$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa File: 4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa (raw, json) Hash identifier: xMaxgnLSx3U6jlSPKR2wzYjKzylvwqfgITQGFaPVhh4= Subject key identifier: 1C:37:4D:BD:6E:3E:78:FA:74:51:FA:4C:1E:C7:F9:61:3E:87:07:F3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CE6F36A151AEC62F9646A380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 21723 IP address blocks: 208.38.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:36:a1:51:ae:c6:2f:96:46:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=2c259183-2e87-4ba1-ac7c-20267781c6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:d3:3e:e3:54:6a:91:36:4d:10:5c:31:e2: d4:8f:a1:f3:d5:02:79:23:74:86:5c:60:2d:d1:a9: bf:62:f1:fe:1c:39:c0:0c:57:79:69:e9:64:79:87: e8:01:59:f8:68:db:52:e4:7a:16:4f:fe:b1:92:6a: 6f:d6:44:71:30:5c:12:72:1b:f3:e5:02:3b:4e:38: 33:ec:39:a4:aa:5b:be:10:73:f2:2b:f7:36:a5:9d: ff:45:03:ce:c9:74:10:08:af:9b:45:6e:49:c7:74: c5:f2:fa:df:ca:ef:ce:34:c0:ea:15:39:32:29:2d: 7c:2e:ae:fa:de:d8:39:74:7a:7a:dd:d8:27:e3:b8: d6:2c:7a:ea:62:73:95:e7:91:45:8d:a1:40:85:1d: 57:38:d6:f6:37:17:f4:62:05:cf:9d:b6:06:cb:dc: 99:7e:95:ea:00:eb:a5:f0:b4:f6:cc:88:e8:50:b2: a3:fc:b5:f6:1f:96:24:cd:71:33:ad:86:70:93:2f: 33:a9:e4:85:4c:7e:7d:e4:fa:69:96:5f:8b:50:ef: d4:7e:df:32:61:09:d9:c7:ff:5b:1f:48:cc:13:94: e4:bb:ba:89:50:ea:8b:cf:0d:a8:76:55:56:37:75: 95:3b:8f:fe:02:fa:e8:62:85:a3:a5:77:6f:d6:70: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:37:4D:BD:6E:3E:78:FA:74:51:FA:4C:1E:C7:F9:61:3E:87:07:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d20fa0d-e8f2-3b54-859b-e4e5ee730dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.38.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:dc:1c:a2:54:00:0e:f4:39:f4:29:14:e3:fa:55:f9:4a:4f: df:57:8d:dc:6e:67:c9:9e:98:a8:b2:8c:43:cd:63:a1:51:2c: 25:e1:c8:60:57:32:07:77:4d:1f:de:c2:b4:87:14:bf:6b:86: 26:d5:d6:18:72:60:8d:1e:b3:b3:74:d8:a5:e5:1d:20:0d:1b: 59:fc:fb:45:d5:b9:37:4a:9b:1c:06:88:98:c6:47:aa:bb:9b: d5:eb:2a:6e:53:ed:cc:f3:62:1d:93:87:4e:86:33:03:e7:95: 2f:62:ea:61:10:20:a3:98:4e:8d:af:7e:61:9b:91:cd:45:8b: cb:05:71:4f:ea:50:6a:d6:8f:15:bf:7a:17:97:a3:d9:2d:5a: 55:ef:4b:fd:c6:8e:78:fd:66:b1:23:52:c6:ea:f5:ea:f7:ab: 60:f5:3c:d5:7b:d9:ea:4d:05:8b:5c:69:7a:5d:bf:37:78:af: 50:4f:1d:4f:04:02:6d:a9:f9:74:0d:b6:dc:68:2e:24:79:72: c3:5a:c3:bc:74:29:94:7c:a2:f3:84:1f:c6:e9:93:f3:31:9c: 15:37:b8:3d:2f:e2:de:fc:8c:7c:63:06:68:54:7c:ac:a7:01: ab:a5:a7:4c:6b:49:53:5e:a6:3b:22:0b:fa:f9:2f:91:ca:84: f0:c8:05:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObzahUa7GL5ZGo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk MmMyNTkxODMtMmU4Ny00YmExLWFjN2MtMjAyNjc3ODFjNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolHTPuNUapE2TRBcMeLUj6Hz1QJ5I3SGXGAt 0am/YvH+HDnADFd5aelkeYfoAVn4aNtS5HoWT/6xkmpv1kRxMFwSchvz5QI7Tjgz 7Dmkqlu+EHPyK/c2pZ3/RQPOyXQQCK+bRW5Jx3TF8vrfyu/ONMDqFTkyKS18Lq76 3tg5dHp63dgn47jWLHrqYnOV55FFjaFAhR1XONb2Nxf0YgXPnbYGy9yZfpXqAOul 8LT2zIjoULKj/LX2H5YkzXEzrYZwky8zqeSFTH595Pppll+LUO/Uft8yYQnZx/9b H0jME5Tku7qJUOqLzw2odlVWN3WVO4/+AvroYoWjpXdv1nBwgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw3Tb1uPnj6dFH6TB7H+WE+hwfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGQyMGZhMGQtZThmMi0z YjU0LTg1OWItZTRlNWVlNzMwZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0CY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3cHKJUAA70OfQpFOP6VflKT99XjdxuZ8memKiyjEPNY6FRLCXhyGBX Mgd3TR/ewrSHFL9rhibV1hhyYI0es7N02KXlHSANG1n8+0XVuTdKmxwGiJjGR6q7 m9XrKm5T7czzYh2Th06GMwPnlS9i6mEQIKOYTo2vfmGbkc1Fi8sFcU/qUGrWjxW/ eheXo9ktWlXvS/3Gjnj9ZrEjUsbq9er3q2D1PNV72epNBYtcaXpdvzd4r1BPHU8E Am2p+XQNttxoLiR5csNaw7x0KZR8ovOEH8bpk/MxnBU3uD0v4t78jHxjBmhUfKyn Aaulp0xrSVNepjsiC/r5L5HKhPDIBdk= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:48 2024 by rpki-client on console-fra.rpki-client.org