$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa File: 9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa (raw, json) Hash identifier: BxsM8okwstHmKnQqnUCxkoC2shtvOMTc7XH5IZa4l3E= Subject key identifier: 83:FC:8F:45:B9:79:F7:06:17:CA:E6:E8:78:96:D6:84:7A:67:C3:20 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F432858474F4B7048E6A7265CE79F0A40 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 11404 IP address blocks: 208.70.146.0/23 maxlen: 24 208.70.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:70:48:e6:a7:26:5c:e7:9f:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=19a50bde-3e5e-40e5-abc7-91d627ef1357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:83:83:45:6c:1e:8c:8d:4f:ca:3e:88:1a: bc:d4:5b:df:84:65:ae:67:08:3e:2b:96:b1:f5:15: 7e:eb:ee:39:fe:02:4e:2b:df:c4:d2:a9:81:c8:fa: 48:73:17:a0:7b:e1:3b:7f:7a:2a:f5:58:db:31:e0: 1b:c5:32:09:0f:12:9d:d1:72:9e:b2:85:5f:79:d3: 7f:83:44:d5:b4:6e:ab:b0:29:25:5a:fa:db:08:8d: 7f:b1:67:b0:95:58:91:81:42:7b:23:6a:c0:cc:28: ab:49:dd:b8:26:29:96:c6:ae:ed:79:7c:0e:03:72: 92:92:1b:88:5c:9a:14:b2:1f:75:25:ec:e6:16:8b: 97:e8:de:50:2d:c9:b7:9c:a3:a8:ff:da:46:aa:71: ed:8f:df:c4:54:0a:94:0c:f2:a6:3a:c1:69:8c:df: a8:22:b0:a3:af:21:dc:bf:dc:5a:80:6f:af:b0:ae: 42:df:58:ed:f7:e4:86:47:11:4f:de:c4:19:27:5d: a5:79:c3:d3:6c:b2:9d:6a:b9:11:7c:5b:0d:da:0d: d2:69:c4:36:80:89:19:b9:e2:c6:f0:6e:2b:9b:65: ff:90:e7:9b:ab:fc:f9:33:d5:94:6f:ba:18:f8:86: 83:41:a0:74:56:70:51:b0:79:6a:ad:70:de:7a:24: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:8F:45:B9:79:F7:06:17:CA:E6:E8:78:96:D6:84:7A:67:C3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 208.70.146.0/23 208.70.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:0b:15:2c:9b:29:19:5d:85:13:a4:41:f6:f3:3c:83:f0:fe: a6:69:da:ef:5a:ca:68:03:e1:e3:04:d2:f0:3b:13:cb:d9:18: 93:68:dc:a7:9b:8a:b3:e9:f1:ff:ac:64:43:ad:1b:1c:ba:3c: f6:fb:75:ed:5c:d9:94:65:8a:06:27:17:b7:98:5e:04:64:2b: d9:68:37:fe:7d:59:c4:30:0f:e8:34:d0:62:fb:32:a0:60:f9: 06:f5:b8:c1:f4:23:63:ee:ae:46:f2:15:a9:1b:98:62:9c:ad: 0f:47:f1:71:c5:35:da:7b:a4:a3:41:2c:97:e3:84:b7:03:6d: e6:0b:2e:89:26:4c:4a:9a:8f:80:e4:0c:d5:fe:36:3d:6a:9f: d6:42:7f:a0:dc:42:25:ea:fa:1c:c1:46:5f:21:4d:94:b0:3c: ba:7f:53:be:c8:1c:ea:b0:8a:fe:3f:5a:3a:6b:a7:ca:59:5f: 47:8f:43:5f:53:62:9e:f4:65:db:6c:cc:1f:2a:ed:32:a6:6e: 0d:c7:2c:25:24:b9:2a:78:ed:bd:5f:5d:f8:74:b0:f4:c2:fa: 1b:a0:0f:67:ce:8e:b5:03:77:49:ac:1e:31:f3:30:76:0e:00: fc:e8:c4:00:d6:ac:63:e3:0f:cf:5b:b3:fd:1d:d1:f8:c1:a6: f2:eb:f1:97 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdPS3BI5qcmXOefCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MTlhNTBiZGUtM2U1ZS00MGU1LWFiYzctOTFkNjI3ZWYxMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6GDg0VsHoyNT8o+iBq81FvfhGWuZwg+K5ax 9RV+6+45/gJOK9/E0qmByPpIcxege+E7f3oq9VjbMeAbxTIJDxKd0XKesoVfedN/ g0TVtG6rsCklWvrbCI1/sWewlViRgUJ7I2rAzCirSd24JimWxq7teXwOA3KSkhuI XJoUsh91JezmFouX6N5QLcm3nKOo/9pGqnHtj9/EVAqUDPKmOsFpjN+oIrCjryHc v9xagG+vsK5C31jt9+SGRxFP3sQZJ12lecPTbLKdarkRfFsN2g3SacQ2gIkZueLG 8G4rm2X/kOebq/z5M9WUb7oY+IaDQaB0VnBRsHlqrXDeeiRQWQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIP8j0W5efcGF8rm6HiW1oR6Z8MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvOWExYjA1NDgtMWQ4OC0z Mjg1LWJiMzEtZDJhZmU4NWRhZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0EaSAwQA 0EaWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE4LFSybKRldhROkQfbzPIPw/qZp2u9aymgD4eME0vA7E8vZ GJNo3KebirPp8f+sZEOtGxy6PPb7de1c2ZRligYnF7eYXgRkK9loN/59WcQwD+g0 0GL7MqBg+Qb1uMH0I2PurkbyFakbmGKcrQ9H8XHFNdp7pKNBLJfjhLcDbeYLLokm TEqaj4DkDNX+Nj1qn9ZCf6DcQiXq+hzBRl8hTZSwPLp/U77IHOqwiv4/Wjprp8pZ X0ePQ19TYp70ZdtszB8q7TKmbg3HLCUkuSp47b1fXfh0sPTC+hugD2fOjrUDd0ms HjHzMHYOAPzoxADWrGPjD89bs/0d0fjBpvLr8Zc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:29 2024 by rpki-client on console-ams.rpki-client.org