28:78:51:e6: 27:7f:c4:f9:54:3b:d5:81:2a:52:00:6a:f8:d2:2e:ba:3c:52: c1:b4:27:fb:c3:65:0e:e3:82:1a:04:23:6b:03:b6:5d:34:86: 88:b9:0c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfSsBGm5TUXqgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk NDYyNThlODYtYzhlZC00OThkLTg3ZTItNDA0NDNhOTEyZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wKAz1fXNrqxKJCiaLLuNC3vuCTn4zc0XL/U 1aBx3MPnJvn/ktR2RE0WcQdEx06K3rLeXYZOL2DLbwCtZ8T6+gdFNraJOZclZAb0 tuTY+OE8xjnArQkK8cQX7KYd2UCQ3zVhNeDmJAbeYVjsp7oGAaiyv7Ilrcj1h6zZ 9UugLM5abdLUhh5/B0QPLylbWpI+t7eJE0afZZ19BV7J+VL4bEJIpSukYdj3xq1S dVSHUrgwrfqwhde+4v7Rb/7WXdptEXCYN7OAPdVBVuQ3IJgVfsxnXxpITPqkHCH9 VfWZjaSa2U5OaeeqFSLDYN4Ufmngp6WsnHqSq1KX/m9YiqtoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUpzm4UIajnxWnQDVtEXKlOXCFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfBoSfYGtBQtEGiTIza87vPYkgEuhzmCPT0vIOZ61jOeN8+cUGNBVHR amTBg5Busly1Gf7wmAvROe2OQb3rJb1+abKuUDtWR9Z/Qvb4K36Wavr7PqHxAeAp eEzTCQHnOg2LNSumfpK1n+RDSRUHtegcIB7jBLZlDULZ3v/9VnDYVXezDqGrGXHh JkQLxW2/Y26TqQmR2npinATfRAs0evsi8yfEXHt3o5sDeSatWdxNZdwoNFoqmil0 fYVV1seGPpmrvFWtchWKyNuoSVUJA5Wwy3VYKHhR5id/xPlUO9WBKlIAavjSLro8 UsG0J/vDZQ7jghoEI2sDtl00hoi5DDE= -----END CERTIFICATE-----Generated at Mon Nov 25 16:00:52 2024 by rpki-client on console-fra.rpki-client.org