$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa File: 237e22c1-1d5e-3e56-ab84-1316298cd75c.roa (raw, json) Hash identifier: XGpstB30WOWe7oWxAEtzvxNgyxL0sTC6O8bGXkqSlp0= Subject key identifier: 9E:D3:7A:8E:77:58:E2:53:2B:DD:C4:EF:E4:8A:C5:4F:44:B1:99:61 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F43285847D999F624C5875460889BA1E0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 11273 IP address blocks: 216.66.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f6:24:c5:87:54:60:88:9b:a1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=240292f1-4b74-477b-93f0-43aa9e50aa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:d1:ec:3c:33:2b:c4:90:04:28:95:fa:cb: 28:69:e4:ee:2d:8d:e0:ed:01:ea:82:ad:a0:e9:1f: 90:10:d9:4f:af:0d:77:4d:ce:3e:fc:b0:ca:49:28: ef:d7:0b:48:66:8f:b4:0c:c5:4b:56:eb:26:c6:1e: f0:f8:e4:ac:c0:9a:c1:09:bd:2d:ab:ea:4d:d3:72: 94:ae:c8:28:3e:e8:66:f0:0f:63:b2:f1:60:f9:55: 85:e3:d7:63:9d:2d:77:90:2f:d8:c8:ac:51:a1:7e: 5c:18:ab:80:1f:e7:ed:47:69:06:14:34:81:63:77: e8:c3:7c:30:66:d0:ad:67:ed:52:3d:02:27:9a:17: 32:7e:8f:51:cf:cf:25:b5:68:0f:d5:16:d5:60:ca: 6e:bd:24:ca:74:97:68:0a:fe:0b:ce:ec:82:8f:a0: ce:97:f4:43:e2:03:d9:06:19:bb:4e:2a:d1:15:19: 0c:1d:0b:c0:17:e4:8f:20:a1:f6:25:6b:89:87:6a: 8c:59:ff:56:e2:23:1c:b5:e8:2f:61:cd:60:bb:b2: 70:ca:5f:67:b5:80:2b:92:19:c1:da:cc:c2:35:9d: 2e:e7:ce:74:d1:1f:b2:d6:77:9e:30:97:3d:bd:a2: a9:f5:79:00:2a:48:dc:1e:03:f7:25:5e:37:3c:8f: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D3:7A:8E:77:58:E2:53:2B:DD:C4:EF:E4:8A:C5:4F:44:B1:99:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cb:73:1b:04:bd:45:ec:bc:21:fd:dc:1c:8e:66:c9:5e:f2: 5a:18:eb:75:9f:83:33:6f:cc:eb:7c:87:0d:7e:a3:c1:e9:23: 2c:30:8d:c3:f2:93:d6:31:e9:24:12:3d:79:c4:71:8d:34:13: 4b:b4:fb:32:0e:01:e2:85:b2:b0:ab:a0:7f:05:2e:c7:fd:9a: 5d:d4:f0:e8:0d:42:6f:9f:cf:7a:b9:dd:81:b6:48:4a:72:89: 62:44:ec:bc:f0:83:b1:38:8f:43:38:b7:ee:3a:1c:5e:0a:6d: 20:d4:98:a7:2c:85:55:1d:15:17:12:f9:69:18:1e:a1:19:d9: 26:f8:43:7d:91:5a:0b:99:33:a3:23:85:dd:45:dc:91:f8:ca: 81:f0:fb:a1:59:10:8a:51:e9:bb:63:19:24:63:10:8f:9d:40: a3:c7:b5:1e:21:c0:c6:90:f5:28:d6:ac:5a:58:86:2c:b0:a3: 76:7c:af:23:f6:d7:c1:38:ba:91:6d:59:28:90:94:03:8e:25: 35:b9:45:a5:34:0e:7a:2e:02:97:74:05:33:18:02:01:dc:24: 29:3b:26:16:d3:b8:dc:21:9c:5f:35:99:fa:ae:c6:0c:67:ea: 7a:cb:79:d5:a9:c5:a1:f9:e1:3b:8c:d9:30:9d:38:94:09:ea: 5d:62:fb:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfYkxYdUYIiboeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MjQwMjkyZjEtNGI3NC00NzdiLTkzZjAtNDNhYTllNTBhYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkLR7DwzK8SQBCiV+ssoaeTuLY3g7QHqgq2g 6R+QENlPrw13Tc4+/LDKSSjv1wtIZo+0DMVLVusmxh7w+OSswJrBCb0tq+pN03KU rsgoPuhm8A9jsvFg+VWF49djnS13kC/YyKxRoX5cGKuAH+ftR2kGFDSBY3fow3ww ZtCtZ+1SPQInmhcyfo9Rz88ltWgP1RbVYMpuvSTKdJdoCv4LzuyCj6DOl/RD4gPZ Bhm7TirRFRkMHQvAF+SPIKH2JWuJh2qMWf9W4iMctegvYc1gu7Jwyl9ntYArkhnB 2szCNZ0u58500R+y1neeMJc9vaKp9XkAKkjcHgP3JV43PI+z+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7Teo53WOJTK93E7+SKxU9EsZlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjM3ZTIyYzEtMWQ1ZS0z ZTU2LWFiODQtMTMxNjI5OGNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHLcxsEvUXsvCH93ByOZsle8loY63WfgzNvzOt8hw1+o8HpIywwjcPy k9Yx6SQSPXnEcY00E0u0+zIOAeKFsrCroH8FLsf9ml3U8OgNQm+fz3q53YG2SEpy iWJE7Lzwg7E4j0M4t+46HF4KbSDUmKcshVUdFRcS+WkYHqEZ2Sb4Q32RWguZM6Mj hd1F3JH4yoHw+6FZEIpR6btjGSRjEI+dQKPHtR4hwMaQ9SjWrFpYhiywo3Z8ryP2 18E4upFtWSiQlAOOJTW5RaU0DnouApd0BTMYAgHcJCk7JhbTuNwhnF81mfquxgxn 6nrLedWpxaH54TuM2TCdOJQJ6l1i+/c= -----END CERTIFICATE-----Generated at Fri Nov 22 04:42:02 2024 by rpki-client on console-ams.rpki-client.org