$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa File: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (raw, json) Hash identifier: L1899YwQQAVsJyq9BV1QoRvTx3BC56vGJMC7q9dFyu4= Subject key identifier: 3F:F1:1E:D0:53:DF:72:7A:30:9A:E5:CE:50:96:47:5C:43:4A:D4:4E Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F432858473D25E5B81D5C72D9227D3A00 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 396400 IP address blocks: 204.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:e5:b8:1d:5c:72:d9:22:7d:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=a4bbaa90-74aa-486e-9d23-3538701a6015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9c:2e:d6:fc:93:12:6e:b1:18:a6:ec:19:36: 92:cd:19:8a:3e:5c:65:ab:7a:2f:95:e9:27:34:30: 81:3d:47:62:07:a3:b6:9e:f5:0a:14:70:fe:aa:a8: b6:d6:f3:ab:f0:78:1a:a7:4e:73:77:a2:93:86:9a: 00:ff:74:eb:46:20:53:86:6c:cb:1c:97:29:15:e9: 83:9a:ee:92:f4:63:50:1b:ad:63:ce:01:74:b9:45: dc:30:cb:9e:55:0a:d0:25:05:56:3a:15:a8:bd:a1: 91:04:c7:0b:85:38:4a:dc:5c:19:2c:67:aa:e8:8b: 8e:80:ee:40:70:ce:8e:6c:01:6b:09:ac:e8:e8:ff: aa:61:39:d0:f7:bb:2c:ff:9f:36:77:99:78:da:58: 06:14:c9:31:81:a6:bb:2a:13:1d:15:23:db:31:c6: 04:60:32:96:57:11:0d:32:b1:39:5b:31:ff:2e:ef: b3:4e:d8:3c:f0:e3:69:b0:4f:f3:b0:56:73:3c:27: 08:41:95:55:3d:28:2c:07:d7:f3:7b:ea:b7:c0:c4: a2:a7:72:a9:c5:63:a2:a5:8d:8d:67:28:12:e8:14: a7:16:d0:61:66:ee:53:86:9c:31:57:7e:5d:00:fc: b8:f5:4f:cd:bf:b0:09:b7:f4:eb:3a:a8:5e:97:c7: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F1:1E:D0:53:DF:72:7A:30:9A:E5:CE:50:96:47:5C:43:4A:D4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: 204.89.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b5:48:01:67:27:17:9f:29:70:e7:77:b3:b9:80:30:26:d8: 86:80:bb:24:52:a1:ac:22:b3:30:f3:08:65:29:b8:1d:a1:f8: ff:ee:7c:f3:ea:f4:3c:ee:5e:32:c5:5b:c8:d4:6e:c9:87:14: a8:ff:2e:71:21:5c:29:d4:08:9d:68:9a:6b:28:d0:b6:32:32: 49:e2:81:39:2b:1e:b4:98:67:5d:db:ff:b0:b9:a0:56:41:6e: 44:78:08:59:2b:51:a0:c0:60:27:2d:79:f2:82:b6:1e:38:10: 85:c8:73:b2:61:ab:65:93:4f:08:c8:f6:d7:1f:19:dc:5d:46: 25:88:5c:f5:80:f3:bb:67:92:6a:b1:c4:98:0f:1e:3a:7d:2f: f4:31:fc:c8:35:46:2d:e0:fe:89:de:e6:f8:3b:0a:59:52:56: c2:9e:bc:0c:e4:17:38:8a:38:c4:51:16:51:97:0b:fe:a5:d8: 18:d5:fd:ae:9f:96:22:40:03:ec:c0:a4:a9:3c:7d:6e:80:75: f7:88:bd:9b:69:4f:30:e1:6d:70:fa:e2:ea:73:7e:fb:c4:d6: 12:1a:c1:5a:ec:e1:d4:38:bd:b5:6b:68:9e:0f:1d:1a:b6:a0: bb:c6:ee:57:9e:ba:a3:cc:3e:9e:c9:79:4c:2a:b0:79:b8:f2: 51:7d:90:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc9JeW4HVxy2SJ9OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk YTRiYmFhOTAtNzRhYS00ODZlLTlkMjMtMzUzODcwMWE2MDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpwu1vyTEm6xGKbsGTaSzRmKPlxlq3ovlekn NDCBPUdiB6O2nvUKFHD+qqi21vOr8Hgap05zd6KThpoA/3TrRiBThmzLHJcpFemD mu6S9GNQG61jzgF0uUXcMMueVQrQJQVWOhWovaGRBMcLhThK3FwZLGeq6IuOgO5A cM6ObAFrCazo6P+qYTnQ97ss/582d5l42lgGFMkxgaa7KhMdFSPbMcYEYDKWVxEN MrE5WzH/Lu+zTtg88ONpsE/zsFZzPCcIQZVVPSgsB9fze+q3wMSip3KpxWOipY2N ZygS6BSnFtBhZu5ThpwxV35dAPy49U/Nv7AJt/TrOqhel8fIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/xHtBT33J6MJrlzlCWR1xDStROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvMWFmN2Y4OWQtZDFkYS0z NWYwLWJiZDItMjEzMmZhZDQwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi1SAFnJxefKXDnd7O5gDAm2IaAuyRSoawiszDzCGUpuB2h+P/ufPPq 9DzuXjLFW8jUbsmHFKj/LnEhXCnUCJ1ommso0LYyMknigTkrHrSYZ13b/7C5oFZB bkR4CFkrUaDAYCctefKCth44EIXIc7Jhq2WTTwjI9tcfGdxdRiWIXPWA87tnkmqx xJgPHjp9L/Qx/Mg1Ri3g/one5vg7CllSVsKevAzkFziKOMRRFlGXC/6l2BjV/a6f liJAA+zApKk8fW6AdfeIvZtpTzDhbXD64upzfvvE1hIawVrs4dQ4vbVraJ4PHRq2 oLvG7leeuqPMPp7JeUwqsHm48lF9kCM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org