$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa File: cf4be9dc-75c5-3f44-b4d0-65e111847482.roa (raw, json) Hash identifier: 6VDIStqiUTRbxrMfTLY0bbva5eEQUvS4SZT6AAPEHqQ= Subject key identifier: F7:55:E9:EE:DA:4B:93:F5:BB:96:31:36:4D:E6:43:B3:BF:CB:3E:08 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584785BBA60A946D265778179680 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa Signing time: Sun 13 Oct 2024 01:00:31 +0000 ROA not before: Sun 13 Oct 2024 01:00:31 +0000 ROA not after: Sat 11 Jan 2025 02:00:31 +0000 asID: 4922 IP address blocks: 204.111.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:85:bb:a6:0a:94:6d:26:57:78:17:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Oct 13 01:00:31 2024 GMT Not After : Jan 11 02:00:31 2025 GMT Subject: CN=a08ffe24-a11c-4a57-bb4a-ec9bc2125164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:c5:fd:6f:50:90:80:69:10:9c:03:4f:6a: 52:25:1a:fb:85:56:6c:d5:ad:78:cf:18:42:c2:4b: 16:c8:5a:e2:0b:f5:2b:4e:ff:61:8f:f6:93:42:b8: 45:8b:b0:05:d3:27:74:1b:1c:b9:ae:44:07:3d:f1: bb:87:62:18:57:80:70:c7:67:c1:23:15:03:53:1c: 8c:77:fa:b0:68:3c:6e:28:ae:fa:f2:6f:d6:9e:92: 00:38:e1:3d:9d:82:8e:b3:d7:dd:8a:bd:47:ff:39: e9:6f:05:08:16:48:d2:07:5e:f7:a1:f9:64:52:2b: c6:2d:09:f0:c1:98:ef:7b:ca:6d:1e:34:ab:7e:05: d0:40:20:ef:d6:a3:d2:d5:ae:6a:cc:99:4b:6b:74: aa:8e:67:44:09:ab:aa:22:bc:b1:6d:8b:8e:c3:16: b0:44:a4:d9:4c:ab:d3:b0:f3:de:05:07:71:c7:47: f8:c3:b4:15:a0:0c:25:9e:15:f4:fe:ed:db:97:3f: d6:b9:1a:e7:fe:38:ce:2f:0d:a4:1c:e1:a6:0d:2d: 59:b4:f1:e4:ab:c3:6b:2f:90:0d:72:65:a1:1c:c6: 23:39:ec:f0:fa:4c:ee:7c:7f:a1:a5:88:0a:29:24: a3:1d:1b:56:40:2d:43:d7:af:c9:30:8b:a6:1a:bc: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:55:E9:EE:DA:4B:93:F5:BB:96:31:36:4D:E6:43:B3:BF:CB:3E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 204.111.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:04:05:1a:20:61:09:2b:93:4c:e2:9d:43:06:2c:8c:d9:cd: 8b:a0:7b:01:61:db:cf:4d:6c:37:9e:f8:a7:fb:38:21:a8:f7: c2:4a:1d:43:aa:c8:d6:b6:4b:b1:b6:2a:19:b8:3b:c5:8c:65: 05:88:39:f9:b2:f8:da:5b:4e:85:f3:12:2c:90:f6:81:f6:33: 5d:1d:69:ad:41:5a:f9:e3:ac:90:d0:95:86:14:46:5e:14:ed: dd:ab:1b:4e:42:22:e3:dd:66:7f:bd:a6:ba:6a:6d:37:92:26: c7:1f:33:9d:8f:a6:ed:9a:4c:11:9c:20:f4:9d:c8:8b:0e:ba: 1c:64:05:ec:ff:96:7d:11:4e:a5:a1:41:a5:4d:df:b6:ab:d6: 5d:2b:3a:32:38:c5:92:fa:61:a1:f6:0f:35:30:8c:7f:fa:d7: 2f:c5:b3:5f:42:ec:52:6e:f2:8c:9a:29:e3:93:c6:7d:a6:63: c9:28:12:be:bf:34:94:f9:4e:c9:cf:ce:be:50:00:00:38:1a: e3:76:28:99:a6:25:08:f0:b7:e9:46:30:10:c6:cb:bb:04:e5: e6:a0:16:75:42:24:da:36:34:7a:e7:c8:62:df:bf:af:22:32: eb:93:d2:f8:b7:86:00:73:d2:5e:aa:08:f2:00:8e:f6:34:46: 9d:bc:ad:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu6YKlG0mV3gXloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk YTA4ZmZlMjQtYTExYy00YTU3LWJiNGEtZWM5YmMyMTI1MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktvF/W9QkIBpEJwDT2pSJRr7hVZs1a14zxhC wksWyFriC/UrTv9hj/aTQrhFi7AF0yd0Gxy5rkQHPfG7h2IYV4Bwx2fBIxUDUxyM d/qwaDxuKK768m/WnpIAOOE9nYKOs9fdir1H/znpbwUIFkjSB173oflkUivGLQnw wZjve8ptHjSrfgXQQCDv1qPS1a5qzJlLa3SqjmdECauqIryxbYuOwxawRKTZTKvT sPPeBQdxx0f4w7QVoAwlnhX0/u3blz/WuRrn/jjOLw2kHOGmDS1ZtPHkq8NrL5AN cmWhHMYjOezw+kzufH+hpYgKKSSjHRtWQC1D16/JMIumGrxmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdV6e7aS5P1u5YxNk3mQ7O/yz4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvY2Y0YmU5ZGMtNzVjNS0z ZjQ0LWI0ZDAtNjVlMTExODQ3NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzG+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYEBRogYQkrk0zinUMGLIzZzYugewFh289NbDee+Kf7OCGo98JKHUOq yNa2S7G2Khm4O8WMZQWIOfmy+NpbToXzEiyQ9oH2M10daa1BWvnjrJDQlYYURl4U 7d2rG05CIuPdZn+9prpqbTeSJscfM52Ppu2aTBGcIPSdyIsOuhxkBez/ln0RTqWh QaVN37ar1l0rOjI4xZL6YaH2DzUwjH/61y/Fs19C7FJu8oyaKeOTxn2mY8koEr6/ NJT5TsnPzr5QAAA4GuN2KJmmJQjwt+lGMBDGy7sE5eagFnVCJNo2NHrnyGLfv68i MuuT0vi3hgBz0l6qCPIAjvY0Rp28rZc= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:43 2024 by rpki-client on console-fra.rpki-client.org