$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa File: 505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa (raw, json) Hash identifier: 3Jrk1GHlBFUbFjoivvS5r6Hh6O0vcf+N2sE5vDR2ud8= Subject key identifier: 16:BE:42:87:8B:92:4C:1E:63:0E:BF:AD:E4:A8:6F:57:88:96:BD:17 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F43285847CF2580D97663EF9C4D6A8F80 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa Signing time: Fri 08 Nov 2024 08:07:51 +0000 ROA not before: Fri 08 Nov 2024 08:07:51 +0000 ROA not after: Thu 06 Feb 2025 08:07:51 +0000 asID: 30144 IP address blocks: 208.85.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:25:80:d9:76:63:ef:9c:4d:6a:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Nov 8 08:07:51 2024 GMT Not After : Feb 6 08:07:51 2025 GMT Subject: CN=20c73b26-f37e-4fa5-9ed4-acb6e67939f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:f0:45:bd:5d:63:01:e9:4b:84:86:de:c7: 25:eb:6c:a0:bb:7c:06:ad:64:02:9f:cf:45:8b:56: f6:76:d3:ec:62:0f:ac:6f:a2:15:b9:2e:0e:94:aa: dd:10:fe:92:ae:45:d9:e6:2d:fa:ec:52:bb:df:11: 0c:d1:38:69:f1:46:6f:2a:91:3e:4a:8e:7c:88:8d: b4:0b:be:ab:3c:a6:81:9a:32:02:9e:4a:2f:b7:20: d6:14:8e:62:c7:af:d2:9f:ae:33:65:86:36:11:dc: 84:7b:00:ef:f5:3d:ed:84:e3:40:ef:5b:27:4c:17: 2c:35:c3:fb:e5:00:66:84:74:dd:39:38:94:fe:85: 6e:42:48:50:5a:da:84:5b:37:a4:59:7e:ff:50:2c: f1:52:fe:d3:a5:75:a9:c3:55:32:fc:ce:68:1a:59: cc:ec:c5:db:4c:3a:44:17:62:c5:b4:f0:ae:6c:e6: 60:e5:e8:03:29:21:7e:dc:11:fc:a8:16:47:5d:87: 51:65:3b:fd:7b:d2:89:cd:38:28:c3:cb:ad:33:b8: c3:3d:25:1e:1f:02:39:ab:f8:df:96:b1:ff:89:a1: 9a:45:85:98:77:7c:74:85:45:bb:63:e0:96:45:07: 00:55:85:bc:7c:fb:f9:66:a0:1c:5f:1d:77:18:4a: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BE:42:87:8B:92:4C:1E:63:0E:BF:AD:E4:A8:6F:57:88:96:BD:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv4: 208.85.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1c:4b:6d:eb:68:a0:5c:29:2a:23:22:4c:4c:db:ca:6b:dc: c9:b7:d8:23:2a:1b:5b:24:45:81:37:95:30:3a:d0:50:15:cf: d4:05:77:12:72:3c:a9:0d:8f:46:f1:cd:f8:a2:98:86:75:01: b7:d5:5f:f3:92:9f:e8:26:1b:26:f3:fe:db:64:41:d3:2e:a6: 9d:43:53:0d:81:b8:bc:40:ad:7a:7f:b3:c6:01:02:86:31:f5: 63:00:64:ca:66:e7:24:e1:fc:a0:98:84:bd:37:3d:4a:62:23: e8:fc:0d:c3:b5:42:05:b3:a4:e8:3c:ca:31:15:d6:c5:80:09: 48:27:42:32:9d:b0:45:32:1d:b8:c3:ca:fc:53:a8:6c:75:37: 76:db:4c:37:17:34:4e:53:49:5b:ff:84:24:5d:70:2f:58:b5: 04:e7:fe:44:87:56:68:e9:4e:2e:47:d4:b7:c8:d8:f4:17:95: 9d:04:01:97:17:0e:0c:37:6e:53:16:1f:dc:72:27:1c:b6:66: ee:94:20:39:91:27:48:52:72:f9:95:52:56:83:60:c5:e3:f6: d7:61:26:cf:2b:49:95:0f:12:b1:c8:d2:12:df:01:dd:0d:72: af:bd:d4:8b:b4:74:46:71:ce:a5:dc:e9:80:e6:24:b5:59:6c: 51:68:04:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfPJYDZdmPvnE1qj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI0MTEwODA4MDc1MVoXDTI1MDIwNjA4MDc1MVowLzEtMCsGA1UEAxMk MjBjNzNiMjYtZjM3ZS00ZmE1LTllZDQtYWNiNmU2NzkzOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH7wRb1dYwHpS4SG3scl62ygu3wGrWQCn89F i1b2dtPsYg+sb6IVuS4OlKrdEP6SrkXZ5i367FK73xEM0Thp8UZvKpE+So58iI20 C76rPKaBmjICnkovtyDWFI5ix6/Sn64zZYY2EdyEewDv9T3thONA71snTBcsNcP7 5QBmhHTdOTiU/oVuQkhQWtqEWzekWX7/UCzxUv7TpXWpw1Uy/M5oGlnM7MXbTDpE F2LFtPCubOZg5egDKSF+3BH8qBZHXYdRZTv9e9KJzTgow8utM7jDPSUeHwI5q/jf lrH/iaGaRYWYd3x0hUW7Y+CWRQcAVYW8fPv5ZqAcXx13GEqNZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa+QoeLkkweYw6/reSob1eIlr0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvNTA1YWU1MWQtNjBmZS0z ZTFmLTg4YTYtYzgwZTYxNzBiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgcS23raKBcKSojIkxM28pr3Mm32CMqG1skRYE3lTA60FAVz9QFdxJy PKkNj0bxzfiimIZ1AbfVX/OSn+gmGybz/ttkQdMupp1DUw2BuLxArXp/s8YBAoYx 9WMAZMpm5yTh/KCYhL03PUpiI+j8DcO1QgWzpOg8yjEV1sWACUgnQjKdsEUyHbjD yvxTqGx1N3bbTDcXNE5TSVv/hCRdcC9YtQTn/kSHVmjpTi5H1LfI2PQXlZ0EAZcX Dgw3blMWH9xyJxy2Zu6UIDmRJ0hScvmVUlaDYMXj9tdhJs8rSZUPErHI0hLfAd0N cq+91Iu0dEZxzqXc6YDmJLVZbFFoBEM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:40:18 2024 by rpki-client on console-ams.rpki-client.org