$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa File: 685237db-c4d0-36bb-974d-c4141e668c5d.roa (raw, json) Hash identifier: EcWwZmXCD+slVh9couQDgZ4Na1OLGy9uakxVlvGdTa0= Subject key identifier: 27:03:8C:DB:8B:4E:4E:A6:02:C3:88:87:80:52:20:97:FD:1C:9D:E0 Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F43285847D999EF4E507EE040A400A550 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 394141 IP address blocks: 206.57.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:ef:4e:50:7e:e0:40:a4:00:a5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=9d403423-a0a1-4691-83ed-3372dfa36656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:df:c4:3a:d6:bf:c7:e9:b9:c5:51:47:be: 00:76:ca:85:7c:a6:99:eb:4a:50:3e:77:90:6e:5e: 7e:b0:a7:80:a0:37:94:ce:fe:d8:ed:79:48:01:50: fc:aa:cb:db:b6:a0:ef:e0:32:f2:69:fc:24:f3:5f: 57:72:31:83:fb:29:7a:2a:c0:44:98:49:a3:44:2e: e2:d0:b6:8b:85:fb:6f:38:3a:2a:85:14:73:20:ae: 2a:c0:23:68:fb:67:9e:ca:a4:36:8a:d0:1d:67:30: 88:8d:48:c2:84:ab:a8:a6:c0:bf:de:43:35:a5:9b: 34:09:5e:28:11:34:fd:ba:9d:d1:de:a6:c3:1f:64: 70:dc:a0:60:05:b4:72:2a:29:c1:8f:13:15:24:c8: 91:8c:5b:07:60:0a:42:69:90:37:6e:1c:7e:78:7b: e0:0d:58:97:03:d9:80:be:47:cf:dc:10:9b:80:0d: b7:7d:c4:5d:29:d8:53:d4:34:81:2f:80:6e:0f:f9: bd:d1:5e:d7:80:62:46:bf:b5:a7:7f:78:09:c3:84: a0:fc:fd:dd:0d:bb:4d:4d:19:66:d6:56:50:5b:1d: ea:03:78:5d:18:31:de:d1:24:64:49:87:37:1f:d9: 79:47:01:d5:c0:7e:19:ac:ee:cf:0b:62:9b:75:62: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:8C:DB:8B:4E:4E:A6:02:C3:88:87:80:52:20:97:FD:1C:9D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:52:b3:af:be:09:7c:87:4b:fe:be:57:2e:7b:dd:19:83:4b: 26:b6:99:65:2a:ae:9b:9a:10:88:aa:f7:35:25:ba:13:48:7a: fd:59:7b:a0:cd:2e:1e:15:5f:76:1a:22:96:11:69:5e:07:90: da:6b:59:1a:8d:68:4f:83:f5:15:4c:fd:af:b5:71:e1:2d:74: 2f:65:57:46:3a:5b:78:c7:6d:75:66:0a:25:48:5e:21:b9:b5: e5:a9:5e:bf:26:34:67:58:b3:a7:c4:21:ec:c4:90:78:19:24: 8e:39:02:c9:d0:f5:68:22:00:de:1c:2a:31:25:f6:aa:0d:c4: 28:6d:8c:c7:81:10:e3:2c:66:7f:30:28:ad:d6:36:b2:3c:7a: 32:05:b8:c1:9a:5f:b8:35:77:7b:a8:e2:57:57:62:b9:a8:5d: 42:40:f0:35:cf:fa:5b:3a:ee:96:62:02:c0:b0:d3:c3:4f:f2: fa:a7:4b:df:19:87:10:64:76:03:9e:ba:31:a7:de:9b:82:6d: b2:cf:b5:d7:bf:ba:cc:66:15:f2:92:80:c6:b1:d5:6e:a7:0e: da:2b:49:8d:1e:7c:87:d5:c9:10:fb:b9:b0:4d:1e:fd:64:9f: b5:4a:3d:02:30:91:3d:70:89:d5:9d:2f:b8:0e:5c:b3:79:81: db:a0:00:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZme9OUH7gQKQApVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk OWQ0MDM0MjMtYTBhMS00NjkxLTgzZWQtMzM3MmRmYTM2NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEbfxDrWv8fpucVRR74AdsqFfKaZ60pQPneQ bl5+sKeAoDeUzv7Y7XlIAVD8qsvbtqDv4DLyafwk819XcjGD+yl6KsBEmEmjRC7i 0LaLhftvODoqhRRzIK4qwCNo+2eeyqQ2itAdZzCIjUjChKuopsC/3kM1pZs0CV4o ETT9up3R3qbDH2Rw3KBgBbRyKinBjxMVJMiRjFsHYApCaZA3bhx+eHvgDViXA9mA vkfP3BCbgA23fcRdKdhT1DSBL4BuD/m90V7XgGJGv7Wnf3gJw4Sg/P3dDbtNTRlm 1lZQWx3qA3hdGDHe0SRkSYc3H9l5RwHVwH4ZrO7PC2KbdWLw5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcDjNuLTk6mAsOIh4BSIJf9HJ3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvNjg1MjM3ZGItYzRkMC0z NmJiLTk3NGQtYzQxNDFlNjY4YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERSs6++CXyHS/6+Vy573RmDSya2mWUqrpuaEIiq9zUluhNIev1Ze6DN Lh4VX3YaIpYRaV4HkNprWRqNaE+D9RVM/a+1ceEtdC9lV0Y6W3jHbXVmCiVIXiG5 teWpXr8mNGdYs6fEIezEkHgZJI45AsnQ9WgiAN4cKjEl9qoNxChtjMeBEOMsZn8w KK3WNrI8ejIFuMGaX7g1d3uo4ldXYrmoXUJA8DXP+ls67pZiAsCw08NP8vqnS98Z hxBkdgOeujGn3puCbbLPtde/usxmFfKSgMax1W6nDtorSY0efIfVyRD7ubBNHv1k n7VKPQIwkT1widWdL7gOXLN5gdugALY= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:09 2024 by rpki-client on console-fra.rpki-client.org