$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa File: afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa (raw, json) Hash identifier: g8NaMWApTTOgvdHdgiMJh2nvJId7tOjAZSBIkZBNcJ8= Subject key identifier: 5B:77:58:FD:0A:21:83:AC:BD:FE:36:82:35:41:D2:E5:1E:51:D3:57 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584762D658A273047C5691DFE680 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 174 IP address blocks: 209.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:58:a2:73:04:7c:56:91:df:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=6adc4cb9-33e4-485b-b01b-a0a61a26868c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:71:28:4c:a9:bb:2e:7c:62:c1:7a:63:87:e2: ca:e0:cc:45:c2:e7:99:2c:bb:b1:a2:be:62:50:92: 93:22:9e:69:0f:9d:72:71:66:b2:7f:2f:cc:68:5d: 30:06:cc:df:9e:47:48:4c:58:7c:f7:f3:a3:e5:de: 54:86:02:02:8a:4c:ec:d3:a4:c2:33:7a:2e:6f:5d: 9d:b5:cc:76:34:97:c6:86:e3:9e:99:83:dd:b4:51: 5a:93:7a:74:4a:55:4c:d9:14:ce:fb:3a:1c:3d:d5: 7d:26:f3:bc:29:a0:54:5a:a9:69:d8:c3:39:e4:a0: dd:fc:35:eb:5f:b1:31:c4:71:10:4f:6c:c2:d8:30: 5d:79:1c:b5:b5:41:8f:09:56:a4:c4:c4:72:3f:85: 44:83:51:37:ba:e1:c3:81:e3:fa:57:fe:34:5a:04: 6a:97:f7:a4:13:05:a4:5f:15:5b:3f:ea:86:70:5a: cf:1d:9a:d8:4c:3c:8e:5e:53:ae:01:86:f1:d7:19: eb:f6:50:0c:de:1e:5d:ce:f5:39:74:57:bd:d3:af: 9b:d9:63:bb:0f:d6:1b:f1:e3:cc:13:54:18:13:67: d2:69:07:27:93:bf:5a:33:ec:c4:72:b7:39:95:73: 3a:9d:4c:d1:96:83:42:71:f1:dd:ac:57:8b:44:57: 51:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:77:58:FD:0A:21:83:AC:BD:FE:36:82:35:41:D2:E5:1E:51:D3:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/afba9dd7-b04e-3852-a6c5-e769bd5515c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7d:19:8c:6e:27:10:b6:f3:05:54:10:48:cf:6a:5e:04:35: 83:e2:dd:71:93:ce:ef:97:0a:73:e0:79:81:00:41:34:61:ab: f8:5a:d6:39:7a:f9:8f:63:aa:ed:1a:f8:98:c8:2d:87:0f:9d: fe:03:30:31:84:95:20:16:5b:cb:06:36:f6:6c:f9:6e:e4:b0: ff:0d:40:30:d9:86:d4:d6:11:c8:98:7c:80:8d:26:96:bd:2b: 17:f6:c4:12:a8:3d:90:55:54:14:8b:65:dc:61:90:7d:15:d8: ab:ff:1d:01:68:fe:cc:8b:fa:74:fe:cb:a1:68:92:46:70:e1: bc:d1:4e:ec:18:31:5f:b1:26:0c:8c:e7:37:ea:4e:95:a4:71: d5:c4:8d:2a:93:dc:18:35:da:53:b0:d5:af:da:b9:0b:86:24: 95:bd:48:ca:ab:8c:ca:4e:55:49:82:10:30:0e:81:bc:c5:57: 58:35:f7:3b:8d:24:8a:79:56:26:aa:9b:5d:2c:58:e4:9d:cf: 90:08:89:07:d1:2b:6c:6f:06:bd:e5:ad:37:af:a3:bf:8e:07: 25:50:37:87:4c:21:19:c0:36:6d:76:f2:8b:27:4e:77:7e:4b: 41:17:bf:6e:a4:c5:4b:dd:06:12:54:b3:ae:73:11:86:50:7d: a2:2a:99:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1liicwR8VpHf5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk NmFkYzRjYjktMzNlNC00ODViLWIwMWItYTBhNjFhMjY4NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHEoTKm7LnxiwXpjh+LK4MxFwueZLLuxor5i UJKTIp5pD51ycWayfy/MaF0wBszfnkdITFh89/Oj5d5UhgICikzs06TCM3oub12d tcx2NJfGhuOemYPdtFFak3p0SlVM2RTO+zocPdV9JvO8KaBUWqlp2MM55KDd/DXr X7ExxHEQT2zC2DBdeRy1tUGPCVakxMRyP4VEg1E3uuHDgeP6V/40WgRql/ekEwWk XxVbP+qGcFrPHZrYTDyOXlOuAYbx1xnr9lAM3h5dzvU5dFe906+b2WO7D9Yb8ePM E1QYE2fSaQcnk79aM+zEcrc5lXM6nUzRloNCcfHdrFeLRFdRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt3WP0KIYOsvf42gjVB0uUeUdNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYWZiYTlkZDctYjA0ZS0z ODUyLWE2YzUtZTc2OWJkNTUxNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ9GYxuJxC28wVUEEjPal4ENYPi3XGTzu+XCnPgeYEAQTRhq/ha1jl6 +Y9jqu0a+JjILYcPnf4DMDGElSAWW8sGNvZs+W7ksP8NQDDZhtTWEciYfICNJpa9 Kxf2xBKoPZBVVBSLZdxhkH0V2Kv/HQFo/syL+nT+y6FokkZw4bzRTuwYMV+xJgyM 5zfqTpWkcdXEjSqT3Bg12lOw1a/auQuGJJW9SMqrjMpOVUmCEDAOgbzFV1g19zuN JIp5Viaqm10sWOSdz5AIiQfRK2xvBr3lrTevo7+OByVQN4dMIRnANm128osnTnd+ S0EXv26kxUvdBhJUs65zEYZQfaIqmYk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:40 2024 by rpki-client on console-ams.rpki-client.org