$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa File: 9ec58a3b-8704-3120-b6b5-10e77d09643b.roa (raw, json) Hash identifier: 44yBgrb4w5Hv46j26hwOcaaR+89k6ck8Z04BBQOvGOM= Subject key identifier: 24:78:5C:A5:38:6A:6D:8A:6A:4D:7D:37:3C:83:B9:72:F9:C9:CA:66 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584733609B3E1980546CFBD78030 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa Signing time: Fri 13 Sep 2024 13:00:41 +0000 ROA not before: Fri 13 Sep 2024 13:00:41 +0000 ROA not after: Thu 12 Dec 2024 14:00:41 +0000 asID: 11650 IP address blocks: 159.242.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:33:60:9b:3e:19:80:54:6c:fb:d7:80:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Sep 13 13:00:41 2024 GMT Not After : Dec 12 14:00:41 2024 GMT Subject: CN=54417dd8-43f4-4855-9482-94bafe7ca52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:28:21:11:5b:8e:c8:59:31:25:11:45:99: b8:3b:23:d7:67:0d:a5:01:8b:5b:10:31:b6:74:57: c6:46:1a:8d:24:97:09:3e:ff:59:6a:7f:27:c6:b7: fb:1c:ea:6f:31:b8:3f:9c:c0:57:5c:db:b9:6e:90: 1a:38:a1:bb:ba:bf:b0:2e:ad:22:6e:14:f2:bf:31: 01:28:e1:24:9e:26:83:9a:a4:67:f9:11:48:c1:94: c3:77:70:3e:63:7e:58:7b:12:36:c4:64:dc:50:d4: bf:5c:eb:64:68:0a:1e:92:6b:0e:fb:aa:0a:fb:bc: 16:3b:08:ca:a4:63:c7:74:fc:22:b0:e9:57:ed:21: 05:a8:a7:34:58:6e:ba:91:c5:c7:1d:2e:3c:fc:59: 91:9b:a5:f9:77:b8:51:e9:8e:e7:b9:f4:b8:a9:a7: fb:41:4d:64:cb:9b:18:e9:da:b7:27:17:f8:a7:03: a4:67:ee:23:94:44:a5:70:0e:13:9b:2e:29:df:70: e3:75:81:22:45:b5:44:56:c9:ac:d2:ac:9c:8d:25: bc:5f:83:48:39:f9:01:2f:e7:4e:26:57:1b:34:8b: 08:c6:5f:5e:2c:b7:27:d2:3c:69:ae:c1:bb:2b:38: 23:09:10:f3:51:af:7b:e1:06:e0:1e:1f:15:09:41: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:78:5C:A5:38:6A:6D:8A:6A:4D:7D:37:3C:83:B9:72:F9:C9:CA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 159.242.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:31:41:f2:bb:54:e2:f2:5c:bf:4f:9d:2a:5c:53:50:bc:9d: 0a:23:f5:af:2b:56:1b:06:e0:f4:dd:03:cd:db:c8:56:b3:8d: a6:b4:04:02:de:da:58:2c:ee:e7:75:ba:8d:c8:ee:1f:23:1e: 34:a0:dc:63:e0:8a:35:b5:5b:38:7c:51:92:74:fc:2b:ae:cf: 4c:cb:59:00:10:ea:64:58:fd:43:08:68:aa:f8:78:23:42:07: 76:50:bf:04:b2:d8:94:dc:d5:5e:64:48:c5:95:11:ef:6e:73: 94:9b:b5:f7:61:b3:a2:59:57:ad:8f:23:64:f4:03:e8:21:d1: d0:ef:6b:20:91:27:53:f1:4f:e3:bd:d0:16:e2:14:83:12:06: c7:79:31:b4:53:c4:72:fe:7b:fa:e6:5d:1a:4f:02:66:eb:c0: d0:3c:50:58:5e:f5:90:58:b9:b6:d9:ab:74:59:c6:0f:18:96: aa:d0:23:da:68:55:f1:8c:68:1f:5d:5f:82:16:cb:7a:05:a0: e1:f1:35:34:5b:e7:38:1e:47:70:96:99:9a:14:a1:b0:72:e5: a0:dd:18:33:09:54:8a:3a:75:0c:8b:56:8f:d3:5e:ae:f0:75: 51:f0:00:5d:9c:bf:08:ea:4e:a5:5f:27:6e:a1:95:62:c5:4e: 5d:38:be:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYJs+GYBUbPvXgDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NTQ0MTdkZDgtNDNmNC00ODU1LTk0ODItOTRiYWZlN2NhNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTQoIRFbjshZMSURRZm4OyPXZw2lAYtbEDG2 dFfGRhqNJJcJPv9Zan8nxrf7HOpvMbg/nMBXXNu5bpAaOKG7ur+wLq0ibhTyvzEB KOEkniaDmqRn+RFIwZTDd3A+Y35YexI2xGTcUNS/XOtkaAoekmsO+6oK+7wWOwjK pGPHdPwisOlX7SEFqKc0WG66kcXHHS48/FmRm6X5d7hR6Y7nufS4qaf7QU1ky5sY 6dq3Jxf4pwOkZ+4jlESlcA4Tmy4p33DjdYEiRbVEVsms0qycjSW8X4NIOfkBL+dO JlcbNIsIxl9eLLcn0jxprsG7KzgjCRDzUa974QbgHh8VCUEHZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR4XKU4am2Kak19NzyDuXL5ycpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvOWVjNThhM2ItODcwNC0z MTIwLWI2YjUtMTBlNzdkMDk2NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn/LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUxQfK7VOLyXL9PnSpcU1C8nQoj9a8rVhsG4PTdA83byFazjaa0BALe 2lgs7ud1uo3I7h8jHjSg3GPgijW1Wzh8UZJ0/Cuuz0zLWQAQ6mRY/UMIaKr4eCNC B3ZQvwSy2JTc1V5kSMWVEe9uc5Sbtfdhs6JZV62PI2T0A+gh0dDvayCRJ1PxT+O9 0BbiFIMSBsd5MbRTxHL+e/rmXRpPAmbrwNA8UFhe9ZBYubbZq3RZxg8YlqrQI9po VfGMaB9dX4IWy3oFoOHxNTRb5zgeR3CWmZoUobBy5aDdGDMJVIo6dQyLVo/TXq7w dVHwAF2cvwjqTqVfJ26hlWLFTl04vjc= -----END CERTIFICATE-----Generated at Sun Nov 24 16:04:01 2024 by rpki-client on console-ams.rpki-client.org