$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa File: 3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa (raw, json) Hash identifier: kJByze0PM4iRPICmIut12+DNkIy9SxHQ8AgSvfZBumQ= Subject key identifier: 85:1F:65:98:30:9B:F8:C9:35:ED:87:00:B4:41:13:56:26:61:25:B0 Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F432858465DACA4A9E9BC2058AC146F80 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa Signing time: Fri 28 Jun 2024 23:51:03 +0000 ROA not before: Fri 28 Jun 2024 23:51:03 +0000 ROA not after: Thu 26 Sep 2024 23:51:03 +0000 asID: 16509 IP address blocks: 208.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:5d:ac:a4:a9:e9:bc:20:58:ac:14:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: Jun 28 23:51:03 2024 GMT Not After : Sep 26 23:51:03 2024 GMT Subject: CN=ddeced1a-0ce7-477a-9c76-9198c1cb893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:64:63:43:95:ce:89:14:6a:3c:ac:65:9d: d4:92:ba:dc:3d:a5:b6:0c:ed:da:a2:40:f8:e9:73: 77:46:99:27:27:8c:c0:5d:05:ef:53:97:aa:3c:b2: 0d:e8:0b:12:04:ac:7c:ad:a1:d2:ed:2b:52:a7:f9: e2:97:84:ee:df:24:77:81:78:ba:71:d8:a4:ae:ff: 86:2f:c8:b9:40:7d:ef:10:bd:a0:03:96:3c:ba:9b: d1:6e:88:fc:dc:35:1e:ee:ee:02:32:f9:32:68:bd: f6:61:67:48:01:0e:6b:70:41:2f:19:d9:d8:1a:f9: b0:63:74:48:59:ca:b9:7f:88:e0:fc:f7:c5:f4:1e: ca:20:c4:aa:49:36:f3:99:b1:c5:a2:a3:c2:00:bf: f3:ef:08:d7:11:fa:0e:21:f0:29:87:80:04:cc:0a: 80:90:ba:26:69:f9:24:7d:f1:c1:4a:97:ee:35:4e: 32:d6:2d:cb:51:33:3c:5a:27:c2:c7:0a:c7:41:9c: e4:1a:07:c2:12:5b:61:0d:3f:b3:3d:1d:53:3b:da: 83:ca:46:2d:33:bd:7a:dc:aa:dd:63:45:35:41:f8: e5:60:4b:6d:b9:78:ee:72:1d:75:e0:27:72:61:f4: 2b:cb:95:68:dc:6f:c3:86:e9:cf:b8:a8:93:90:24: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1F:65:98:30:9B:F8:C9:35:ED:87:00:B4:41:13:56:26:61:25:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:8a:e3:51:fb:62:a2:d2:6a:79:fd:e2:41:44:86:46:65:b1: 30:cf:31:e7:97:eb:69:33:fa:fb:10:4d:e2:67:fb:6a:06:39: 11:65:86:2c:72:97:2c:95:54:78:06:5d:fe:4f:53:81:ad:ce: 2a:15:5a:8a:5c:48:01:7c:76:16:43:02:14:9e:40:a4:9e:e6: 16:51:46:02:e2:95:3e:8b:f6:98:b9:35:7a:b2:00:38:07:a4: c4:f7:c7:4e:1f:68:f7:98:56:ca:ab:26:93:b7:0e:e1:92:a0: 73:09:a5:1b:bc:2c:8b:33:14:43:af:e0:b9:0b:60:b1:6e:75: 44:0b:d9:52:98:52:f7:7d:36:b7:5e:0f:16:cf:ba:0e:fc:53: 01:bc:a0:84:0e:ed:c9:7c:a6:cc:b6:5a:23:ff:35:14:50:be: 19:13:6d:3a:5c:76:14:15:08:a8:6f:d8:95:18:79:94:ec:70: 7e:e3:a6:65:52:40:8b:6d:12:50:66:c4:45:7c:37:9c:0d:63: b9:62:68:65:c6:e3:ea:c7:cf:76:24:f4:d9:ef:3e:47:b1:59: 77:a0:3e:db:f1:7d:cf:82:e8:44:b2:3f:8c:1b:c5:19:da:22: 5d:54:80:f9:f9:97:cf:1a:74:da:b2:8f:c7:82:2b:c0:92:39: 7e:cb:76:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZdrKSp6bwgWKwUb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI0MDYyODIzNTEwM1oXDTI0MDkyNjIzNTEwM1owLzEtMCsGA1UEAxMk ZGRlY2VkMWEtMGNlNy00NzdhLTljNzYtOTE5OGMxY2I4OTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2tkY0OVzokUajysZZ3UkrrcPaW2DO3aokD4 6XN3RpknJ4zAXQXvU5eqPLIN6AsSBKx8raHS7StSp/nil4Tu3yR3gXi6cdikrv+G L8i5QH3vEL2gA5Y8upvRboj83DUe7u4CMvkyaL32YWdIAQ5rcEEvGdnYGvmwY3RI Wcq5f4jg/PfF9B7KIMSqSTbzmbHFoqPCAL/z7wjXEfoOIfAph4AEzAqAkLomafkk ffHBSpfuNU4y1i3LUTM8WifCxwrHQZzkGgfCElthDT+zPR1TO9qDykYtM7163Krd Y0U1QfjlYEttuXjuch114CdyYfQry5Vo3G/DhunPuKiTkCQjqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUfZZgwm/jJNe2HALRBE1YmYSWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvMzg2N2VhN2YtYjY2Ny0z NjFhLWExZGMtNWRkOWIwYTIwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+K41H7YqLSann94kFEhkZlsTDPMeeX62kz+vsQTeJn+2oGORFlhixy lyyVVHgGXf5PU4GtzioVWopcSAF8dhZDAhSeQKSe5hZRRgLilT6L9pi5NXqyADgH pMT3x04faPeYVsqrJpO3DuGSoHMJpRu8LIszFEOv4LkLYLFudUQL2VKYUvd9Nrde DxbPug78UwG8oIQO7cl8psy2WiP/NRRQvhkTbTpcdhQVCKhv2JUYeZTscH7jpmVS QIttElBmxEV8N5wNY7liaGXG4+rHz3Yk9NnvPkexWXegPtvxfc+C6ESyP4wbxRna Il1UgPn5l88adNqyj8eCK8CSOX7LdlQ= -----END CERTIFICATE-----Generated at Sat Sep 7 16:48:50 2024 by rpki-client on console-fra.rpki-client.org