$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa File: dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa (raw, json) Hash identifier: w70aRff02SC2wMFytDedhkZUKu6UpOH16OCbUupoq94= Subject key identifier: 4B:D0:8F:9F:95:64:77:21:93:08:BC:62:CA:9C:4C:AE:20:4B:B4:8E Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584746EB5D7F3B2D212318D11840 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa Signing time: Fri 20 Sep 2024 13:00:42 +0000 ROA not before: Fri 20 Sep 2024 13:00:42 +0000 ROA not after: Thu 19 Dec 2024 14:00:42 +0000 asID: 5744 IP address blocks: 151.207.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:46:eb:5d:7f:3b:2d:21:23:18:d1:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Sep 20 13:00:42 2024 GMT Not After : Dec 19 14:00:42 2024 GMT Subject: CN=b11f8d65-3cfb-49a9-a9ee-b09b4f5a5a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:a6:2d:18:83:f2:29:db:7a:e9:c2:83:3c: 4d:8f:86:50:18:98:a3:62:d0:cb:e5:b2:bb:82:48: a9:34:35:bf:ee:4d:2a:bd:b1:de:5d:b6:9a:e4:b6: 57:c1:6a:c8:59:af:ce:1f:55:23:58:77:cb:d4:ef: d0:00:21:a7:2e:96:a5:f6:4c:a2:9b:90:3a:e9:ff: ab:37:04:04:6e:6d:92:e4:d0:73:9d:37:72:63:d8: 27:07:14:b6:00:d0:cf:85:33:65:3c:d7:09:08:15: 09:29:8d:82:ea:47:0e:b8:cc:4e:a3:90:c2:cc:40: 76:5f:a9:9a:57:d8:02:e1:6f:f6:55:25:39:ec:57: 2f:a0:51:d3:07:dd:ed:77:a4:98:4c:a5:b7:4b:af: 19:7a:03:29:bd:4b:c2:0f:11:f4:16:0c:38:c5:92: d3:0a:6e:5a:08:a4:ff:66:e2:9c:c3:2f:0c:8e:e5: 1f:8f:56:51:b4:63:78:3f:45:73:9b:12:22:6c:5a: 48:0c:16:45:af:cc:39:a9:e2:6b:e4:60:86:8c:c3: 30:c9:b2:86:15:3e:82:61:ee:b1:0e:b5:b4:95:c9: 38:f3:7f:15:98:63:68:da:37:29:40:d7:b0:3f:37: 99:57:e6:9f:e7:53:12:95:6a:6e:35:91:80:6d:42: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D0:8F:9F:95:64:77:21:93:08:BC:62:CA:9C:4C:AE:20:4B:B4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:5a:ca:18:20:b1:aa:d3:ce:6b:9b:53:fd:3f:3f:40:56:3c: a6:d8:ff:b2:f0:2f:12:b5:7f:18:3a:68:ef:de:2f:8a:74:75: c5:f7:b6:00:c7:3f:ef:ce:3c:f5:11:02:b2:db:7d:7f:df:38: ca:b9:0f:bc:cd:e2:46:ad:5d:9c:d9:1c:d8:82:a8:fd:6e:b3: 61:3a:1b:90:fc:f4:3c:8a:4c:d3:3c:9c:d9:4d:c3:d0:02:fb: 84:32:74:4b:71:fb:b6:da:66:13:1d:ba:4e:29:70:fa:81:9b: 81:53:4d:29:56:33:c3:c7:ef:7a:6f:e3:a5:53:f9:38:79:0c: 94:75:70:ed:11:b8:50:a6:d9:95:14:84:cf:12:50:be:e3:9a: a9:0d:2c:f2:f1:f2:42:7d:bf:ef:b2:fe:d6:67:ea:e9:ab:f7: dc:c8:fc:e0:71:c5:6d:f2:d1:b0:99:9f:9d:eb:8b:a7:f2:9f: 56:db:82:c6:5e:3e:b9:8e:2c:fb:77:1d:16:f1:87:ca:43:6a: 08:c3:ac:3f:82:90:bd:84:97:89:98:ad:da:3e:98:6f:3e:6b: 65:a5:fb:be:d6:ec:07:96:de:40:3a:18:1e:d7:87:bf:4b:83: 6b:76:8d:4d:37:b9:31:b0:12:7f:71:4d:23:ec:75:69:66:15: 79:6f:ec:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdG611/Oy0hIxjRGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI0MDkyMDEzMDA0MloXDTI0MTIxOTE0MDA0MlowLzEtMCsGA1UEAxMk YjExZjhkNjUtM2NmYi00OWE5LWE5ZWUtYjA5YjRmNWE1YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3GmLRiD8inbeunCgzxNj4ZQGJijYtDL5bK7 gkipNDW/7k0qvbHeXbaa5LZXwWrIWa/OH1UjWHfL1O/QACGnLpal9kyim5A66f+r NwQEbm2S5NBznTdyY9gnBxS2ANDPhTNlPNcJCBUJKY2C6kcOuMxOo5DCzEB2X6ma V9gC4W/2VSU57FcvoFHTB93td6SYTKW3S68ZegMpvUvCDxH0Fgw4xZLTCm5aCKT/ ZuKcwy8MjuUfj1ZRtGN4P0VzmxIibFpIDBZFr8w5qeJr5GCGjMMwybKGFT6CYe6x DrW0lck4838VmGNo2jcpQNewPzeZV+af51MSlWpuNZGAbUK/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvQj5+VZHchkwi8YsqcTK4gS7SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZGQyM2EyOTctOTA5MC0z YjJkLTkzMTQtMWVjMzJmY2FmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdayhggsarTzmubU/0/P0BWPKbY/7LwLxK1fxg6aO/eL4p0dcX3tgDH P+/OPPURArLbfX/fOMq5D7zN4katXZzZHNiCqP1us2E6G5D89DyKTNM8nNlNw9AC +4QydEtx+7baZhMduk4pcPqBm4FTTSlWM8PH73pv46VT+Th5DJR1cO0RuFCm2ZUU hM8SUL7jmqkNLPLx8kJ9v++y/tZn6umr99zI/OBxxW3y0bCZn53ri6fyn1bbgsZe PrmOLPt3HRbxh8pDagjDrD+CkL2El4mYrdo+mG8+a2Wl+77W7AeW3kA6GB7Xh79L g2t2jU03uTGwEn9xTSPsdWlmFXlv7Mc= -----END CERTIFICATE-----Generated at Fri Nov 22 22:22:08 2024 by rpki-client on console-ams.rpki-client.org