$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d570f141-0e30-3e49-84f4-9e99ec046d1c.roa File: d570f141-0e30-3e49-84f4-9e99ec046d1c.roa (raw, json) Hash identifier: aQtAFzbSykIIjQOyWSfIhirRg6yzcVzr6co75LcsOKM= Subject key identifier: 19:B9:61:16:D6:C5:92:B2:44:56:8A:F7:3E:91:51:FF:4F:94:85:22 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584793B1490EF3C34076DE23AA40 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d570f141-0e30-3e49-84f4-9e99ec046d1c.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 167.82.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:49:0e:f3:c3:40:76:de:23:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=3967cb1f-bbc3-4f80-974f-42c892f27413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:de:d1:0f:3e:21:71:e8:ae:c4:df:2a:80: 8f:f3:4b:31:97:7c:c7:4f:d0:b4:35:87:6f:6b:08: f1:b4:e5:b1:1f:c0:c8:b8:1c:b3:d8:72:7d:95:93: 38:1d:36:b0:3b:17:29:3c:19:ab:d9:3b:22:47:ab: d0:b7:47:95:cb:ab:c6:79:7f:f0:48:c2:79:ab:63: 10:c6:d6:c5:38:68:1c:a4:33:21:fd:85:61:0b:05: 92:f1:15:24:e8:e0:8f:6b:4f:83:4e:be:ce:c6:e1: 5d:6b:6b:4f:32:04:c8:d5:d8:5f:23:89:bc:78:5b: a0:17:b9:b8:ae:88:8c:a2:11:b5:84:75:aa:e2:c9: c1:2f:42:2f:b2:62:4e:0e:c4:ec:47:dd:60:b3:3d: 79:45:57:75:04:30:a0:b6:61:d6:5e:5d:d9:5a:d0: 8e:c4:de:ef:2e:2d:bf:42:4d:82:d4:de:d0:e4:ca: ab:86:3d:f8:25:9c:db:35:3d:83:f8:2d:d6:c2:9d: 08:a3:51:1f:ca:93:6b:92:d7:3e:7a:20:c0:06:bd: f0:3f:1f:23:01:b3:24:6c:80:99:ca:8d:81:fb:32: c3:09:52:61:96:9f:82:00:f8:0b:4b:c9:c3:43:37: ff:94:31:8a:d1:6a:2c:4e:bc:43:ce:c7:89:5f:ed: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B9:61:16:D6:C5:92:B2:44:56:8A:F7:3E:91:51:FF:4F:94:85:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d570f141-0e30-3e49-84f4-9e99ec046d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 167.82.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:24:73:40:8a:03:e7:a0:e8:37:61:9e:96:6c:7e:c4:a0:62: 60:c5:b8:3b:d5:5f:b0:62:96:fd:d7:82:e9:61:ab:8e:ac:92: 93:43:aa:9c:7f:44:e8:ce:b3:45:61:f4:7f:46:23:7f:11:54: cd:6b:57:8c:51:08:cd:ca:21:dc:88:cd:a6:61:47:1a:c5:aa: 5e:3f:0b:60:30:4f:12:bd:bd:17:9b:60:ce:7e:df:34:79:60: 92:76:e3:bb:48:08:cc:5c:87:e1:93:30:df:f7:86:3f:a8:a5: 3d:73:a4:75:72:d0:24:0a:fe:c2:ea:69:8b:5d:76:a9:8f:ab: b5:7a:e8:22:28:69:ba:69:78:d8:06:93:5e:f9:48:02:63:e3: 39:a3:cf:33:49:c7:02:3b:88:e2:55:d9:78:b5:2d:f9:2c:da: cb:4c:30:5a:e6:68:67:a6:9c:5c:71:0e:02:03:cd:09:2c:2f: 11:29:ab:2c:b8:8b:89:57:28:5a:72:23:d0:6d:59:de:32:77: 4a:b2:9d:6c:68:f5:63:8f:12:49:3c:51:53:8c:32:fb:d4:31: 92:e9:4f:9d:cd:e6:f1:34:7c:cd:9d:13:0a:a3:45:e6:2d:6b: 6d:77:5b:8b:37:38:66:a4:40:9d:03:51:c8:b5:83:6b:20:45: 5e:5c:44:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsUkO88NAdt4jqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk Mzk2N2NiMWYtYmJjMy00ZjgwLTk3NGYtNDJjODkyZjI3NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf/e0Q8+IXHorsTfKoCP80sxl3zHT9C0NYdv awjxtOWxH8DIuByz2HJ9lZM4HTawOxcpPBmr2TsiR6vQt0eVy6vGeX/wSMJ5q2MQ xtbFOGgcpDMh/YVhCwWS8RUk6OCPa0+DTr7OxuFda2tPMgTI1dhfI4m8eFugF7m4 roiMohG1hHWq4snBL0IvsmJODsTsR91gsz15RVd1BDCgtmHWXl3ZWtCOxN7vLi2/ Qk2C1N7Q5Mqrhj34JZzbNT2D+C3Wwp0Io1EfypNrktc+eiDABr3wPx8jAbMkbICZ yo2B+zLDCVJhlp+CAPgLS8nDQzf/lDGK0WosTrxDzseJX+0bPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm5YRbWxZKyRFaK9z6RUf9PlIUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDU3MGYxNDEtMGUzMC0z ZTQ5LTg0ZjQtOWU5OWVjMDQ2ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp1JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMkc0CKA+eg6DdhnpZsfsSgYmDFuDvVX7Bilv3Xgulhq46skpNDqpx/ ROjOs0Vh9H9GI38RVM1rV4xRCM3KIdyIzaZhRxrFql4/C2AwTxK9vRebYM5+3zR5 YJJ247tICMxch+GTMN/3hj+opT1zpHVy0CQK/sLqaYtddqmPq7V66CIoabppeNgG k175SAJj4zmjzzNJxwI7iOJV2Xi1Lfks2stMMFrmaGemnFxxDgIDzQksLxEpqyy4 i4lXKFpyI9BtWd4yd0qynWxo9WOPEkk8UVOMMvvUMZLpT53N5vE0fM2dEwqjReYt a213W4s3OGakQJ0DUci1g2sgRV5cRDU= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:32 2024 by rpki-client on console-ams.rpki-client.org