$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa File: 0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa (raw, json) Hash identifier: kFnNzbW51rrdKSRrR8io4SeHXO+dWGqK0DDPxlaFz5s= Subject key identifier: D7:9F:AC:01:E0:8C:99:96:3C:30:C4:A3:FA:70:49:ED:02:82:B7:33 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584774FB908C8290F9921EC0EA00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 33392 IP address blocks: 208.103.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:90:8c:82:90:f9:92:1e:c0:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=983de735-a303-444c-a99c-dba4b1be71db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:c8:4a:68:67:dd:e8:be:67:f0:d9:56:07: 4c:5f:44:79:a3:e3:80:ff:13:fb:19:03:57:d6:52: 09:ae:11:c1:3f:aa:0f:c3:73:ec:dc:b5:4d:ab:22: 06:10:02:df:c7:52:40:fb:38:6c:78:66:df:10:01: 85:5c:dd:a0:2d:8b:55:40:aa:46:10:50:1c:fd:97: d3:e0:d7:65:6f:a0:b3:97:18:be:86:fc:61:5a:d8: bc:e4:15:f8:06:c3:45:34:7a:bd:5c:ce:18:b9:f5: d0:80:92:9f:66:6d:56:25:fe:5c:8c:ca:3b:2a:32: 63:d3:23:33:4b:ed:f0:ff:10:b1:13:db:de:31:af: 3b:42:8d:d8:13:9e:ed:b1:74:c0:3b:e7:07:de:f8: 6d:49:b9:ca:da:4a:96:c7:c9:ac:67:f3:4f:bc:e1: 23:62:d3:76:f8:17:68:f3:be:cc:9c:cd:5e:81:10: 52:6c:bd:5a:97:be:00:a2:2e:0e:b5:ea:43:3e:96: bc:7f:a1:2d:cf:7e:6b:46:ed:9d:5b:92:6a:a6:9d: f8:68:f9:93:83:eb:8d:a9:e2:f5:50:09:48:30:3d: 0b:70:7c:01:d0:da:7f:66:48:bb:1c:05:65:06:95: 5d:92:1a:92:8f:49:c2:be:f2:a1:32:fc:4d:eb:34: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9F:AC:01:E0:8C:99:96:3C:30:C4:A3:FA:70:49:ED:02:82:B7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 208.103.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6e:e4:bc:79:63:93:39:43:ce:5e:2d:5b:ed:c9:68:a0:ac: c5:7a:bb:82:8d:01:66:dd:d0:ce:5b:9d:5e:3f:fd:82:28:1a: 16:d2:7d:50:c2:e4:e3:8f:d9:a6:09:80:c9:58:23:7c:d7:5c: 3c:ab:ca:28:07:d9:12:6d:42:70:e0:14:2a:a9:b6:0b:42:45: b5:b9:76:5f:e9:87:dd:2d:39:62:fc:80:b5:70:d4:b8:b2:13: f2:6c:e7:82:7a:c4:cc:43:36:2f:29:a4:c6:e0:76:ef:65:7e: b8:0f:6a:21:c0:cf:04:f5:9d:43:e9:ae:dd:af:53:2c:c0:a6: df:e8:1f:b0:ce:58:bc:13:8a:ba:e3:61:f5:47:56:51:6f:f5: a2:9d:4c:e3:05:60:a7:f3:49:ea:43:0f:bf:9b:08:c8:58:1c: 8d:4b:08:9e:6d:ec:c0:3a:35:e3:dc:a1:69:ed:a7:24:4b:9a: eb:d5:a0:f6:0b:3d:69:1f:dc:ef:0d:47:83:b4:7b:8b:f8:a0: 9a:c0:73:0a:df:4d:f0:6f:e0:92:62:76:a7:2e:b2:db:6b:0e: 4e:3a:15:ed:1a:ba:9c:c2:d8:7d:28:b8:f0:56:a4:e5:55:28: 04:5d:8d:f5:46:20:af:d5:cf:bb:d7:2b:1b:64:5b:e1:90:d2: 50:81:26:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+5CMgpD5kh7A6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk OTgzZGU3MzUtYTMwMy00NDRjLWE5OWMtZGJhNGIxYmU3MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyHISmhn3ei+Z/DZVgdMX0R5o+OA/xP7GQNX 1lIJrhHBP6oPw3Ps3LVNqyIGEALfx1JA+zhseGbfEAGFXN2gLYtVQKpGEFAc/ZfT 4Ndlb6Czlxi+hvxhWti85BX4BsNFNHq9XM4YufXQgJKfZm1WJf5cjMo7KjJj0yMz S+3w/xCxE9veMa87Qo3YE57tsXTAO+cH3vhtSbnK2kqWx8msZ/NPvOEjYtN2+Bdo 877MnM1egRBSbL1al74Aoi4OtepDPpa8f6Etz35rRu2dW5Jqpp34aPmTg+uNqeL1 UAlIMD0LcHwB0Np/Zki7HAVlBpVdkhqSj0nCvvKhMvxN6zTr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNefrAHgjJmWPDDEo/pwSe0CgrczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDIyN2JjMmEtNThmNy0z ZDU2LTgwYmEtMjJhZDIwZDdlOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApu5Lx5Y5M5Q85eLVvtyWigrMV6u4KNAWbd0M5bnV4//YIoGhbSfVDC 5OOP2aYJgMlYI3zXXDyryigH2RJtQnDgFCqptgtCRbW5dl/ph90tOWL8gLVw1Liy E/Js54J6xMxDNi8ppMbgdu9lfrgPaiHAzwT1nUPprt2vUyzApt/oH7DOWLwTirrj YfVHVlFv9aKdTOMFYKfzSepDD7+bCMhYHI1LCJ5t7MA6NePcoWntpyRLmuvVoPYL PWkf3O8NR4O0e4v4oJrAcwrfTfBv4JJidqcusttrDk46Fe0aupzC2H0ouPBWpOVV KARdjfVGIK/Vz7vXKxtkW+GQ0lCBJk0= -----END CERTIFICATE-----Generated at Mon Nov 25 16:26:28 2024 by rpki-client on console-ams.rpki-client.org