$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa File: d99b52cf-3f59-3923-9d2f-f64a1233a235.roa (raw, json) Hash identifier: OJGH+1xCRqBXuskYDB5QFy8l/7ye1qPOXaZuzy4w24k= Subject key identifier: DB:C4:5A:F1:4A:72:BA:CA:A5:6C:D7:C5:FC:9D:34:63:2A:99:00:AD Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285847E62B336A5F85A0E24541AB40 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36040 IP address blocks: 208.117.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:33:6a:5f:85:a0:e2:45:41:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=8f1bcd4c-d7ba-4e30-aecf-9d415260c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:1f:e2:17:f4:ce:6f:25:7d:3a:c3:41:88: 44:2a:8d:1d:d7:63:93:a6:25:20:f6:ee:23:58:8f: ce:1c:ec:84:85:72:f8:ab:96:2e:7f:58:3f:b8:cf: 6d:98:1c:5e:25:3a:c5:97:1b:be:8a:0e:0e:46:fc: 60:67:38:27:aa:35:b6:05:30:4d:e5:5b:de:61:50: b0:ea:3c:80:3f:89:01:12:a1:b7:41:10:5d:ec:e0: 0c:a7:09:b5:70:41:90:45:bc:e9:83:0a:da:a8:61: 8a:c2:57:25:9e:18:94:4f:15:a9:4e:d2:df:e3:08: 01:05:99:3b:c1:5e:08:a4:1d:85:ad:ca:a9:27:6c: 29:4b:7e:e9:64:71:a2:bf:ce:22:c7:5c:68:d9:88: 1e:39:ad:09:89:40:7b:16:ed:53:5d:30:68:a8:b8: 13:59:5b:98:16:0b:a0:e4:45:a8:99:b5:95:b9:41: 3b:f5:bd:e5:53:55:29:ea:d9:a8:9d:e7:4b:2d:57: a9:1d:af:61:bb:71:8d:bd:87:13:f7:4e:1f:e1:a6: a7:7e:a9:ec:31:50:02:27:a9:bc:57:9b:af:51:91: 52:08:29:52:79:8e:82:a4:25:7b:5d:1c:1d:42:74: 2f:58:c4:a2:e3:19:2e:d7:ac:ae:d0:b4:95:42:1c: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C4:5A:F1:4A:72:BA:CA:A5:6C:D7:C5:FC:9D:34:63:2A:99:00:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:de:35:a1:14:9b:73:d3:e9:81:12:6f:30:97:f4:8b:f8:bf: 6a:e2:37:9e:1d:8c:97:93:d8:d5:4a:0d:8d:57:d7:b5:17:90: e8:33:2c:41:5c:bd:ac:92:68:7c:70:8a:57:1b:3f:79:7d:b8: 04:9e:3a:20:98:81:83:f8:25:e8:24:c1:01:f2:6b:8b:d3:e0: 63:4e:0d:69:58:74:13:6f:f7:b5:fe:af:57:24:e4:89:d3:b7: d9:e3:f2:7c:98:68:3b:da:3c:7e:a9:03:c6:5e:e5:25:a8:0f: 4b:17:3c:77:a2:3d:68:0c:54:22:26:ec:5d:56:40:43:82:0d: ea:f7:1f:29:7f:18:e6:dd:8e:39:2c:b3:53:cd:9d:ae:51:a8: e4:47:e6:c4:bb:ef:08:2a:05:95:b9:72:fd:05:aa:40:b8:a3: 06:86:70:9e:6e:77:a7:00:e6:31:ac:99:8a:0e:aa:c0:02:22: 36:19:39:54:1a:4e:15:54:5c:6e:88:74:d3:1d:4e:5e:81:76: a1:66:e0:31:bd:4f:38:e0:d2:ae:a2:10:0e:3e:0d:f4:e8:5e: d5:48:15:4d:08:c0:57:94:11:d2:79:8a:37:c7:dd:dc:6c:ac: a2:9b:72:24:c9:a0:0d:9b:7a:5b:ca:2a:2a:99:4c:09:6c:95: fd:bd:5a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzNqX4Wg4kVBq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OGYxYmNkNGMtZDdiYS00ZTMwLWFlY2YtOWQ0MTUyNjBjNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTwf4hf0zm8lfTrDQYhEKo0d12OTpiUg9u4j WI/OHOyEhXL4q5Yuf1g/uM9tmBxeJTrFlxu+ig4ORvxgZzgnqjW2BTBN5VveYVCw 6jyAP4kBEqG3QRBd7OAMpwm1cEGQRbzpgwraqGGKwlclnhiUTxWpTtLf4wgBBZk7 wV4IpB2FrcqpJ2wpS37pZHGiv84ix1xo2YgeOa0JiUB7Fu1TXTBoqLgTWVuYFgug 5EWombWVuUE79b3lU1Up6tmonedLLVepHa9hu3GNvYcT904f4aanfqnsMVACJ6m8 V5uvUZFSCClSeY6CpCV7XRwdQnQvWMSi4xku16yu0LSVQhzXWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvEWvFKcrrKpWzXxfydNGMqmQCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZDk5YjUyY2YtM2Y1OS0z OTIzLTlkMmYtZjY0YTEyMzNhMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjeNaEUm3PT6YESbzCX9Iv4v2riN54djJeT2NVKDY1X17UXkOgzLEFc vaySaHxwilcbP3l9uASeOiCYgYP4JegkwQHya4vT4GNODWlYdBNv97X+r1ck5InT t9nj8nyYaDvaPH6pA8Ze5SWoD0sXPHeiPWgMVCIm7F1WQEOCDer3Hyl/GObdjjks s1PNna5RqORH5sS77wgqBZW5cv0FqkC4owaGcJ5ud6cA5jGsmYoOqsACIjYZOVQa ThVUXG6IdNMdTl6BdqFm4DG9Tzjg0q6iEA4+DfToXtVIFU0IwFeUEdJ5ijfH3dxs rKKbciTJoA2belvKKiqZTAlslf29Wo8= -----END CERTIFICATE-----Generated at Sun Nov 24 16:06:34 2024 by rpki-client on console-ams.rpki-client.org