$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa File: 844a9f17-b00f-3490-8954-09544703c001.roa (raw, json) Hash identifier: sc3ZaP6d+zv1EJ6rt7vbmtiH+IPkcMEH+i/TunIkAAY= Subject key identifier: 04:2E:CA:CF:63:82:E9:BC:26:FB:32:80:F2:4C:FA:26:1B:3E:21:9D Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F432858479D76B851317F39B0EE3BA090 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 13629 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b8:51:31:7f:39:b0:ee:3b:a0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=28bb510a-d27f-4a6e-8269-07d618b7817c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:89:e9:62:d9:d6:c3:3a:2f:23:ef:9b:8d:95: a2:68:ed:5e:15:bb:6e:8b:14:b2:c5:2a:c2:eb:17: 39:24:99:c3:1f:5a:1b:05:82:ce:de:56:8a:77:e4: 86:a5:6f:75:fe:24:9b:95:02:d4:6f:28:ea:06:46: f7:f6:c2:b4:19:0c:44:4a:9b:25:7b:1f:43:e5:1a: 9f:a0:a8:70:f2:b3:83:e3:74:7c:cc:21:64:00:b0: 9f:60:0c:48:3d:15:86:21:bd:0f:c8:f6:55:df:d9: a9:a0:0c:84:db:a5:6e:49:2c:b6:87:3e:f5:88:05: 2d:6f:0a:af:18:11:6d:75:b5:0b:34:b1:d3:3c:70: cf:d0:e3:70:6f:b8:b3:a7:c1:0f:95:38:db:58:c9: 2f:70:ab:d2:f6:1b:25:cf:fb:95:20:91:3f:ba:6c: 84:8c:dd:3d:a4:2c:d8:c7:23:05:11:69:1b:6f:83: 1a:9e:03:b2:64:23:8f:f2:58:f6:a8:94:af:4f:eb: 94:02:62:38:5c:d9:8b:06:7a:e1:50:72:5f:70:2f: 50:cf:05:29:c4:9f:45:33:6d:30:1b:8e:92:30:10: 50:2e:84:0b:f4:4d:28:a6:a4:90:96:e3:72:00:d4: ab:2e:96:47:da:d7:7b:a9:97:49:f7:b1:91:c5:e8: a1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2E:CA:CF:63:82:E9:BC:26:FB:32:80:F2:4C:FA:26:1B:3E:21:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:30:ca:1e:32:9e:03:02:a9:61:d2:a2:18:72:06:09:47:83: 6f:a9:4b:76:7b:c8:be:90:48:4f:fb:ce:02:14:16:c0:84:8c: be:c5:81:5c:a2:7e:85:a3:af:3f:b4:f5:d6:df:2b:2e:94:08: 20:0a:de:41:d8:9b:da:43:8f:da:f0:81:1f:91:49:0e:06:07: 90:8f:61:d7:ef:f4:b9:f4:35:68:c1:24:8f:25:f5:b4:04:0d: 82:8f:09:27:45:f0:96:c1:70:73:ae:60:b4:f2:d0:c8:1d:b1: 2a:a8:0e:d2:2a:72:50:e3:11:2e:c2:92:5a:b9:e1:6b:82:f6: 53:a6:5e:ab:e6:ed:63:fe:22:74:65:e4:33:2c:25:9a:41:22: 34:1c:7b:5c:7f:4a:9f:50:83:1b:70:6e:b3:3b:9b:1a:88:49: 5f:0b:69:dd:ac:f4:09:08:16:ad:53:06:7f:3d:da:1c:7d:a6: b0:81:dd:35:26:80:67:b4:cd:e0:9c:7c:90:31:a7:01:9b:cb: f2:bf:36:be:0d:30:67:ba:38:6f:fd:2a:9f:a4:f2:74:15:38: ca:97:e2:ab:7b:b8:63:1c:62:7d:a2:76:43:e3:ae:3f:ab:4f: 72:e2:41:15:1d:60:ef:d2:7c:50:67:0e:03:f8:3f:3f:3a:7b: b8:c4:4b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrhRMX85sO47oJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MjhiYjUxMGEtZDI3Zi00YTZlLTgyNjktMDdkNjE4Yjc4MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYnpYtnWwzovI++bjZWiaO1eFbtuixSyxSrC 6xc5JJnDH1obBYLO3laKd+SGpW91/iSblQLUbyjqBkb39sK0GQxESpslex9D5Rqf oKhw8rOD43R8zCFkALCfYAxIPRWGIb0PyPZV39mpoAyE26VuSSy2hz71iAUtbwqv GBFtdbULNLHTPHDP0ONwb7izp8EPlTjbWMkvcKvS9hslz/uVIJE/umyEjN09pCzY xyMFEWkbb4MangOyZCOP8lj2qJSvT+uUAmI4XNmLBnrhUHJfcC9QzwUpxJ9FM20w G46SMBBQLoQL9E0opqSQluNyANSrLpZH2td7qZdJ97GRxeihpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQuys9jgum8JvsygPJM+iYbPiGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvODQ0YTlmMTctYjAwZi0z NDkwLTg5NTQtMDk1NDQ3MDNjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYwyh4yngMCqWHSohhyBglHg2+pS3Z7yL6QSE/7zgIUFsCEjL7FgVyi foWjrz+09dbfKy6UCCAK3kHYm9pDj9rwgR+RSQ4GB5CPYdfv9Ln0NWjBJI8l9bQE DYKPCSdF8JbBcHOuYLTy0MgdsSqoDtIqclDjES7Cklq54WuC9lOmXqvm7WP+InRl 5DMsJZpBIjQce1x/Sp9QgxtwbrM7mxqISV8Lad2s9AkIFq1TBn892hx9prCB3TUm gGe0zeCcfJAxpwGby/K/Nr4NMGe6OG/9Kp+k8nQVOMqX4qt7uGMcYn2idkPjrj+r T3LiQRUdYO/SfFBnDgP4Pz86e7jES3k= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org