$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa File: 4424548c-9e14-33ec-919d-7d3e1baa168f.roa (raw, json) Hash identifier: 37oOWJOgx7gGGKVUMa1VcvX+uTPgjSdlQ+KNyTIw3a8= Subject key identifier: 0C:5A:B6:B1:03:6F:55:5F:83:55:1C:A8:DB:92:26:7E:EB:A9:CE:80 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858473C72AEC27F50043DE3D4FA40 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa Signing time: Mon 16 Sep 2024 18:59:31 +0000 ROA not before: Mon 16 Sep 2024 18:59:31 +0000 ROA not after: Sun 15 Dec 2024 19:59:31 +0000 asID: 53508 IP address blocks: 206.255.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3c:72:ae:c2:7f:50:04:3d:e3:d4:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Sep 16 18:59:31 2024 GMT Not After : Dec 15 19:59:31 2024 GMT Subject: CN=19c22be6-dac8-4dd8-8235-cdc35f196ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ed:c9:f7:bb:2f:a8:c4:f4:aa:cc:5e:96:82: af:7b:a3:a2:bd:af:b9:a5:01:0c:de:97:90:4b:59: 6e:f3:a2:cb:92:e4:ee:26:b7:9a:b2:80:fd:5a:fd: 81:71:02:c8:ac:eb:e5:96:61:13:40:44:74:41:23: 17:e0:b5:a8:45:11:e4:d0:b1:4e:ac:fc:69:6e:8e: 04:14:1b:52:2c:e6:9c:ac:39:49:b4:a4:77:e8:6b: 86:97:2a:23:38:9b:c6:7e:ca:90:52:0e:36:ca:03: 73:71:81:9d:97:87:6f:d8:e6:3d:88:fc:fe:81:b2: 6b:c6:01:c3:8b:30:b5:ee:43:04:f1:95:69:4a:12: 2a:f5:9a:2a:94:c4:5a:9e:03:c1:90:bf:38:4e:2f: fe:df:40:00:55:91:d5:a8:bd:92:f0:52:3a:ba:7d: b9:57:a5:28:bb:69:d1:ad:6b:b8:34:d4:cb:aa:8f: 5c:34:a4:a2:09:54:3f:d8:0a:0c:87:f9:fe:95:ec: 83:e9:da:a0:cd:64:f0:0d:14:92:a2:0e:14:99:0b: 82:76:e7:2c:c6:1f:01:60:e3:e7:94:d6:60:50:37: c9:12:30:79:60:e0:72:9d:cf:f4:69:4d:83:47:b1: 65:31:d4:cc:ff:65:c2:26:95:e0:7e:57:0f:c4:0b: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5A:B6:B1:03:6F:55:5F:83:55:1C:A8:DB:92:26:7E:EB:A9:CE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8a:da:9a:f5:eb:71:12:32:ba:08:d4:81:75:a8:50:c9:61: 68:57:d8:ed:6e:4e:bf:24:8e:4f:1c:c0:db:49:40:7a:c7:87: cd:4d:d4:66:68:49:79:f1:72:25:c9:f4:54:49:6a:10:36:80: 90:b5:a8:75:b8:35:f7:6b:22:d7:d4:50:99:ad:23:75:f9:e9: a0:63:fd:be:75:42:bf:15:40:31:d1:01:bc:ac:b8:45:07:cf: a0:8a:6d:bb:0b:51:15:5e:a5:67:f3:10:37:0e:4e:9f:52:9f: 32:50:19:a7:bd:61:50:72:fb:bc:71:f1:14:ec:37:db:55:81: 8b:73:2a:d9:39:5b:f7:63:68:93:d0:49:d1:3a:76:3f:08:66: 54:94:94:c7:23:32:07:c3:51:3f:84:28:a7:84:b1:03:68:40: d5:1a:ec:c5:5e:3d:42:df:b9:e2:c4:93:90:7f:7f:ea:f3:13: 25:6e:7c:67:24:ce:62:7e:43:6e:1a:25:d5:92:d1:92:ef:5a: 55:80:7a:d4:bc:02:02:e1:73:68:bf:38:71:01:de:8c:19:ca: ed:31:32:e4:ab:1d:f1:77:6b:fa:9c:77:69:52:a1:b6:cb:80: ae:ce:e7:85:e7:1a:a3:45:c9:b1:82:7e:f2:87:6c:ce:f4:79: 1a:92:09:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc8cq7Cf1AEPePU+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MDkxNjE4NTkzMVoXDTI0MTIxNTE5NTkzMVowLzEtMCsGA1UEAxMk MTljMjJiZTYtZGFjOC00ZGQ4LTgyMzUtY2RjMzVmMTk2Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu3J97svqMT0qsxeloKve6Oiva+5pQEM3peQ S1lu86LLkuTuJreasoD9Wv2BcQLIrOvllmETQER0QSMX4LWoRRHk0LFOrPxpbo4E FBtSLOacrDlJtKR36GuGlyojOJvGfsqQUg42ygNzcYGdl4dv2OY9iPz+gbJrxgHD izC17kME8ZVpShIq9ZoqlMRangPBkL84Ti/+30AAVZHVqL2S8FI6un25V6Uou2nR rWu4NNTLqo9cNKSiCVQ/2AoMh/n+leyD6dqgzWTwDRSSog4UmQuCducsxh8BYOPn lNZgUDfJEjB5YOBync/0aU2DR7FlMdTM/2XCJpXgflcPxAvMsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxatrEDb1Vfg1UcqNuSJn7rqc6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDQyNDU0OGMtOWUxNC0z M2VjLTkxOWQtN2QzZTFiYWExNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeK2pr163ESMroI1IF1qFDJYWhX2O1uTr8kjk8cwNtJQHrHh81N1GZo SXnxciXJ9FRJahA2gJC1qHW4NfdrItfUUJmtI3X56aBj/b51Qr8VQDHRAbysuEUH z6CKbbsLURVepWfzEDcOTp9SnzJQGae9YVBy+7xx8RTsN9tVgYtzKtk5W/djaJPQ SdE6dj8IZlSUlMcjMgfDUT+EKKeEsQNoQNUa7MVePULfueLEk5B/f+rzEyVufGck zmJ+Q24aJdWS0ZLvWlWAetS8AgLhc2i/OHEB3owZyu0xMuSrHfF3a/qcd2lSobbL gK7O54XnGqNFybGCfvKHbM70eRqSCXo= -----END CERTIFICATE-----Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org