$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json) Hash identifier: sKhSiK1wJRJcy6X6D5ma16BlA238IcXxZBnAeEorIR8= Subject key identifier: C9:28:0A:DB:D6:DB:65:A2:2E:A3:F8:30:F8:1B:F3:9A:4F:8F:37:FE Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F43285847A62B09C44620F22FDBBAA800 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa Signing time: Thu 24 Oct 2024 15:50:51 +0000 ROA not before: Thu 24 Oct 2024 15:50:51 +0000 ROA not after: Wed 22 Jan 2025 16:50:51 +0000 asID: 401348 IP address blocks: 208.73.208.0/24 maxlen: 24 208.73.209.0/24 maxlen: 24 208.73.210.0/24 maxlen: 24 208.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:2b:09:c4:46:20:f2:2f:db:ba:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Oct 24 15:50:51 2024 GMT Not After : Jan 22 16:50:51 2025 GMT Subject: CN=abc485ac-b82e-4e21-86d6-77f19bfc3035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:7a:7d:47:b5:b5:50:99:72:5b:13:7f:e7: 1c:b8:f9:75:4e:6c:4a:65:5c:6b:19:52:6b:b0:62: 13:38:f3:1c:a3:28:8b:7b:95:eb:6b:75:7b:7e:69: c4:97:3b:3e:e8:5f:b9:28:77:cb:3d:c2:82:7f:e8: 2c:44:9d:6f:ae:91:37:db:f9:8c:56:6d:02:42:65: 00:49:b9:de:c2:d1:5a:65:73:bd:85:3e:b0:36:61: 85:b3:07:4b:5b:2d:22:66:2c:74:16:a4:77:fe:bf: 10:ea:3d:13:1d:15:3e:7a:eb:d1:7f:4f:6c:86:15: e9:92:89:b6:47:4f:29:4d:1c:bc:44:72:b8:67:bb: 3c:e3:af:80:39:e3:0c:74:8e:40:0f:74:ef:f0:df: e2:ef:6f:36:5e:5e:72:c0:50:eb:41:ef:c6:7b:83: a0:da:6d:b0:8d:7c:fe:d2:c9:c1:28:c5:e3:42:69: b1:ac:18:20:a6:b2:fa:45:54:37:3f:f7:fe:fc:99: c3:c2:76:b0:d2:0d:ee:9d:0b:0f:21:fc:1c:4d:28: 57:d5:bf:e8:cf:b2:81:9c:e0:a3:3a:ec:17:5c:bf: a7:7f:3c:d4:a2:a1:03:43:60:fb:3b:09:70:57:9c: 75:bf:c8:29:de:44:a9:b6:a0:68:32:2a:01:2b:01: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:28:0A:DB:D6:DB:65:A2:2E:A3:F8:30:F8:1B:F3:9A:4F:8F:37:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:92:e8:b6:b5:38:ee:26:2f:3b:67:e9:59:7d:40:80:76:9c: f7:7f:ce:c5:8b:27:ab:28:db:78:d5:56:21:02:a0:7f:8b:bf: 26:7b:1f:99:1a:ce:97:13:b8:01:6a:a7:1c:38:d7:67:ac:91: ec:6a:91:a4:a6:a4:3e:35:2f:69:8d:ce:27:72:6d:61:5c:27: 05:02:8b:51:1a:a3:e3:7c:db:cb:13:65:bb:f0:f6:a9:0d:2a: 15:19:5b:08:0a:99:90:1d:b2:f9:67:ee:db:5a:e7:02:d8:19: 1e:bb:26:0e:a6:b7:20:af:8b:70:92:31:65:14:80:07:49:5e: 19:5f:54:66:6a:8e:4a:ca:8a:ba:69:0f:15:64:fc:16:1a:13: cd:d5:1e:4f:4d:1c:58:a0:ff:6f:88:8d:9e:90:92:59:a0:12: e7:2a:ff:06:a3:d9:4b:71:16:53:c0:5a:c7:e5:e3:6c:f1:18: 42:5d:ee:1f:d2:68:a4:fd:ca:06:49:b6:75:1e:d3:59:b6:fd: ad:48:b3:0d:9b:23:86:f2:f9:ea:71:bc:63:29:7b:40:70:2d: 8d:0c:4d:23:84:ed:25:c1:f2:d0:4c:f4:ba:0e:d4:85:38:8e: ef:f1:a7:c0:6d:32:f2:a1:f6:43:f5:89:6c:2f:71:18:89:da: 91:7c:ef:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEemKwnERiDyL9u6qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI0MTAyNDE1NTA1MVoXDTI1MDEyMjE2NTA1MVowLzEtMCsGA1UEAxMk YWJjNDg1YWMtYjgyZS00ZTIxLTg2ZDYtNzdmMTliZmMzMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/p6fUe1tVCZclsTf+ccuPl1TmxKZVxrGVJr sGITOPMcoyiLe5Xra3V7fmnElzs+6F+5KHfLPcKCf+gsRJ1vrpE32/mMVm0CQmUA SbnewtFaZXO9hT6wNmGFswdLWy0iZix0FqR3/r8Q6j0THRU+euvRf09shhXpkom2 R08pTRy8RHK4Z7s846+AOeMMdI5AD3Tv8N/i7282Xl5ywFDrQe/Ge4Og2m2wjXz+ 0snBKMXjQmmxrBggprL6RVQ3P/f+/JnDwnaw0g3unQsPIfwcTShX1b/oz7KBnOCj OuwXXL+nfzzUoqEDQ2D7OwlwV5x1v8gp3kSptqBoMioBKwEvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkoCtvW22WiLqP4MPgb85pPjzf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvODZkMDk0NjAtNTc0MS0z ZDk0LTk1NjMtYWExYjYzZmQ0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCS6La1OO4mLztn6Vl9QIB2nPd/zsWLJ6so23jVViECoH+LvyZ7H5ka zpcTuAFqpxw412eskexqkaSmpD41L2mNzidybWFcJwUCi1Eao+N828sTZbvw9qkN KhUZWwgKmZAdsvln7tta5wLYGR67Jg6mtyCvi3CSMWUUgAdJXhlfVGZqjkrKirpp DxVk/BYaE83VHk9NHFig/2+IjZ6QklmgEucq/waj2UtxFlPAWsfl42zxGEJd7h/S aKT9ygZJtnUe01m2/a1Isw2bI4by+epxvGMpe0BwLY0MTSOE7SXB8tBM9LoO1IU4 ju/xp8BtMvKh9kP1iWwvcRiJ2pF8794= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:36 2024 by rpki-client on console-fra.rpki-client.org