$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa File: 1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa (raw, json) Hash identifier: QHfUq1t7fZbkhNVfNmmVNpnyA0HY+sugyyNPgFIPvzM= Subject key identifier: 6D:53:99:71:3B:48:53:29:83:9E:90:12:EC:CE:C2:8C:A7:3A:DA:21 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584774FB9AF4F12738E9AAC73480 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 1239 IP address blocks: 209.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:9a:f4:f1:27:38:e9:aa:c7:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=b7341182-d0b6-4a12-8da5-be673d93cba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:39:47:55:06:84:60:95:c7:41:84:27:2a: 91:55:2b:24:3a:33:3d:fe:b4:12:77:d0:41:e4:da: d5:93:02:a6:14:77:88:fa:86:e6:99:b8:0a:59:60: ee:8a:f7:56:df:91:34:f1:2d:5a:e5:ef:89:8a:aa: f8:1c:95:ca:6b:ae:1b:d6:16:46:4e:7e:1e:d5:37: be:29:bb:d3:d1:67:07:40:ed:b9:d4:82:2c:8b:13: 69:76:a6:3e:fb:9a:a0:b7:dc:96:ed:d3:8c:fa:d9: 6f:3f:49:6a:00:e0:e1:c2:eb:d4:da:56:19:64:9e: 8c:5d:4c:e2:10:37:c4:8e:0f:ad:e3:e8:72:61:66: 33:96:c6:22:f1:43:d1:b0:17:7c:1f:5c:33:0e:ec: 2c:9c:bc:28:06:36:00:97:74:51:be:b8:2d:f6:1b: bd:8f:3d:4b:34:55:d6:83:17:93:42:05:00:1d:c9: 17:b4:f9:71:b3:18:42:7b:ba:d0:96:56:bc:b8:1d: 27:cb:03:fd:44:1b:e6:03:4c:4d:95:50:2f:81:fe: 38:f7:b5:e7:0c:a8:a0:c1:c7:8e:46:31:fb:c4:e0: 66:35:a5:a0:ae:5a:11:60:2e:84:a8:ed:69:8f:fd: 35:7b:be:90:f4:39:a7:7c:30:35:17:dc:d6:d1:6a: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:99:71:3B:48:53:29:83:9E:90:12:EC:CE:C2:8C:A7:3A:DA:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5e:de:26:fb:6b:a8:9b:2f:f3:1e:79:2e:5f:a5:71:3c:d8: 57:f5:87:33:83:b0:11:fe:92:b4:02:85:0f:00:a7:8b:a4:b6: 63:1e:cf:60:41:6e:1e:3b:e0:bd:f1:56:bc:c2:5e:17:22:e8: 2a:46:fa:51:9f:44:22:75:56:f4:19:44:e5:b3:f8:74:4d:9c: ce:e6:44:69:ca:15:dd:75:ef:c4:0f:1d:f9:d1:30:81:46:06: dd:5b:52:53:a5:81:fd:15:d8:8f:e2:00:1a:ea:07:d9:a6:51: 07:94:53:9d:9b:63:68:e6:0a:e5:27:b9:1d:c9:4b:ff:e6:c3: 13:02:0e:9f:45:33:7a:1c:9d:9c:4a:07:42:94:fe:49:bb:37: 1f:a8:63:37:88:65:f5:f2:1e:b2:59:c5:f5:42:d7:f7:24:c0: 93:ce:70:24:fa:e1:e3:55:45:cb:c7:6f:09:e7:b8:48:58:c6: 4b:b6:a0:b9:e4:ca:62:20:9b:c5:be:0f:ca:f9:c9:36:99:d1: 2a:48:c3:bf:f4:6c:e9:6e:53:dc:7b:07:4b:25:e4:6d:d2:3e: 10:b4:48:4d:68:37:d2:af:e5:77:f8:bb:cf:69:ce:e4:3c:58: 7a:75:3d:14:3a:bb:a7:16:05:2c:8d:85:96:93:71:5f:3a:f2: 77:a5:af:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+5r08Sc46arHNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk YjczNDExODItZDBiNi00YTEyLThkYTUtYmU2NzNkOTNjYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAU5R1UGhGCVx0GEJyqRVSskOjM9/rQSd9BB 5NrVkwKmFHeI+obmmbgKWWDuivdW35E08S1a5e+Jiqr4HJXKa64b1hZGTn4e1Te+ KbvT0WcHQO251IIsixNpdqY++5qgt9yW7dOM+tlvP0lqAODhwuvU2lYZZJ6MXUzi EDfEjg+t4+hyYWYzlsYi8UPRsBd8H1wzDuwsnLwoBjYAl3RRvrgt9hu9jz1LNFXW gxeTQgUAHckXtPlxsxhCe7rQlla8uB0nywP9RBvmA0xNlVAvgf4497XnDKigwceO RjH7xOBmNaWgrloRYC6EqO1pj/01e76Q9DmnfDA1F9zW0WrSvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1TmXE7SFMpg56QEuzOwoynOtohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWE3NzU4YmQtMzE5Yi0z MGU3LWFhZWUtMWI4ODc4YzZkNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFe3ib7a6ibL/MeeS5fpXE82Ff1hzODsBH+krQChQ8Ap4uktmMez2BB bh474L3xVrzCXhci6CpG+lGfRCJ1VvQZROWz+HRNnM7mRGnKFd1178QPHfnRMIFG Bt1bUlOlgf0V2I/iABrqB9mmUQeUU52bY2jmCuUnuR3JS//mwxMCDp9FM3ocnZxK B0KU/km7Nx+oYzeIZfXyHrJZxfVC1/ckwJPOcCT64eNVRcvHbwnnuEhYxku2oLnk ymIgm8W+D8r5yTaZ0SpIw7/0bOluU9x7B0sl5G3SPhC0SE1oN9Kv5Xf4u89pzuQ8 WHp1PRQ6u6cWBSyNhZaTcV868nelr+Q= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org