$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa File: d33ac72b-a2fd-3e99-9262-5396871638b8.roa (raw, json) Hash identifier: SO4Q9InGAb9FYfeDMv6AOzxr/fgaZSaPPV8ZxxiWfDw= Subject key identifier: AD:90:0A:C7:B7:7F:4D:9E:C9:07:0A:38:27:A2:3F:6D:2F:A1:A1:98 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858473C6B48D1C523003D420B7BE0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa Signing time: Mon 16 Sep 2024 18:44:37 +0000 ROA not before: Mon 16 Sep 2024 18:44:37 +0000 ROA not after: Sun 15 Dec 2024 19:44:37 +0000 asID: 53508 IP address blocks: 206.255.208.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3c:6b:48:d1:c5:23:00:3d:42:0b:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Sep 16 18:44:37 2024 GMT Not After : Dec 15 19:44:37 2024 GMT Subject: CN=1630851b-c00d-44d2-abaf-2b7093442176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:4c:7b:f0:1f:ae:bd:97:7d:15:c7:c4:fa: be:93:02:c0:59:1a:58:eb:7a:b9:63:62:f8:a3:74: d0:b8:c0:10:fa:a8:db:6c:fc:bf:36:fc:be:fd:dd: e5:e9:b1:b4:db:a7:f6:dd:7e:17:42:a4:46:dd:92: 2c:f0:b6:19:91:c3:41:89:73:fe:c8:d1:ed:3d:c2: 97:04:a6:f9:ad:a9:0d:5d:b8:17:6c:46:e3:02:a1: e3:48:53:90:2e:3c:f6:06:f9:3a:f0:a2:da:f9:9f: 90:f3:87:90:9c:05:58:fa:95:f8:ec:f9:8e:54:7e: 45:cf:b1:54:18:7f:de:31:85:48:87:2e:47:8c:58: a0:49:03:05:a1:c3:81:12:43:b4:f7:5a:33:3b:41: a9:3e:79:c2:48:3a:50:7b:5c:a8:9b:90:2e:15:65: 65:10:0b:66:a5:3c:ad:d1:49:92:b4:84:39:42:c3: 6e:70:0f:8e:23:9f:f3:11:0f:74:16:17:52:d4:27: 0b:0e:c8:30:d0:e9:11:82:d4:b9:a6:86:7c:f8:1c: ba:ea:bd:4b:b0:9d:fe:95:f3:fb:db:04:41:13:1c: 4b:b9:fb:79:f4:d1:95:c7:88:7f:3e:5d:39:ee:8f: db:21:a7:60:be:3a:88:61:48:39:97:7c:79:a3:94: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:90:0A:C7:B7:7F:4D:9E:C9:07:0A:38:27:A2:3F:6D:2F:A1:A1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d33ac72b-a2fd-3e99-9262-5396871638b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a1:df:71:85:3b:ff:54:f8:8d:b0:c9:cd:10:8b:c9:f2:f5: 0b:ed:5f:0a:80:2c:e3:cc:39:e5:1a:a2:9b:ac:97:27:3b:69: 6b:0f:80:38:f6:84:7e:f8:cc:ee:d9:b7:aa:be:f8:c0:a1:a0: 9f:08:b8:c3:b5:4c:63:11:be:b0:16:fb:db:4b:b7:57:a3:ed: 4c:67:f4:f9:7d:91:0d:c0:94:a3:4f:80:7a:dd:97:23:f1:05: be:83:ec:05:ec:82:4e:a9:77:7b:2c:06:5e:53:49:95:47:0d: a5:88:01:cf:57:03:35:c3:e6:41:00:04:99:e8:58:81:66:cc: b9:2f:80:fb:12:7c:ec:bf:5d:f8:de:c2:35:5b:e7:f3:c5:ea: e6:a1:59:b9:12:c4:4f:40:42:d2:3f:f4:17:1b:38:fb:c7:02: 61:a7:90:13:0d:96:f3:7f:f6:95:f5:24:5c:34:89:96:dd:2a: 3d:79:02:4d:a2:b8:e7:2b:c9:f2:82:d4:f7:d5:0c:68:fa:91: 39:20:db:35:aa:44:af:3d:51:53:c7:8b:63:3c:f1:fa:6d:a1: 65:28:77:da:4a:d5:92:7b:12:6b:7f:d8:a6:bb:b1:6a:7b:87: 8e:42:99:6f:53:26:7b:0e:fb:ba:42:35:da:76:33:2b:a8:a1: d7:c7:a3:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc8a0jRxSMAPUILe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MDkxNjE4NDQzN1oXDTI0MTIxNTE5NDQzN1owLzEtMCsGA1UEAxMk MTYzMDg1MWItYzAwZC00NGQyLWFiYWYtMmI3MDkzNDQyMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ZMe/Afrr2XfRXHxPq+kwLAWRpY63q5Y2L4 o3TQuMAQ+qjbbPy/Nvy+/d3l6bG026f23X4XQqRG3ZIs8LYZkcNBiXP+yNHtPcKX BKb5rakNXbgXbEbjAqHjSFOQLjz2Bvk68KLa+Z+Q84eQnAVY+pX47PmOVH5Fz7FU GH/eMYVIhy5HjFigSQMFocOBEkO091ozO0GpPnnCSDpQe1yom5AuFWVlEAtmpTyt 0UmStIQ5QsNucA+OI5/zEQ90FhdS1CcLDsgw0OkRgtS5poZ8+By66r1LsJ3+lfP7 2wRBExxLuft59NGVx4h/Pl057o/bIadgvjqIYUg5l3x5o5SVgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2QCse3f02eyQcKOCeiP20voaGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZDMzYWM3MmItYTJmZC0z ZTk5LTkyNjItNTM5Njg3MTYzOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+h33GFO/9U+I2wyc0Qi8ny9QvtXwqALOPMOeUaopuslyc7aWsPgDj2 hH74zO7Zt6q++MChoJ8IuMO1TGMRvrAW+9tLt1ej7Uxn9Pl9kQ3AlKNPgHrdlyPx Bb6D7AXsgk6pd3ssBl5TSZVHDaWIAc9XAzXD5kEABJnoWIFmzLkvgPsSfOy/Xfje wjVb5/PF6uahWbkSxE9AQtI/9BcbOPvHAmGnkBMNlvN/9pX1JFw0iZbdKj15Ak2i uOcryfKC1PfVDGj6kTkg2zWqRK89UVPHi2M88fptoWUod9pK1ZJ7Emt/2Ka7sWp7 h45CmW9TJnsO+7pCNdp2MyuoodfHo4g= -----END CERTIFICATE-----Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org