$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa File: da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa (raw, json) Hash identifier: sSvpwHtNSTlLmf1anv0kQ4OZ1lbzTWdRk1OHhhTA7Ns= Subject key identifier: 41:22:41:A4:8E:58:E5:29:2B:E4:FD:B9:2D:46:23:EA:42:A5:F9:70 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858472B8FE6F5397B730CD1EED340 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa Signing time: Tue 10 Sep 2024 17:49:39 +0000 ROA not before: Tue 10 Sep 2024 17:49:39 +0000 ROA not after: Mon 09 Dec 2024 18:49:39 +0000 asID: 203 IP address blocks: 206.164.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:8f:e6:f5:39:7b:73:0c:d1:ee:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 10 17:49:39 2024 GMT Not After : Dec 9 18:49:39 2024 GMT Subject: CN=84bf7765-d9cc-4939-a073-ce13173c2485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:3d:36:60:3e:0c:27:fb:80:57:a0:62:13: f3:09:66:b9:55:e4:09:39:b8:0b:16:f1:3e:3e:c4: bc:fa:d8:7b:7e:25:16:d3:04:2e:4d:2f:c6:26:df: 1f:5a:2b:d9:05:e4:7f:bd:6b:58:e1:36:9a:cc:44: 82:d1:a3:ae:3c:8b:6d:81:a8:32:88:43:6e:f4:d4: 97:82:b5:95:d8:11:71:93:f6:5a:27:2e:e2:d2:d9: 09:52:0a:6a:64:4d:97:cd:6e:20:ee:74:33:35:28: 66:96:cf:6e:d8:8b:3a:ee:8c:0e:80:64:a7:77:e0: 0f:aa:7e:15:07:02:51:10:06:89:84:b4:1f:79:b5: e7:8b:91:c3:c5:e8:27:d9:2c:b1:ea:c7:2f:c5:d9: 9a:98:6d:e8:16:f2:f7:54:65:d4:b8:f9:9d:f0:83: e6:77:82:aa:4a:1c:0c:bf:2a:16:3f:0b:21:b2:6b: d2:06:25:72:57:0f:32:39:2e:88:fc:9c:7f:18:80: b8:1c:0f:5f:27:0e:d4:a3:bf:21:7d:81:af:1a:db: fa:71:f5:93:79:9d:a2:d7:d3:12:b0:e7:d6:7d:ad: ca:f2:29:0d:4b:c5:83:55:48:6d:ea:14:6f:6a:3e: af:92:ba:79:b1:c6:3d:7a:87:d3:cc:6f:1b:21:4c: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:22:41:A4:8E:58:E5:29:2B:E4:FD:B9:2D:46:23:EA:42:A5:F9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da2d6dc1-52db-3973-b9ca-db6951a8cf02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:98:9d:a3:a4:02:00:14:cc:03:5d:27:8f:d2:2d:e0:2e:20: b8:34:b1:87:09:31:e3:fb:50:ba:46:27:22:2c:0a:c7:ac:1e: 2d:6b:5c:2f:ad:4e:02:77:26:3d:1a:57:8d:c8:78:09:61:11: 81:f1:67:80:88:b4:fb:2e:6d:19:12:5e:f2:6c:75:bd:d2:72: 7a:c6:de:54:dc:fd:72:47:16:50:aa:12:ec:e6:d9:40:16:73: b2:6c:61:d6:09:c9:f7:f4:f2:84:b3:23:5e:2c:14:92:6f:57: 1d:39:e4:45:be:c6:64:57:33:3b:87:7b:b5:45:c1:cd:71:cb: ef:1d:1b:5d:ce:ff:f6:ce:bc:ac:45:ef:23:47:f3:48:e0:27: b8:fc:ff:c2:1b:f2:6c:3f:b6:bb:48:17:02:53:32:1d:d1:86: e3:41:c8:d4:f0:3b:ca:1f:43:9c:94:9f:cd:61:c0:da:87:b0: d4:57:1e:f4:27:88:e5:29:1f:22:dc:e8:1d:1f:77:7a:c5:e6: d9:b4:f5:8a:3e:8d:1f:36:dc:d8:b3:3b:9d:18:b7:1a:a5:e4: 41:6e:bc:2f:50:ee:a4:57:2e:f5:4e:3f:80:80:64:f3:c6:67: c9:9d:18:ab:79:5e:2c:b0:c8:b0:f9:c1:1f:4c:0f:e9:e5:02: f6:b4:9d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrj+b1OXtzDNHu00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDkxMDE3NDkzOVoXDTI0MTIwOTE4NDkzOVowLzEtMCsGA1UEAxMk ODRiZjc3NjUtZDljYy00OTM5LWEwNzMtY2UxMzE3M2MyNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDs9NmA+DCf7gFegYhPzCWa5VeQJObgLFvE+ PsS8+th7fiUW0wQuTS/GJt8fWivZBeR/vWtY4TaazESC0aOuPIttgagyiENu9NSX grWV2BFxk/ZaJy7i0tkJUgpqZE2XzW4g7nQzNShmls9u2Is67owOgGSnd+APqn4V BwJREAaJhLQfebXni5HDxegn2Syx6scvxdmamG3oFvL3VGXUuPmd8IPmd4KqShwM vyoWPwshsmvSBiVyVw8yOS6I/Jx/GIC4HA9fJw7Uo78hfYGvGtv6cfWTeZ2i19MS sOfWfa3K8ikNS8WDVUht6hRvaj6vkrp5scY9eofTzG8bIUzkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEiQaSOWOUpK+T9uS1GI+pCpflwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGEyZDZkYzEtNTJkYi0z OTczLWI5Y2EtZGI2OTUxYThjZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaYnaOkAgAUzANdJ4/SLeAuILg0sYcJMeP7ULpGJyIsCsesHi1rXC+t TgJ3Jj0aV43IeAlhEYHxZ4CItPsubRkSXvJsdb3ScnrG3lTc/XJHFlCqEuzm2UAW c7JsYdYJyff08oSzI14sFJJvVx055EW+xmRXMzuHe7VFwc1xy+8dG13O//bOvKxF 7yNH80jgJ7j8/8Ib8mw/trtIFwJTMh3RhuNByNTwO8ofQ5yUn81hwNqHsNRXHvQn iOUpHyLc6B0fd3rF5tm09Yo+jR823NizO50Ytxql5EFuvC9Q7qRXLvVOP4CAZPPG Z8mdGKt5XiywyLD5wR9MD+nlAva0nQ0= -----END CERTIFICATE-----Generated at Sat Sep 21 00:34:05 2024 by rpki-client on console-ams.rpki-client.org