$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa File: dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa (raw, json) Hash identifier: K4rSoU3K8pp78BKJCaaSAtyD8GthjfiBiwYfuJHgg4s= Subject key identifier: 60:CD:3A:D7:23:84:78:3D:A7:1E:56:E9:F3:C3:83:B8:5D:40:DF:2B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CE6F2DD705BAEA23D8C50440 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 21723 IP address blocks: 208.181.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:2d:d7:05:ba:ea:23:d8:c5:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=90a8d904-198e-43bc-bea8-3a93e7d8051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:cf:d6:f0:8a:a0:5c:5e:95:46:89:2e:8f: c9:dc:ed:9d:34:02:d7:0d:2c:76:da:51:70:50:06: b6:05:eb:b0:3a:91:21:06:f2:06:c4:ad:4e:11:76: 19:59:0e:4a:e7:34:0e:7c:4b:fd:38:23:16:15:50: d3:15:e4:bf:6b:f9:4a:77:74:42:65:6c:f2:94:9c: a6:65:60:0d:a5:1f:9d:1a:3b:ae:67:a1:ce:a2:16: fe:97:56:2d:60:6a:58:fa:24:89:46:a1:ad:8c:88: cb:cf:cf:60:ed:cc:b2:f8:01:aa:07:70:1f:72:0c: f4:c3:e3:f8:53:9d:0f:3c:8b:44:2d:1f:00:43:d8: 28:a3:6b:53:38:cb:10:57:60:9d:1b:97:5d:1d:7b: 60:79:11:bc:3e:e2:d1:51:0d:5a:74:90:ca:15:ec: 6d:d2:f6:bc:1a:9f:5d:fb:3c:48:fe:f8:cf:14:99: 04:5b:d2:12:0f:ee:c5:13:d6:40:86:48:b4:a2:27: d6:1e:c0:f9:9f:66:69:cc:8c:4e:ee:8f:0d:2e:f3: e8:06:aa:89:ec:bd:96:5b:ab:61:be:d9:a7:52:6c: 80:a8:0f:ab:2c:ba:9d:c9:79:d3:f4:80:c1:9e:28: d5:8f:84:bb:10:a3:6b:b6:45:34:55:01:56:88:d8: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CD:3A:D7:23:84:78:3D:A7:1E:56:E9:F3:C3:83:B8:5D:40:DF:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7e:6f:74:d5:5b:1a:fa:95:da:6b:77:2d:12:04:54:c7:80: 02:77:09:38:84:4b:fa:41:6e:5c:b7:35:28:96:50:5d:d3:2f: 8c:20:5f:6c:76:83:5d:43:22:14:bc:2e:d2:c7:dc:cf:49:45: c5:13:20:6e:3d:de:25:37:8e:f7:1e:ca:77:93:61:56:3e:bf: 61:52:ed:cc:43:af:fd:9f:8b:61:66:6b:33:94:85:63:49:e7: 74:16:f8:74:8d:f9:1b:51:f8:7f:43:60:72:aa:2a:dd:4a:de: 40:54:58:41:7f:96:37:f1:af:2d:b0:e2:97:6f:72:3b:ea:59: 49:56:27:85:83:fc:72:e6:c7:45:68:6e:ec:7c:06:f5:87:08: 70:11:38:c4:46:79:86:71:30:f0:98:94:ac:0a:c4:d0:4b:d5: 18:61:1c:50:62:a4:e1:13:7e:b8:6f:47:3d:2c:64:a1:3a:77: 57:03:b6:3b:0a:01:7f:bb:25:48:82:70:46:38:43:e7:90:30: a7:6a:6d:58:4d:84:c4:a4:59:fd:43:66:d4:ff:33:c2:3a:21: 02:ac:56:4b:ba:d5:2e:1d:03:cb:c8:46:de:00:45:db:f8:70: 51:9b:0e:0a:de:36:39:b5:7f:22:b2:71:54:fc:7f:6e:10:ca: cf:53:70:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOby3XBbrqI9jFBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk OTBhOGQ5MDQtMTk4ZS00M2JjLWJlYTgtM2E5M2U3ZDgwNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4bP1vCKoFxelUaJLo/J3O2dNALXDSx22lFw UAa2BeuwOpEhBvIGxK1OEXYZWQ5K5zQOfEv9OCMWFVDTFeS/a/lKd3RCZWzylJym ZWANpR+dGjuuZ6HOohb+l1YtYGpY+iSJRqGtjIjLz89g7cyy+AGqB3Afcgz0w+P4 U50PPItELR8AQ9goo2tTOMsQV2CdG5ddHXtgeRG8PuLRUQ1adJDKFext0va8Gp9d +zxI/vjPFJkEW9ISD+7FE9ZAhki0oifWHsD5n2ZpzIxO7o8NLvPoBqqJ7L2WW6th vtmnUmyAqA+rLLqdyXnT9IDBnijVj4S7EKNrtkU0VQFWiNiLgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDNOtcjhHg9px5W6fPDg7hdQN8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGMyNTJlNjQtZGQyMi0z YTRhLWJkZGEtY2E2OWFiNWNkODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ+b3TVWxr6ldprdy0SBFTHgAJ3CTiES/pBbly3NSiWUF3TL4wgX2x2 g11DIhS8LtLH3M9JRcUTIG493iU3jvceyneTYVY+v2FS7cxDr/2fi2FmazOUhWNJ 53QW+HSN+RtR+H9DYHKqKt1K3kBUWEF/ljfxry2w4pdvcjvqWUlWJ4WD/HLmx0Vo bux8BvWHCHAROMRGeYZxMPCYlKwKxNBL1RhhHFBipOETfrhvRz0sZKE6d1cDtjsK AX+7JUiCcEY4Q+eQMKdqbVhNhMSkWf1DZtT/M8I6IQKsVku61S4dA8vIRt4ARdv4 cFGbDgreNjm1fyKycVT8f24Qys9TcNI= -----END CERTIFICATE-----Generated at Fri Nov 22 14:29:22 2024 by rpki-client on console-ams.rpki-client.org