$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa File: 9814d97b-c411-3c0f-aac7-5659a975f78a.roa (raw, json) Hash identifier: aC9v9YIw07PzSD0Xfxk+GDWadH3DOcf9Rfk8r7BlEsI= Subject key identifier: 86:58:12:29:52:5E:8F:10:6A:09:87:8B:70:E6:40:F2:63:C1:DA:F4 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285847E8F4CA297D84A140AA599EA0 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 33322 IP address blocks: 208.71.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:ca:29:7d:84:a1:40:aa:59:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=a694a567-008b-488e-af47-e164085b7efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:a2:e0:38:6d:f8:6a:e1:26:af:21:37:af: 50:99:12:1e:3e:91:fe:3b:18:c7:27:b4:0e:02:58: a5:12:12:b2:3e:7f:e1:0f:7c:ee:b6:fc:b0:fe:7a: 39:f1:6e:05:c4:c8:66:26:be:ad:9a:41:98:89:7c: cf:05:68:0e:93:19:1b:41:e9:f4:61:48:4e:30:58: fe:44:2a:3b:94:5f:64:fd:58:e0:c1:94:0e:89:73: 00:82:69:55:20:e6:2d:77:9e:9c:6d:b6:6c:68:e7: f8:cb:0d:4f:81:3c:6a:25:a4:f8:30:24:b3:20:81: 1c:b1:94:01:c2:42:e3:28:71:a1:25:03:96:42:b8: ef:22:a6:7a:de:0f:ea:0d:05:2a:d4:b2:6c:47:fb: 74:8a:f0:f1:ea:e0:06:12:9a:95:19:16:fc:ec:df: 9a:79:b1:30:1c:67:5a:de:c5:68:67:47:d3:86:2c: d9:64:c6:b0:9d:4a:f4:db:d5:10:78:00:59:25:12: 8f:dd:5a:a8:c0:ed:dd:36:c6:cc:95:23:9a:8a:57: 23:f4:df:56:c2:7e:d8:d5:1b:13:2d:04:09:5b:d1: 5d:fc:19:9d:33:82:f4:c9:08:f4:50:ec:a8:47:00: 7d:5d:22:c5:7b:31:16:2e:46:63:73:99:ff:38:ad: c5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:58:12:29:52:5E:8F:10:6A:09:87:8B:70:E6:40:F2:63:C1:DA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 208.71.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4b:c0:bd:b6:c9:74:cb:70:db:3a:91:ef:54:3f:59:a3:97: 9f:69:7b:69:72:47:1c:9a:bc:81:99:a1:d4:2c:8d:6c:4a:08: 08:6d:94:91:5e:b1:df:c5:60:ba:2a:0d:70:a1:6f:65:7e:50: 4d:f4:3b:de:9a:3f:55:0f:e2:44:b8:9d:32:49:57:ed:69:84: 61:aa:0c:13:07:81:07:11:f4:45:ef:bd:a0:d6:07:99:3e:6a: ad:60:ca:d6:1b:e2:50:84:83:a1:39:f8:9e:d4:42:01:9c:12: ea:81:8d:a2:85:e0:be:44:be:f7:ec:97:d9:78:83:d2:be:cf: 8a:f7:f4:53:4d:a4:27:0f:fc:fd:48:b8:fe:eb:0d:57:67:17: ae:7f:80:05:9b:ac:3e:25:3c:2a:5b:7d:fe:ee:fc:67:e0:7f: 88:e1:4e:5d:b4:b9:33:d1:74:1b:f7:2e:b0:24:c4:47:ac:57: a4:3e:fe:c3:a1:a3:26:9a:1d:3a:a0:48:1a:4f:19:2e:ab:d6: 76:c2:4f:0a:4b:06:17:34:08:27:59:ee:f3:72:bb:56:a4:d9: ba:67:b6:7c:21:85:b3:6f:00:c2:f4:0b:10:af:2c:ea:b4:bc: 97:25:73:04:ca:96:94:87:43:cf:fa:dd:8f:31:62:bd:1b:83: 0f:83:48:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9MopfYShQKpZnqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YTY5NGE1NjctMDA4Yi00ODhlLWFmNDctZTE2NDA4NWI3ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdai4Dht+GrhJq8hN69QmRIePpH+OxjHJ7QO AlilEhKyPn/hD3zutvyw/no58W4FxMhmJr6tmkGYiXzPBWgOkxkbQen0YUhOMFj+ RCo7lF9k/VjgwZQOiXMAgmlVIOYtd56cbbZsaOf4yw1PgTxqJaT4MCSzIIEcsZQB wkLjKHGhJQOWQrjvIqZ63g/qDQUq1LJsR/t0ivDx6uAGEpqVGRb87N+aebEwHGda 3sVoZ0fThizZZMawnUr029UQeABZJRKP3VqowO3dNsbMlSOailcj9N9Wwn7Y1RsT LQQJW9Fd/BmdM4L0yQj0UOyoRwB9XSLFezEWLkZjc5n/OK3FEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZYEilSXo8QagmHi3DmQPJjwdr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOTgxNGQ5N2ItYzQxMS0z YzBmLWFhYzctNTY1OWE5NzVmNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVLwL22yXTLcNs6ke9UP1mjl59pe2lyRxyavIGZodQsjWxKCAhtlJFe sd/FYLoqDXChb2V+UE30O96aP1UP4kS4nTJJV+1phGGqDBMHgQcR9EXvvaDWB5k+ aq1gytYb4lCEg6E5+J7UQgGcEuqBjaKF4L5Evvfsl9l4g9K+z4r39FNNpCcP/P1I uP7rDVdnF65/gAWbrD4lPCpbff7u/Gfgf4jhTl20uTPRdBv3LrAkxEesV6Q+/sOh oyaaHTqgSBpPGS6r1nbCTwpLBhc0CCdZ7vNyu1ak2bpntnwhhbNvAML0CxCvLOq0 vJclcwTKlpSHQ8/63Y8xYr0bgw+DSI4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:28 2024 by rpki-client on console-ams.rpki-client.org