$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa File: b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa (raw, json) Hash identifier: jOQzZHXt/7GKaCkmZEQbzU6ZjdppaJ57xa4JMu3ZvWU= Subject key identifier: 11:78:BA:72:42:F6:17:68:A4:4B:C1:35:54:1A:19:24:89:3B:03:EB Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285847924BDE676231E3EB861EA200 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa Signing time: Thu 17 Oct 2024 13:00:42 +0000 ROA not before: Thu 17 Oct 2024 13:00:42 +0000 ROA not after: Wed 15 Jan 2025 14:00:42 +0000 asID: 11290 IP address blocks: 216.228.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:92:4b:de:67:62:31:e3:eb:86:1e:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Oct 17 13:00:42 2024 GMT Not After : Jan 15 14:00:42 2025 GMT Subject: CN=9c0ba9ac-488c-4fdb-88a4-03112dc52eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:30:ce:0f:2c:76:63:42:75:23:ab:cd:32: 06:1c:62:e8:0e:2b:23:2d:41:04:1f:92:f8:bb:00: 10:dc:0e:d7:f4:b7:1d:18:15:b7:0f:dc:30:24:93: af:c0:ee:6f:64:b0:13:71:50:8e:7f:ce:ed:01:bc: 27:4e:d6:d1:db:1d:f1:5a:6a:b5:1f:28:df:5d:7b: c5:47:fb:78:b0:95:3f:37:32:1e:60:e9:07:09:2f: 15:10:8e:e0:e9:0f:9b:f3:a9:15:82:0c:ff:3b:1f: 8d:87:0e:f3:0c:e4:f5:3c:44:34:64:3f:43:9f:29: 74:65:fa:0d:f3:1a:10:84:52:d9:a7:32:10:15:5e: 02:06:bd:f6:76:e1:7e:d0:d4:b6:9a:18:63:71:48: b8:e2:62:15:b9:90:84:45:58:9f:5d:63:ee:68:8f: 83:8c:56:c6:70:1c:18:8c:fe:b9:33:ca:df:63:8e: 05:f1:cb:07:81:43:0a:7a:5e:d4:46:41:ad:1a:26: 20:34:db:1a:e1:fc:21:07:fb:30:5b:05:e3:16:78: dd:10:7b:fe:14:90:35:42:8d:87:b9:cc:c4:cd:e8: 0b:08:6f:1d:e7:d8:f0:6e:59:b5:04:54:8d:2e:c7: 31:6e:c3:78:a8:8a:cf:7d:46:81:01:5f:f3:c1:70: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:78:BA:72:42:F6:17:68:A4:4B:C1:35:54:1A:19:24:89:3B:03:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 216.228.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ba:2d:46:0e:42:8c:aa:70:59:7d:fd:f7:1f:72:94:28:8d: 26:ce:67:20:17:72:53:80:7a:c9:b7:2a:9c:23:27:8f:fb:93: e1:82:4d:53:08:b0:0b:d6:ac:14:a5:cc:88:2c:06:4b:d3:0d: 1f:d1:23:b5:f3:44:7e:e0:fb:60:88:8a:75:df:8b:72:35:6e: 63:b4:ca:a0:b3:78:89:74:52:40:70:2b:45:94:cc:e6:5d:0d: bf:c0:1b:28:30:53:bd:20:76:0d:71:9a:77:6b:ab:43:47:20: 64:27:8e:ab:91:61:42:6d:5e:95:e7:90:8b:e0:62:18:d3:ec: c2:81:3d:d3:2a:a8:87:51:fa:c8:d2:72:ce:ae:98:80:31:26: 40:fd:a4:70:fe:0d:2f:22:02:b2:5b:3a:2e:e2:4c:67:38:d7: 30:2c:57:95:7f:9a:72:5d:8c:83:af:9c:81:dc:8a:b4:9c:55: 23:4f:48:b9:ca:1d:36:3f:30:4a:8e:6c:6b:32:1d:0a:95:16: 6b:b8:19:1e:e1:b9:c8:b8:18:44:29:fa:4b:59:52:7a:13:42: 36:9f:22:c9:cd:26:af:a3:2a:08:d6:a4:da:ba:16:f8:fd:df: a1:c4:b7:6b:b0:6e:80:b7:d3:d7:33:95:79:b7:c7:c4:d7:90: 2e:a7:54:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS95nYjHj64YeogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk OWMwYmE5YWMtNDg4Yy00ZmRiLTg4YTQtMDMxMTJkYzUyZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKEwzg8sdmNCdSOrzTIGHGLoDisjLUEEH5L4 uwAQ3A7X9LcdGBW3D9wwJJOvwO5vZLATcVCOf87tAbwnTtbR2x3xWmq1HyjfXXvF R/t4sJU/NzIeYOkHCS8VEI7g6Q+b86kVggz/Ox+Nhw7zDOT1PEQ0ZD9Dnyl0ZfoN 8xoQhFLZpzIQFV4CBr32duF+0NS2mhhjcUi44mIVuZCERVifXWPuaI+DjFbGcBwY jP65M8rfY44F8csHgUMKel7URkGtGiYgNNsa4fwhB/swWwXjFnjdEHv+FJA1Qo2H uczEzegLCG8d59jwblm1BFSNLscxbsN4qIrPfUaBAV/zwXDKzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF4unJC9hdopEvBNVQaGSSJOwPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjJlMmZjOGEtMWYzNi0z MTRlLTkzMDEtZWJmYzlmYmJiNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG6LUYOQoyqcFl9/fcfcpQojSbOZyAXclOAesm3KpwjJ4/7k+GCTVMI sAvWrBSlzIgsBkvTDR/RI7XzRH7g+2CIinXfi3I1bmO0yqCzeIl0UkBwK0WUzOZd Db/AGygwU70gdg1xmndrq0NHIGQnjquRYUJtXpXnkIvgYhjT7MKBPdMqqIdR+sjS cs6umIAxJkD9pHD+DS8iArJbOi7iTGc41zAsV5V/mnJdjIOvnIHcirScVSNPSLnK HTY/MEqObGsyHQqVFmu4GR7huci4GEQp+ktZUnoTQjafIsnNJq+jKgjWpNq6Fvj9 36HEt2uwboC309czlXm3x8TXkC6nVMI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org