$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa File: d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa (raw, json) Hash identifier: Wn8RqQEJoKuVdKp4+fJHEhWjPv6zEGsrewrdTZv5fE4= Subject key identifier: 8B:06:63:7E:48:03:D1:D6:19:D1:B5:05:E0:DD:26:FB:D2:48:9D:A7 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858475B8D9C7DB1C4F2DED5A53680 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa Signing time: Fri 27 Sep 2024 22:23:50 +0000 ROA not before: Fri 27 Sep 2024 22:23:50 +0000 ROA not after: Thu 26 Dec 2024 23:23:50 +0000 asID: 14315 IP address blocks: 200.229.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5b:8d:9c:7d:b1:c4:f2:de:d5:a5:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 27 22:23:50 2024 GMT Not After : Dec 26 23:23:50 2024 GMT Subject: CN=8b17bd31-9ba5-4058-a5e2-0429e92b6026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:03:c3:23:89:e9:e5:c7:c3:7b:82:6e:aa: e7:e2:03:6c:8f:12:5e:0a:1b:a5:06:9c:d6:b7:e5: 94:cf:57:9c:12:cd:54:b9:bc:43:4b:33:3d:cb:7b: a7:4a:e4:cb:e6:6f:88:3d:79:8c:1a:e3:62:4a:a3: 26:00:41:5f:6b:45:03:3f:39:71:32:62:d9:d4:23: e7:45:3f:83:b7:ab:b5:7d:d7:a7:23:dd:13:1c:3a: 6b:d5:5d:5c:fe:62:17:59:51:15:82:59:7e:9c:03: a1:42:7a:be:fc:c1:fe:f9:ff:aa:7d:bd:08:51:d1: 98:30:21:d7:6c:ab:aa:06:34:ca:2f:df:36:18:c5: bb:47:0a:1d:9a:25:21:e5:69:9c:52:b9:28:43:e4: 56:32:ed:23:75:1b:19:45:a5:45:15:aa:07:cd:ee: 3e:87:3e:10:b6:fc:89:62:0a:3e:a2:23:f4:1e:fb: 08:8c:16:5b:21:87:3d:5d:46:07:a4:ec:cf:8b:fc: 55:c8:b1:58:e3:af:3f:18:94:74:7a:ba:40:ed:37: e7:3a:84:f5:f9:3f:3d:22:c8:4f:df:83:8b:38:0b: 48:c8:1e:03:e9:80:36:d2:de:6a:c8:7d:0b:54:25: 1c:ab:43:55:b6:94:a6:c0:11:86:8e:20:03:60:70: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:06:63:7E:48:03:D1:D6:19:D1:B5:05:E0:DD:26:FB:D2:48:9D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d4a6a7e0-70c7-31b3-b20c-4695585aeeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1e:c0:7c:36:c1:50:36:39:c5:57:c2:e3:98:c2:e5:43:ae: c3:f9:bb:75:bf:bc:57:69:0f:c5:00:3e:9e:d8:7e:0f:70:9a: 21:06:20:cf:23:ec:36:df:59:dc:54:44:dd:61:f2:55:0b:1b: ff:fd:4a:fa:fd:4e:ea:98:9a:29:40:a9:33:fc:11:8d:7a:00: 51:d9:9b:d6:53:6f:29:d8:23:dd:27:d3:2c:9f:9a:9e:be:d8: 44:d9:09:89:c2:66:4d:9e:ce:ec:a5:05:ea:8b:e7:44:82:55: 6d:a2:cf:ca:f2:9d:26:de:08:38:88:d7:2b:a3:db:4e:17:7b: 28:7f:04:20:e9:4b:99:8b:a7:52:a6:f4:93:36:af:18:67:c9: e8:33:32:dd:24:00:94:a3:38:04:48:e9:db:6f:6c:8a:6e:bc: b6:6e:e6:f0:d4:ec:c4:4e:dc:a6:2e:0a:60:ab:72:e2:43:ca: 96:89:70:ad:62:33:72:ea:c4:91:0e:4f:8b:e7:37:9f:2c:ad: 0a:c4:70:f9:06:6a:e1:d5:b1:14:e3:d0:b2:74:64:a0:fa:48: 74:ee:b2:29:f0:8e:9e:7c:c2:98:b0:13:ee:47:85:af:a7:13: 06:a4:61:6b:c1:93:ff:03:3d:36:4d:67:34:57:98:6c:d3:ed: e1:d9:db:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdbjZx9scTy3tWlNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI0MDkyNzIyMjM1MFoXDTI0MTIyNjIzMjM1MFowLzEtMCsGA1UEAxMk OGIxN2JkMzEtOWJhNS00MDU4LWE1ZTItMDQyOWU5MmI2MDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/4DwyOJ6eXHw3uCbqrn4gNsjxJeChulBpzW t+WUz1ecEs1UubxDSzM9y3unSuTL5m+IPXmMGuNiSqMmAEFfa0UDPzlxMmLZ1CPn RT+Dt6u1fdenI90THDpr1V1c/mIXWVEVgll+nAOhQnq+/MH++f+qfb0IUdGYMCHX bKuqBjTKL982GMW7RwodmiUh5WmcUrkoQ+RWMu0jdRsZRaVFFaoHze4+hz4QtvyJ Ygo+oiP0HvsIjBZbIYc9XUYHpOzPi/xVyLFY468/GJR0erpA7TfnOoT1+T89IshP 34OLOAtIyB4D6YA20t5qyH0LVCUcq0NVtpSmwBGGjiADYHD2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsGY35IA9HWGdG1BeDdJvvSSJ2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZDRhNmE3ZTAtNzBjNy0z MWIzLWIyMGMtNDY5NTU4NWFlZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEewHw2wVA2OcVXwuOYwuVDrsP5u3W/vFdpD8UAPp7Yfg9wmiEGIM8j 7DbfWdxURN1h8lULG//9Svr9TuqYmilAqTP8EY16AFHZm9ZTbynYI90n0yyfmp6+ 2ETZCYnCZk2ezuylBeqL50SCVW2iz8rynSbeCDiI1yuj204Xeyh/BCDpS5mLp1Km 9JM2rxhnyegzMt0kAJSjOARI6dtvbIpuvLZu5vDU7MRO3KYuCmCrcuJDypaJcK1i M3LqxJEOT4vnN58srQrEcPkGauHVsRTj0LJ0ZKD6SHTusinwjp58wpiwE+5Hha+n EwakYWvBk/8DPTZNZzRXmGzT7eHZ27M= -----END CERTIFICATE-----Generated at Sun Nov 24 18:29:22 2024 by rpki-client on console-ams.rpki-client.org