$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa File: 504539a8-a450-354d-9c7e-6a0128d4ded2.roa (raw, json) Hash identifier: VMHX7QzZuZ1VHK487eFkMDMfrHA3f+EZYRZM7V/kpEY= Subject key identifier: 05:29:40:29:DD:15:43:94:EE:97:67:A0:7B:A5:4B:A0:84:C8:E7:E2 Certificate issuer: /CN=c003af2f-f626-4f2a-a59d-433951f53b3b Certificate serial: 010D0C9F43285847AA068D48D7897709B5209940 Authority key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa Signing time: Sat 26 Oct 2024 01:00:31 +0000 ROA not before: Sat 26 Oct 2024 01:00:31 +0000 ROA not after: Fri 24 Jan 2025 02:00:31 +0000 asID: 7132 IP address blocks: 204.17.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:aa:06:8d:48:d7:89:77:09:b5:20:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c003af2f-f626-4f2a-a59d-433951f53b3b Validity Not Before: Oct 26 01:00:31 2024 GMT Not After : Jan 24 02:00:31 2025 GMT Subject: CN=4839cdc5-6280-4112-8dd9-f75ab6f27239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:de:de:01:f9:c8:5f:57:e4:f8:5c:94:fe: 4b:cc:97:36:b9:08:fc:39:e3:3f:bf:f9:e5:34:9a: 4b:07:d8:46:40:9f:fd:ef:f8:22:9a:58:9e:79:e3: 2b:a5:ab:c2:a5:59:4c:8f:92:a4:a5:e2:42:c9:4d: d1:e1:40:b7:43:b8:e7:9f:15:3b:c3:9c:0a:90:cb: 25:67:f9:66:17:4d:03:7a:5f:27:9f:4c:c7:0c:9c: 78:0e:34:7d:e3:7d:9c:e8:96:99:cc:31:21:73:cb: ca:c3:55:11:f6:40:52:67:70:a3:6c:ac:62:85:f8: 4c:73:1b:50:0a:c5:f6:46:42:9e:58:c6:58:35:3a: 38:b0:3f:d8:12:c8:78:3d:6c:15:c4:5b:c9:04:8c: 3c:4e:c0:2b:22:1b:6d:22:51:0c:ab:4c:6d:d8:bd: 42:98:ba:a8:16:4e:63:99:e1:80:ae:e7:23:6a:58: 16:5b:cf:05:88:e2:09:4f:7b:e4:fe:c7:19:66:3d: de:17:98:e3:1a:de:d1:59:0c:3d:91:8e:38:c5:62: 3f:1b:a1:20:bb:71:9b:fa:be:09:b7:68:24:c1:14: 35:70:04:ce:41:be:d5:71:ba:55:b5:4e:fd:81:2b: f7:13:22:a1:97:75:50:cc:7d:bb:24:9c:99:e1:86: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:29:40:29:DD:15:43:94:EE:97:67:A0:7B:A5:4B:A0:84:C8:E7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl X509v3 Authority Key Identifier: keyid:A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer sbgp-ipAddrBlock: critical IPv4: 204.17.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b7:b6:ac:f4:81:82:cb:47:8e:16:28:fa:72:c5:5e:27:f1: 68:19:cd:05:f5:e9:94:a6:08:e5:0d:c0:3d:6e:b1:50:44:24: a1:e1:69:48:7b:6f:2e:f8:a9:ee:57:c9:05:24:f7:18:d8:f7: a1:49:e0:c3:d3:b0:9e:7c:0a:92:62:20:a4:6c:e6:89:db:ae: e2:36:79:7d:58:61:f2:55:de:16:07:37:cc:97:c4:e2:32:e9: 4a:f7:da:9c:9b:04:b7:aa:d4:d2:26:c7:49:b2:bc:30:fb:5b: e7:5f:98:43:5c:f9:cd:6a:fe:93:72:da:43:7f:a1:82:e0:6a: 71:32:72:f3:1e:49:c4:b7:78:5b:6b:0d:28:91:9c:1d:0a:a9: b9:bd:04:d7:f3:c4:b3:93:4d:99:18:9f:cd:07:df:e4:ee:a2: 46:63:c1:f1:8c:1d:55:9e:d4:a3:e2:bd:43:49:6f:8a:4e:04: 96:82:04:c5:85:cc:ce:5f:04:52:09:80:d8:5e:ef:37:f8:df: 5b:c1:f0:2e:0e:94:17:01:49:52:f1:5b:42:04:a9:03:22:dc: a6:aa:78:8c:ba:7c:d3:df:73:f7:97:38:d6:44:19:53:97:77: ac:70:51:f1:6b:78:0e:da:38:21:3b:05:ac:19:fc:3d:10:0f: ad:85:ba:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeqBo1I14l3CbUgmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwM2FmMmYtZjYyNi00ZjJhLWE1OWQtNDMzOTUxZjUz YjNiMB4XDTI0MTAyNjAxMDAzMVoXDTI1MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk NDgzOWNkYzUtNjI4MC00MTEyLThkZDktZjc1YWI2ZjI3MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzLe3gH5yF9X5PhclP5LzJc2uQj8OeM/v/nl NJpLB9hGQJ/97/gimlieeeMrpavCpVlMj5KkpeJCyU3R4UC3Q7jnnxU7w5wKkMsl Z/lmF00Del8nn0zHDJx4DjR9432c6JaZzDEhc8vKw1UR9kBSZ3CjbKxihfhMcxtQ CsX2RkKeWMZYNTo4sD/YEsh4PWwVxFvJBIw8TsArIhttIlEMq0xt2L1CmLqoFk5j meGArucjalgWW88FiOIJT3vk/scZZj3eF5jjGt7RWQw9kY44xWI/G6Egu3Gb+r4J t2gkwRQ1cATOQb7VcbpVtU79gSv3EyKhl3VQzH27JJyZ4YaFUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUpQCndFUOU7pdnoHulS6CEyOfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAz YWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFmNTNiM2IvNTA0NTM5YTgtYTQ1MC0z NTRkLTljN2UtNmEwMTI4ZDRkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzAwM2FmMmYtZjYyNi00ZjJhLWE1 OWQtNDMzOTUxZjUzYjNiL2MwMDNhZjJmLWY2MjYtNGYyYS1hNTlkLTQzMzk1MWY1 M2IzYi5jcmwwHwYDVR0jBBgwFoAUodsX5jXPLcuqUy/oANCS8ZQkroIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5 NTFmNTNiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm3tqz0gYLLR44WKPpyxV4n8WgZzQX16ZSmCOUNwD1usVBEJKHhaUh7 by74qe5XyQUk9xjY96FJ4MPTsJ58CpJiIKRs5onbruI2eX1YYfJV3hYHN8yXxOIy 6Ur32pybBLeq1NImx0myvDD7W+dfmENc+c1q/pNy2kN/oYLganEycvMeScS3eFtr DSiRnB0Kqbm9BNfzxLOTTZkYn80H3+TuokZjwfGMHVWe1KPivUNJb4pOBJaCBMWF zM5fBFIJgNhe7zf431vB8C4OlBcBSVLxW0IEqQMi3KaqeIy6fNPfc/eXONZEGVOX d6xwUfFreA7aOCE7BawZ/D0QD62Fum0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:26 2024 by rpki-client on console-ams.rpki-client.org