$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa File: b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa (raw, json) Hash identifier: 72UFWOflnKArwRBqaHQsACKUNjQtZp9DSay6c0s5Yq0= Subject key identifier: 24:12:88:20:72:25:E2:8A:04:CE:A9:B1:67:43:7C:A8:74:D5:E8:89 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F432858474155F624AE7CEC4788AE014C Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa Signing time: Wed 18 Sep 2024 13:00:41 +0000 ROA not before: Wed 18 Sep 2024 13:00:41 +0000 ROA not after: Tue 17 Dec 2024 14:00:41 +0000 asID: 7018 IP address blocks: 208.66.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:41:55:f6:24:ae:7c:ec:47:88:ae:01:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 18 13:00:41 2024 GMT Not After : Dec 17 14:00:41 2024 GMT Subject: CN=551f5f6e-69a1-4ab8-a877-c474dd9306d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2e:67:be:c1:4c:43:e4:f1:a5:42:2e:8c:cd: 0e:ad:06:38:ac:0d:90:90:e6:be:02:03:ec:68:9a: 48:d1:5c:6d:13:60:b0:33:bb:58:f5:17:f2:27:71: a8:b7:a4:7c:86:47:1d:ac:3a:9d:c5:cf:e1:ae:57: da:ac:4a:09:6d:6c:6c:50:8a:31:40:9b:85:e0:ee: 3d:43:50:f4:f2:2d:17:27:e4:9c:61:e7:f5:8c:a9: 45:a3:61:ac:d9:b8:33:6c:19:60:e0:d7:09:0e:55: de:06:3b:61:a6:2e:8a:47:aa:52:4e:6b:3b:06:10: 95:50:92:27:5a:5d:f6:f1:ef:1c:84:76:1f:7e:69: 77:5c:8f:ee:3a:44:d1:1e:07:91:42:fc:70:08:0c: 73:4a:ec:17:ba:e9:35:82:ec:ab:9b:37:9e:9d:21: 2a:de:e1:a2:bf:f3:55:e5:e7:b7:52:47:62:63:1c: ba:18:47:d2:71:c9:a5:bd:14:a1:95:4a:e3:f8:5e: 2c:88:d0:82:ef:e6:48:9d:6c:1b:a6:34:68:0c:84: 88:3b:82:1a:80:1f:57:e0:02:c7:0d:1e:50:e5:49: 34:2f:55:92:eb:e2:c3:1a:72:16:06:bb:7f:59:26: ba:ee:4f:d4:f0:9e:94:b2:93:b5:3c:34:35:40:72: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:88:20:72:25:E2:8A:04:CE:A9:B1:67:43:7C:A8:74:D5:E8:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 208.66.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1c:d9:28:db:33:fc:c8:c4:00:4b:f1:73:7e:4e:9d:8c:4e: b5:1d:ef:b3:29:b6:b6:05:d6:6e:a5:ac:31:b3:25:ab:23:c5: 7f:a2:39:8b:5b:ba:d8:63:fc:50:a6:6c:59:8a:22:3a:1e:85: 8f:1d:d3:b7:31:d1:d6:5d:8e:68:01:6e:94:94:95:82:c6:c5: e6:48:7d:63:3b:e0:ba:ec:55:e8:73:3d:3f:12:b6:70:21:67: 07:fb:c7:80:58:14:08:35:da:02:d8:1b:16:3c:04:62:ea:47: ff:2e:e0:ec:c4:3e:25:a8:08:b5:d6:72:5b:ff:08:b3:7c:1e: 97:34:65:05:9a:2d:d3:66:0d:32:66:1d:5f:8e:e8:d6:3e:ba: 18:52:3c:48:97:83:2e:79:4a:93:09:10:e9:eb:15:41:ec:80: 89:3b:8c:d6:26:fe:dd:0f:b1:0d:4f:6d:70:94:a0:0a:03:b8: 98:41:ee:9e:e4:8f:f9:b3:af:fe:7f:b3:49:96:00:13:5d:ad: f2:6f:14:44:29:a1:94:25:18:92:58:bc:4b:3d:43:d6:1a:f4: 00:8e:32:fb:8a:cf:9a:1b:9a:9a:10:8e:ea:f6:f7:9a:a0:f3: 45:af:55:c4:1a:79:05:b3:14:31:34:73:54:0a:da:d0:61:da: 3b:fc:f4:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdBVfYkrnzsR4iuAUwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI0MDkxODEzMDA0MVoXDTI0MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NTUxZjVmNmUtNjlhMS00YWI4LWE4NzctYzQ3NGRkOTMwNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS5nvsFMQ+TxpUIujM0OrQY4rA2QkOa+AgPs aJpI0VxtE2CwM7tY9RfyJ3Got6R8hkcdrDqdxc/hrlfarEoJbWxsUIoxQJuF4O49 Q1D08i0XJ+ScYef1jKlFo2Gs2bgzbBlg4NcJDlXeBjthpi6KR6pSTms7BhCVUJIn Wl328e8chHYffml3XI/uOkTRHgeRQvxwCAxzSuwXuuk1guyrmzeenSEq3uGiv/NV 5ee3UkdiYxy6GEfSccmlvRShlUrj+F4siNCC7+ZInWwbpjRoDISIO4IagB9X4ALH DR5Q5Uk0L1WS6+LDGnIWBrt/WSa67k/U8J6UspO1PDQ1QHIf3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQSiCByJeKKBM6psWdDfKh01eiJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYjQ5NDdmYWEtYzhhOS0z YzRhLWE3MTItYTczMjFlYTE1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEc2SjbM/zIxABL8XN+Tp2MTrUd77MptrYF1m6lrDGzJasjxX+iOYtb uthj/FCmbFmKIjoehY8d07cx0dZdjmgBbpSUlYLGxeZIfWM74LrsVehzPT8StnAh Zwf7x4BYFAg12gLYGxY8BGLqR/8u4OzEPiWoCLXWclv/CLN8Hpc0ZQWaLdNmDTJm HV+O6NY+uhhSPEiXgy55SpMJEOnrFUHsgIk7jNYm/t0PsQ1PbXCUoAoDuJhB7p7k j/mzr/5/s0mWABNdrfJvFEQpoZQlGJJYvEs9Q9Ya9ACOMvuKz5obmpoQjur295qg 80WvVcQaeQWzFDE0c1QK2tBh2jv89GU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:40 2024 by rpki-client on console-ams.rpki-client.org