$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb49753a-762d-3b45-a7d4-dbc145992e77.roa File: eb49753a-762d-3b45-a7d4-dbc145992e77.roa (raw, json) Hash identifier: lj2EU6iZT2aDj2QrYltm8rto+iM/O0FK2Znwt/QgRYw= Subject key identifier: 95:B7:AC:1F:AF:35:27:0C:66:61:10:B0:D8:DE:FB:E2:FB:40:4F:F2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CE6F2D3C8CC1AC280DB8EF00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb49753a-762d-3b45-a7d4-dbc145992e77.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 21723 IP address blocks: 208.181.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:2d:3c:8c:c1:ac:28:0d:b8:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=5851545e-8b40-457c-94cd-c925b8cdc26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:a4:72:3f:37:19:77:82:0e:84:4a:d7:de: e6:b0:15:5f:a9:f7:dd:4d:15:af:bf:75:9c:c0:24: 5c:74:75:37:0b:77:f8:73:53:e9:46:53:c0:05:8d: f7:bb:68:cc:62:6d:f1:c7:52:24:67:17:4e:b8:d1: 47:fa:eb:2b:cb:a0:25:8b:93:6f:5c:b5:e4:52:77: f0:52:28:47:89:aa:db:53:16:00:a8:ab:d0:bb:bd: 75:cb:a6:30:84:02:b8:ab:a8:3e:bb:b2:cd:18:a0: 36:c6:97:4d:65:d1:37:45:c1:e6:76:01:30:67:57: 31:82:e7:97:0c:01:6f:41:fc:4c:0b:e7:0b:bc:1c: 34:d3:d9:1b:66:76:63:19:57:25:93:e0:18:bc:d7: fa:71:56:7a:b3:7a:3f:5d:07:10:2b:f0:c2:64:d8: 64:12:f9:5e:15:bd:7f:7c:37:40:10:42:ae:93:37: b4:d9:ad:15:4f:59:9c:72:2e:a3:b4:46:76:96:3d: 31:85:63:8e:f8:df:31:bc:31:51:10:f1:08:0c:ef: a7:7d:3a:9a:b5:d7:0c:15:ab:91:29:66:a0:1c:0e: 5f:85:a4:24:33:e9:e7:6e:49:b9:7e:43:dd:b7:20: a5:8d:55:2a:ce:87:6d:1f:2e:6d:34:9f:18:fc:70: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B7:AC:1F:AF:35:27:0C:66:61:10:B0:D8:DE:FB:E2:FB:40:4F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/eb49753a-762d-3b45-a7d4-dbc145992e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:0b:20:ea:fc:d5:f7:f8:fd:c7:5e:82:1a:3e:a7:3d:53:7f: ed:90:8b:36:f9:a8:05:3d:f3:b1:e7:44:68:e9:64:4c:65:95: 76:a4:58:0c:45:26:0e:e0:71:ed:a8:8f:25:a9:f0:4c:c9:9c: 2f:da:6c:30:94:11:52:86:2d:32:83:3a:19:cb:c6:7f:3f:81: 31:e9:93:8c:20:d2:0f:ed:62:4b:79:e0:6b:c0:d0:9e:f5:d4: e2:36:8b:ad:1e:64:a2:00:10:04:20:f8:50:fe:b6:a6:ba:26: 10:a3:2b:11:da:7c:a4:9a:92:de:df:6f:e2:b9:7b:09:6a:01: 4d:ee:b0:85:63:05:e7:40:d4:b7:f9:b3:56:4a:47:01:37:73: 07:eb:63:04:42:ea:5e:98:22:a5:32:85:a8:00:80:38:ad:e5: 62:bc:84:0f:dd:a6:7f:5f:ba:c0:7e:5d:15:a7:f1:4c:72:c9: 85:15:ac:00:86:bb:24:82:b2:3d:0f:0c:08:f4:7f:99:dc:41: 32:63:a9:6b:c5:fb:6e:79:03:50:31:d3:a1:24:5f:6f:f1:08: ad:75:ec:03:3d:a9:bc:55:34:48:45:cd:fc:61:95:4a:7c:1f: 1b:a1:24:15:3f:d0:fd:23:cb:fb:d8:bd:2c:f4:db:cd:e3:b4: ac:5b:5c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOby08jMGsKA247wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk NTg1MTU0NWUtOGI0MC00NTdjLTk0Y2QtYzkyNWI4Y2RjMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xCkcj83GXeCDoRK197msBVfqffdTRWvv3Wc wCRcdHU3C3f4c1PpRlPABY33u2jMYm3xx1IkZxdOuNFH+usry6Ali5NvXLXkUnfw UihHiarbUxYAqKvQu711y6YwhAK4q6g+u7LNGKA2xpdNZdE3RcHmdgEwZ1cxgueX DAFvQfxMC+cLvBw009kbZnZjGVclk+AYvNf6cVZ6s3o/XQcQK/DCZNhkEvleFb1/ fDdAEEKukze02a0VT1mcci6jtEZ2lj0xhWOO+N8xvDFREPEIDO+nfTqatdcMFauR KWagHA5fhaQkM+nnbkm5fkPdtyCljVUqzodtHy5tNJ8Y/HBv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW3rB+vNScMZmEQsNje++L7QE/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWI0OTc1M2EtNzYyZC0z YjQ1LWE3ZDQtZGJjMTQ1OTkyZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsLIOr81ff4/cdegho+pz1Tf+2Qizb5qAU987HnRGjpZExllXakWAxF Jg7gce2ojyWp8EzJnC/abDCUEVKGLTKDOhnLxn8/gTHpk4wg0g/tYkt54GvA0J71 1OI2i60eZKIAEAQg+FD+tqa6JhCjKxHafKSakt7fb+K5ewlqAU3usIVjBedA1Lf5 s1ZKRwE3cwfrYwRC6l6YIqUyhagAgDit5WK8hA/dpn9fusB+XRWn8UxyyYUVrACG uySCsj0PDAj0f5ncQTJjqWvF+255A1Ax06EkX2/xCK117AM9qbxVNEhFzfxhlUp8 HxuhJBU/0P0jy/vYvSz0283jtKxbXMQ= -----END CERTIFICATE-----Generated at Fri Nov 22 14:29:22 2024 by rpki-client on console-ams.rpki-client.org