$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/950aef02-b8e7-356d-b6d5-602b99c82b29.roa File: 950aef02-b8e7-356d-b6d5-602b99c82b29.roa (raw, json) Hash identifier: QGty5mVYCae2AXdqzXf80sXAvGf7Trfiim+6XwQrgQw= Subject key identifier: AF:1C:B5:F9:8C:91:AA:77:84:C0:78:5A:FC:A7:63:0C:D5:7C:55:0D Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285847E62B61BF89E06DA6396A6C50 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/950aef02-b8e7-356d-b6d5-602b99c82b29.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36040 IP address blocks: 208.117.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:61:bf:89:e0:6d:a6:39:6a:6c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=4c22dadc-aee3-4f14-8893-7bb52260b2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:d9:17:6d:3a:1b:77:98:d7:34:31:0a:20: ea:1b:b6:69:d1:46:58:34:3a:1d:a9:dd:ce:e1:d7: bf:c8:36:28:77:13:4b:fe:fe:5b:5e:70:8b:ac:59: 30:75:25:25:22:6e:20:c2:74:f9:18:8b:ba:de:5d: c5:94:dc:91:fb:0f:3b:77:96:cc:d4:d0:36:3c:ab: 82:a8:08:8d:9f:bc:f2:47:1f:8e:50:5f:19:79:31: 33:74:17:d6:9c:75:d3:ab:3a:ac:c5:4c:b2:77:92: 1a:03:a1:0d:80:e7:99:09:b8:4c:10:ec:5b:6e:1a: 45:fe:c9:73:df:65:d4:33:84:c7:c5:4f:89:b9:aa: 67:d6:51:3a:84:3c:0b:6c:df:28:f3:e6:20:d0:31: 34:0d:c3:ad:c8:c9:bb:fe:83:28:52:1b:11:ea:2e: 1a:ed:50:97:28:2d:fb:c8:9f:a6:a8:4d:89:06:1f: ee:5b:63:f7:e7:80:7a:1e:4f:b5:90:30:1b:5e:ff: a5:50:a2:a1:3c:1f:f0:4b:2c:7d:3b:fe:d6:6a:9e: bb:2c:a3:da:0a:44:cb:06:06:08:9d:2f:b8:0f:87: d5:a3:a6:81:f7:86:6f:63:e3:d8:cf:02:f4:cc:69: ec:7b:98:ac:82:c9:25:b0:3a:52:6d:b9:09:eb:3a: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:B5:F9:8C:91:AA:77:84:C0:78:5A:FC:A7:63:0C:D5:7C:55:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/950aef02-b8e7-356d-b6d5-602b99c82b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d2:66:aa:5f:eb:77:a4:6d:13:78:84:7c:20:39:03:07:8e: 9e:38:a1:da:4f:3a:a6:5b:80:34:eb:32:30:90:c4:b3:8f:d7: 94:4a:88:ab:8e:76:a2:1f:0c:f0:e1:28:88:1f:a3:fb:5c:f1: 8e:77:f6:3a:83:2f:0e:ce:6c:55:9e:44:e4:d7:02:c3:d7:e9: 8f:e5:d4:96:60:0d:1d:65:e1:d3:d9:0d:b9:8d:05:6e:3c:1d: c9:21:2c:b8:3d:d9:3d:d1:db:2e:10:60:6c:1f:a1:79:be:dc: 77:73:67:dd:e2:1c:64:98:b1:6d:4d:63:48:00:6a:eb:8c:d8: 4f:a2:17:8e:3f:84:1a:f0:86:19:71:b0:3e:9d:62:6b:23:fe: 65:6a:cf:1e:95:99:4f:93:67:4f:04:4d:3c:96:2d:15:b5:3e: 6a:3d:3f:81:cb:79:0c:aa:ec:ce:26:a8:b5:b2:f5:34:ad:20: 67:60:b3:71:df:70:fb:96:b8:fe:c0:51:ab:87:7f:5f:fe:89: a0:aa:da:db:30:b9:82:a2:95:42:90:76:7c:43:da:da:32:b7: e9:c2:dd:d9:e2:66:6b:42:7d:95:a9:b1:d1:dc:bd:35:5e:41: d4:33:48:63:5d:e3:60:55:04:34:32:f1:f4:25:9e:01:c8:6e: 3f:da:f2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK2G/ieBtpjlqbFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NGMyMmRhZGMtYWVlMy00ZjE0LTg4OTMtN2JiNTIyNjBiMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLZF206G3eY1zQxCiDqG7Zp0UZYNDodqd3O 4de/yDYodxNL/v5bXnCLrFkwdSUlIm4gwnT5GIu63l3FlNyR+w87d5bM1NA2PKuC qAiNn7zyRx+OUF8ZeTEzdBfWnHXTqzqsxUyyd5IaA6ENgOeZCbhMEOxbbhpF/slz 32XUM4THxU+Juapn1lE6hDwLbN8o8+Yg0DE0DcOtyMm7/oMoUhsR6i4a7VCXKC37 yJ+mqE2JBh/uW2P354B6Hk+1kDAbXv+lUKKhPB/wSyx9O/7Wap67LKPaCkTLBgYI nS+4D4fVo6aB94ZvY+PYzwL0zGnse5isgsklsDpSbbkJ6zrzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8ctfmMkap3hMB4WvynYwzVfFUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOTUwYWVmMDItYjhlNy0z NTZkLWI2ZDUtNjAyYjk5YzgyYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0HX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPSZqpf63ekbRN4hHwgOQMHjp44odpPOqZbgDTrMjCQxLOP15RKiKuO dqIfDPDhKIgfo/tc8Y539jqDLw7ObFWeROTXAsPX6Y/l1JZgDR1l4dPZDbmNBW48 HckhLLg92T3R2y4QYGwfoXm+3HdzZ93iHGSYsW1NY0gAauuM2E+iF44/hBrwhhlx sD6dYmsj/mVqzx6VmU+TZ08ETTyWLRW1Pmo9P4HLeQyq7M4mqLWy9TStIGdgs3Hf cPuWuP7AUauHf1/+iaCq2tswuYKilUKQdnxD2toyt+nC3dniZmtCfZWpsdHcvTVe QdQzSGNd42BVBDQy8fQlngHIbj/a8oc= -----END CERTIFICATE-----Generated at Sun Nov 24 15:28:56 2024 by rpki-client on console-fra.rpki-client.org