$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json) Hash identifier: MTL1y5hmNZROt5lzTa7L+suWY6rvwuVtEJdpdmKUUOw= Subject key identifier: 09:20:42:A9:33:99:7A:4B:72:23:23:69:6D:1F:95:37:D4:E9:99:46 Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Certificate serial: 010D0C9F43285847E4C4AC910B0E745E50AD4C80 Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa Signing time: Sat 16 Nov 2024 02:00:28 +0000 ROA not before: Sat 16 Nov 2024 02:00:28 +0000 ROA not after: Fri 14 Feb 2025 02:00:28 +0000 asID: 18612 IP address blocks: 204.14.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e4:c4:ac:91:0b:0e:74:5e:50:ad:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Validity Not Before: Nov 16 02:00:28 2024 GMT Not After : Feb 14 02:00:28 2025 GMT Subject: CN=825342b4-6cd6-4175-b803-da650d41803f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:80:06:27:65:c4:32:48:25:18:b9:8b:95: 2e:17:6d:a2:49:91:77:5b:d5:9c:83:dd:21:08:2e: 41:b2:54:9a:38:44:b7:0b:33:d0:e6:47:6e:58:22: 69:f4:4b:07:f3:cc:0e:11:99:6f:df:a4:70:e5:99: ef:2d:cf:d8:21:0c:3b:15:1e:d1:a5:90:2b:09:b1: 13:08:63:be:d1:73:f4:81:67:a6:de:9d:b9:7b:34: 47:8b:fe:a0:23:0d:30:03:56:f2:86:98:dc:3c:ab: 6c:47:42:c6:f9:15:9b:98:90:18:91:5f:91:7d:84: 4d:f8:63:dc:8d:6f:94:b2:9b:16:11:d6:3d:cb:34: 94:cf:84:bf:52:43:78:cc:d7:93:b0:3d:12:4c:69: ac:a1:b9:67:db:49:90:b8:06:29:17:fb:5d:b2:ea: ee:47:49:35:c3:9f:9b:d7:ae:84:e5:85:5b:32:d6: ff:33:3e:80:9b:73:6f:c3:69:31:1c:f8:86:5f:c5: c4:6d:29:b4:ed:9d:13:e5:52:c1:34:26:1a:79:5b: 1d:af:6a:d1:d4:29:6c:8b:e0:11:1d:06:a1:61:95: ac:56:b2:bb:06:bc:de:d6:04:c4:28:5f:57:92:d8: ff:e9:be:5e:8a:9b:4e:9c:c1:3c:3c:3b:6f:9d:f9: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:20:42:A9:33:99:7A:4B:72:23:23:69:6D:1F:95:37:D4:E9:99:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl X509v3 Authority Key Identifier: keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer sbgp-ipAddrBlock: critical IPv4: 204.14.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:08:ee:e3:59:0b:7a:9a:73:8b:1a:93:e8:bf:a0:47:37:b6: 5a:06:5f:fa:82:be:fc:07:e8:3f:df:e0:b6:5e:e6:54:e8:db: 5b:4d:e4:b1:f0:ea:5c:52:0d:32:18:0a:af:fa:9a:63:ee:ff: 01:f9:07:06:3b:9a:8a:39:db:99:9e:44:df:7f:49:91:a9:aa: 43:d7:fc:04:8f:2a:45:2c:4f:09:1d:bb:16:d7:15:38:69:b7: 59:e5:cd:43:89:72:bf:8f:3b:51:89:aa:8b:f2:1f:43:8a:11: 92:b6:10:a6:68:79:57:6a:ad:9c:e7:06:dd:c2:bc:87:c6:94: ad:17:86:b0:4e:05:19:ed:d5:6a:d9:ab:83:71:47:07:15:bc: dc:e5:85:5a:2e:c7:0f:ad:a9:8a:3c:1b:8b:fd:8d:39:d8:c7: 99:9c:cd:9a:1f:00:91:5e:bd:7a:4f:aa:1f:59:73:a7:7a:6c: ec:7f:c2:29:55:75:86:14:32:97:95:6b:0b:3b:76:74:66:92: b7:dc:f8:3f:7e:d5:28:fe:b3:82:c2:1e:57:b8:cc:8d:43:f3: b4:65:4b:a4:e8:5f:76:fa:ee:67:a3:66:b1:3c:61:8e:be:86: 86:89:66:ec:ac:6d:a7:7a:ad:f0:0e:61:b8:72:c5:fe:0e:2e: 45:2b:1d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfkxKyRCw50XlCtTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMDhlNWMtNzllNC00Njk3LWEwMmUtZjM3ZWEyZGIy ODljMB4XDTI0MTExNjAyMDAyOFoXDTI1MDIxNDAyMDAyOFowLzEtMCsGA1UEAxMk ODI1MzQyYjQtNmNkNi00MTc1LWI4MDMtZGE2NTBkNDE4MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF2ABidlxDJIJRi5i5UuF22iSZF3W9Wcg90h CC5BslSaOES3CzPQ5kduWCJp9EsH88wOEZlv36Rw5ZnvLc/YIQw7FR7RpZArCbET CGO+0XP0gWem3p25ezRHi/6gIw0wA1byhpjcPKtsR0LG+RWbmJAYkV+RfYRN+GPc jW+UspsWEdY9yzSUz4S/UkN4zNeTsD0STGmsobln20mQuAYpF/tdsuruR0k1w5+b 166E5YVbMtb/Mz6Am3Nvw2kxHPiGX8XEbSm07Z0T5VLBNCYaeVsdr2rR1Clsi+AR HQahYZWsVrK7Brze1gTEKF9Xktj/6b5eiptOnME8PDtvnfnXTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkgQqkzmXpLciMjaW0flTfU6ZlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWQw OGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdlYTJkYjI4OWMvZDc3ZjFhOWQtMTUwNC0z N2JlLTk3OWEtN2I2ZTNjZWQ4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFkMDhlNWMtNzllNC00Njk3LWEw MmUtZjM3ZWEyZGIyODljLzYxZDA4ZTVjLTc5ZTQtNDY5Ny1hMDJlLWYzN2VhMmRi Mjg5Yy5jcmwwHwYDVR0jBBgwFoAUIl1mkAJyYRWljfPscpZzsqSMpdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWQwOGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdl YTJkYjI4OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcI7uNZC3qac4sak+i/oEc3tloGX/qCvvwH6D/f4LZe5lTo21tN5LHw 6lxSDTIYCq/6mmPu/wH5BwY7moo525meRN9/SZGpqkPX/ASPKkUsTwkduxbXFThp t1nlzUOJcr+PO1GJqovyH0OKEZK2EKZoeVdqrZznBt3CvIfGlK0XhrBOBRnt1WrZ q4NxRwcVvNzlhVouxw+tqYo8G4v9jTnYx5mczZofAJFevXpPqh9Zc6d6bOx/wilV dYYUMpeVaws7dnRmkrfc+D9+1Sj+s4LCHle4zI1D87RlS6ToX3b67mejZrE8YY6+ hoaJZuysbad6rfAOYbhyxf4OLkUrHV0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:40:22 2024 by rpki-client on console-ams.rpki-client.org