$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json) Hash identifier: FslUKpg9lEs61iJBWDgcOiJtXqqgWr9Nz7KszYnA8us= Subject key identifier: A6:86:5A:6F:B2:1F:DB:EB:FF:12:4E:3E:04:6F:DF:BD:05:93:C2:10 Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Certificate serial: 010D0C9F43285847B3CC15723C98059A6DCF3540 Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 14721 IP address blocks: 208.86.116.0/22 maxlen: 24 208.91.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:15:72:3c:98:05:9a:6d:cf:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=84984b32-f139-4943-9f49-296c9c5b3ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f5:10:f3:6c:f7:a3:a2:ca:d9:90:4b:2a:9b: ad:36:87:ba:d5:42:fa:42:9e:33:b2:b1:d8:0c:8c: 3d:f1:9e:7b:e8:b0:07:54:eb:5d:3a:1d:ad:3d:72: ed:6f:3c:0a:ab:e6:10:c9:d7:e3:d6:24:95:2f:1e: 66:cb:0f:01:92:96:a9:79:90:89:ec:b9:ea:a8:dc: ea:bf:fb:24:63:5c:42:2f:98:a1:bf:59:1e:ee:2d: c4:35:8a:06:cb:47:d9:e6:6e:24:2c:35:9b:70:e4: 90:85:c8:7a:24:ac:dd:49:ea:ab:ab:04:d0:85:15: 25:fb:62:2f:60:6f:9f:d4:b6:b1:61:56:76:9f:ea: 24:39:4e:25:63:57:50:b8:43:5d:0a:c6:b6:17:e9: ed:fe:62:ba:e4:cd:5a:3f:6e:14:fb:d5:40:a8:e1: 34:37:eb:3f:77:dd:5f:91:7d:af:72:c9:a5:34:39: 0c:a9:cc:2e:67:4b:40:2d:df:b3:1e:0e:13:f6:f3: 2b:36:7e:45:83:75:19:ac:f9:d1:2a:30:7f:1b:fb: cf:97:db:58:a8:59:48:9a:77:9f:b8:05:f1:d8:bc: 08:e2:df:4b:20:e0:bc:c0:a2:2c:1b:74:46:8d:0e: c7:cc:b6:49:e9:56:80:5f:dd:6f:c3:0a:fc:42:d6: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:86:5A:6F:B2:1F:DB:EB:FF:12:4E:3E:04:6F:DF:BD:05:93:C2:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl X509v3 Authority Key Identifier: keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer sbgp-ipAddrBlock: critical IPv4: 208.86.116.0/22 208.91.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7c:da:42:24:f6:f8:5d:b5:60:c6:a4:6e:c7:46:03:b8:07: 7f:f9:05:1a:ef:03:a9:79:2c:29:a4:fd:c0:2e:3e:b7:a3:1f: 1b:92:ec:9b:b8:e2:c7:17:07:6e:4a:43:e4:8a:e3:d5:12:44: 59:29:c5:d5:cd:d0:83:cb:85:43:16:2a:d8:e9:ae:59:36:6f: ed:f7:c0:bd:11:f8:1c:77:00:f8:28:4e:61:0c:e8:d6:71:0f: 37:a6:05:b1:2b:32:44:b2:dd:9a:d3:54:8e:db:0e:69:c3:eb: c3:1a:e8:ed:f6:a7:7d:6a:73:3d:23:bb:50:03:d0:4a:0e:ec: 58:ac:f2:58:3a:cd:24:51:2b:18:06:6a:0d:e2:43:01:21:f0: 56:03:bd:4a:7a:54:7a:5b:00:5d:2a:27:3c:63:19:05:71:b8: 94:c1:a6:9e:6a:6f:5a:04:a0:80:b7:77:8b:d4:ff:bc:ca:7d: e5:02:44:6f:3e:31:44:e5:03:73:99:cc:43:b0:90:13:68:20: 6c:e7:28:e9:d9:dc:14:f9:6b:98:48:b9:e0:34:25:bc:a5:56: be:52:dd:09:b1:d9:79:87:05:fc:f8:de:00:6a:88:f9:46:ab: 88:67:97:4e:ad:e2:8a:e2:20:a6:e4:59:dc:c5:74:b9:06:66: c9:fa:e9:51 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEezzBVyPJgFmm3PNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0 YTVhMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ODQ5ODRiMzItZjEzOS00OTQzLTlmNDktMjk2YzljNWIzZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vUQ82z3o6LK2ZBLKputNoe61UL6Qp4zsrHY DIw98Z576LAHVOtdOh2tPXLtbzwKq+YQydfj1iSVLx5myw8BkpapeZCJ7LnqqNzq v/skY1xCL5ihv1ke7i3ENYoGy0fZ5m4kLDWbcOSQhch6JKzdSeqrqwTQhRUl+2Iv YG+f1LaxYVZ2n+okOU4lY1dQuENdCsa2F+nt/mK65M1aP24U+9VAqOE0N+s/d91f kX2vcsmlNDkMqcwuZ0tALd+zHg4T9vMrNn5Fg3UZrPnRKjB/G/vPl9tYqFlImnef uAXx2LwI4t9LIOC8wKIsG3RGjQ7HzLZJ6VaAX91vwwr8QtZ+EwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKaGWm+yH9vr/xJOPgRv370Fk8IQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3 NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC 0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAl82kIk9vhdtWDGpG7HRgO4B3/5BRrvA6l5LCmk/cAuPrej HxuS7Ju44scXB25KQ+SK49USRFkpxdXN0IPLhUMWKtjprlk2b+33wL0R+Bx3APgo TmEM6NZxDzemBbErMkSy3ZrTVI7bDmnD68Ma6O32p31qcz0ju1AD0EoO7Fis8lg6 zSRRKxgGag3iQwEh8FYDvUp6VHpbAF0qJzxjGQVxuJTBpp5qb1oEoIC3d4vU/7zK feUCRG8+MUTlA3OZzEOwkBNoIGznKOnZ3BT5a5hIueA0JbylVr5S3Qmx2XmHBfz4 3gBqiPlGq4hnl06t4oriIKbkWdzFdLkGZsn66VE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:02 2024 by rpki-client on console-ams.rpki-client.org