$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json) Hash identifier: 6d81meb8g8qLgnfOdqAdgpgSBcnICGzhK89u1VeGXSc= Subject key identifier: 4F:C0:4E:75:32:27:03:C3:DF:2D:16:E4:19:33:43:56:0D:E3:48:23 Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Certificate serial: 010D0C9F4328584704BBB2C9E041473FC1079200 Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa Signing time: Tue 27 Aug 2024 20:01:22 +0000 ROA not before: Tue 27 Aug 2024 20:01:22 +0000 ROA not after: Mon 25 Nov 2024 21:01:22 +0000 asID: 18612 IP address blocks: 204.14.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:04:bb:b2:c9:e0:41:47:3f:c1:07:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Validity Not Before: Aug 27 20:01:22 2024 GMT Not After : Nov 25 21:01:22 2024 GMT Subject: CN=ee9c4fcb-5576-4a00-8588-57b51933d552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:1a:85:84:e8:6e:b5:f8:ba:7a:2c:f1:91: 1c:9e:81:8f:35:f5:36:11:63:3c:e0:65:97:ca:0f: 02:26:1f:97:2d:1a:e5:11:93:33:da:e7:fd:30:df: ac:1a:47:cd:e1:c5:5b:b2:07:0b:7d:5b:aa:aa:a1: c5:b8:d8:fe:2a:8b:ff:2b:e3:c7:46:c7:5c:e2:91: 7a:3a:81:e5:1d:9c:17:0e:26:1a:27:91:db:a9:7a: ee:41:6a:90:64:47:32:9f:c3:94:eb:d1:8f:b0:53: 72:0d:06:f5:85:51:7c:66:84:b1:a4:f9:b8:43:0a: 8f:fc:7a:4e:80:28:c3:a7:6f:47:8c:bf:42:42:70: 81:82:3c:0b:1d:3d:04:9f:c1:2f:d7:9a:a4:b8:09: 98:33:2a:6c:48:f9:e3:34:37:90:c7:db:51:ec:04: ac:ab:41:6d:2b:52:0d:dc:13:40:7c:72:df:e6:ad: 2f:6a:d4:37:bf:c8:9e:4f:c3:c3:af:f0:13:be:68: be:95:04:89:ab:09:cc:b4:9f:4c:cf:9f:fc:e0:81: f4:9d:42:9d:51:6c:7b:f6:d3:b0:96:fe:dd:85:4d: 17:b5:13:f4:75:be:55:3c:97:b3:00:3c:cf:6d:fb: b1:13:f3:38:80:db:ed:d8:c3:2b:52:3c:49:b5:b7: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C0:4E:75:32:27:03:C3:DF:2D:16:E4:19:33:43:56:0D:E3:48:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl X509v3 Authority Key Identifier: keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer sbgp-ipAddrBlock: critical IPv4: 204.14.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:69:6c:e9:e7:35:bf:19:db:d2:67:7e:86:bc:df:15:ce:b5: 54:46:4a:ea:77:22:85:20:56:f5:73:c5:3a:39:ba:f9:b2:52: 31:99:d4:b3:23:d3:0c:1c:d0:91:00:de:24:6b:53:e3:76:67: b7:c6:7a:2a:fc:32:c0:56:de:6c:54:89:66:f0:74:eb:89:9c: 07:0b:59:d6:88:33:52:d2:c2:2d:a2:71:73:ad:0a:2c:24:fb: 3a:7e:d1:90:76:d9:7d:60:89:7b:af:13:16:88:12:f0:f8:8d: f1:36:39:29:42:67:27:9d:7f:3a:84:3a:a7:cf:23:80:fb:b9: 59:58:38:bb:4f:f2:2a:97:1f:ab:c9:5f:01:98:4f:02:25:71: b1:02:dd:e3:91:f6:de:8d:a5:31:8f:89:68:00:d0:f9:21:6c: cb:4e:43:25:5f:e7:8c:35:a9:25:a3:ed:fd:92:2a:13:0b:f4: 02:ea:2d:8a:84:ea:6e:b5:55:99:fa:79:00:88:a1:cf:f3:a7: 5f:18:0a:ce:6e:23:4b:43:ec:04:1a:9d:0b:5e:8a:bd:d9:57: b9:2c:0a:ed:eb:43:07:89:9d:84:26:88:f1:15:8d:9c:c2:24: ab:ff:19:d8:81:21:9b:55:f6:c0:57:c5:a2:a8:5f:32:23:71: b2:5b:d8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcEu7LJ4EFHP8EHkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMDhlNWMtNzllNC00Njk3LWEwMmUtZjM3ZWEyZGIy ODljMB4XDTI0MDgyNzIwMDEyMloXDTI0MTEyNTIxMDEyMlowLzEtMCsGA1UEAxMk ZWU5YzRmY2ItNTU3Ni00YTAwLTg1ODgtNTdiNTE5MzNkNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWEahYTobrX4unos8ZEcnoGPNfU2EWM84GWX yg8CJh+XLRrlEZMz2uf9MN+sGkfN4cVbsgcLfVuqqqHFuNj+Kov/K+PHRsdc4pF6 OoHlHZwXDiYaJ5HbqXruQWqQZEcyn8OU69GPsFNyDQb1hVF8ZoSxpPm4QwqP/HpO gCjDp29HjL9CQnCBgjwLHT0En8Ev15qkuAmYMypsSPnjNDeQx9tR7ASsq0FtK1IN 3BNAfHLf5q0vatQ3v8ieT8PDr/ATvmi+lQSJqwnMtJ9Mz5/84IH0nUKdUWx79tOw lv7dhU0XtRP0db5VPJezADzPbfuxE/M4gNvt2MMrUjxJtbfw2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/ATnUyJwPD3y0W5BkzQ1YN40gjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWQw OGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdlYTJkYjI4OWMvZDc3ZjFhOWQtMTUwNC0z N2JlLTk3OWEtN2I2ZTNjZWQ4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFkMDhlNWMtNzllNC00Njk3LWEw MmUtZjM3ZWEyZGIyODljLzYxZDA4ZTVjLTc5ZTQtNDY5Ny1hMDJlLWYzN2VhMmRi Mjg5Yy5jcmwwHwYDVR0jBBgwFoAUIl1mkAJyYRWljfPscpZzsqSMpdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWQwOGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdl YTJkYjI4OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNpbOnnNb8Z29Jnfoa83xXOtVRGSup3IoUgVvVzxTo5uvmyUjGZ1LMj 0wwc0JEA3iRrU+N2Z7fGeir8MsBW3mxUiWbwdOuJnAcLWdaIM1LSwi2icXOtCiwk +zp+0ZB22X1giXuvExaIEvD4jfE2OSlCZyedfzqEOqfPI4D7uVlYOLtP8iqXH6vJ XwGYTwIlcbEC3eOR9t6NpTGPiWgA0PkhbMtOQyVf54w1qSWj7f2SKhML9ALqLYqE 6m61VZn6eQCIoc/zp18YCs5uI0tD7AQanQteir3ZV7ksCu3rQweJnYQmiPEVjZzC JKv/GdiBIZtV9sBXxaKoXzIjcbJb2Ic= -----END CERTIFICATE-----Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org