$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa File: bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa (raw, json) Hash identifier: O2ayxfwFayGfh0n9F/3ZZX/LnoY+t/2wn/yXFrDvsyU= Subject key identifier: 40:13:80:1C:5C:04:C5:F8:DC:79:AC:9E:34:5E:DE:EA:23:6D:CE:17 Certificate issuer: /CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Certificate serial: 010D0C9F43285847DC64A02119440E7C992D96F8 Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 26157 IP address blocks: 207.174.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:a0:21:19:44:0e:7c:99:2d:96:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=19732e8c-e0e6-4765-8fed-da080d99472f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:ea:3f:0e:16:ec:63:1b:34:06:65:54:fb: 28:9c:21:f7:38:f5:a2:ad:d4:ad:c5:f2:54:d5:a2: 9f:bc:49:81:b2:42:61:fd:57:19:37:54:9c:79:77: 33:f5:ae:ab:ab:cd:b2:30:a3:40:e7:8b:b3:af:f5: 18:30:43:4d:44:de:f5:f2:8f:17:1b:69:d1:b1:c4: 33:5e:47:f0:56:ca:7b:f3:78:4b:3c:38:e8:4d:db: 7d:7b:69:b1:66:65:f0:db:43:07:86:72:03:f1:00: ec:b7:98:9c:15:47:f8:67:0d:c3:81:47:51:ed:d4: 80:15:a5:32:ad:6d:53:25:a7:47:99:9a:49:b5:78: c6:00:82:9a:53:7a:59:ff:b0:f2:4e:4b:c0:03:16: 5e:e0:80:34:74:5e:c3:5e:65:ec:5e:5d:bc:57:9f: 7e:19:45:73:22:20:fe:65:0d:8a:32:9d:7e:87:e9: 55:0c:11:65:ec:29:07:e3:51:37:f1:de:cf:b6:c5: 34:30:f5:44:a6:ce:fa:f1:f7:2d:bb:12:f3:12:91: 04:08:2e:cc:7d:a6:37:33:6d:8d:d9:1c:8b:2d:22: 14:da:4f:94:82:4a:d5:1b:55:63:17:62:37:bb:67: dc:4e:4d:8b:58:42:8b:0f:df:c6:0b:42:a9:45:ce: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:13:80:1C:5C:04:C5:F8:DC:79:AC:9E:34:5E:DE:EA:23:6D:CE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl X509v3 Authority Key Identifier: keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer sbgp-ipAddrBlock: critical IPv4: 207.174.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:02:a1:01:82:b2:50:7f:4c:b1:7f:f5:ae:c7:73:d2:67:4c: 7e:1b:ba:9e:02:47:ec:d1:d3:d6:94:38:af:96:63:39:f4:5a: 6e:08:a7:b5:a6:bf:1a:65:08:76:ac:c3:41:e6:c6:28:aa:83: f4:5d:27:5c:89:9d:9b:8c:9a:cd:05:00:fc:47:1d:fb:60:00: ab:40:26:be:1f:f9:64:a6:6e:03:e2:73:63:10:36:07:17:ae: 3c:24:27:4b:6e:06:2e:e8:09:d4:66:72:a0:6a:8a:5e:5a:0e: 9b:48:a4:c4:6c:3b:14:ee:e5:ba:f2:68:43:2c:1f:32:42:e7: de:ea:ad:92:16:89:0d:63:27:8a:00:36:5f:35:85:6d:bf:0b: 28:d7:eb:0b:68:39:c7:04:76:b4:74:a9:24:e9:73:1d:2b:df: 7a:9a:24:9f:ae:e8:99:d5:3a:bc:20:59:62:56:cc:6e:07:99: e4:d0:c9:aa:ab:1e:51:d3:cb:6d:70:de:a1:46:26:34:6c:7f: d3:26:38:23:fb:8b:7f:fd:fd:07:df:67:62:53:a3:84:4a:52: 7f:08:ad:5d:42:63:b1:ad:c0:c8:c7:10:ba:50:10:5d:56:b4: 53:0d:89:dd:f6:d1:89:a4:2f:74:ca:57:27:ed:0a:5e:9b:2c: 27:92:8e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZKAhGUQOfJktlvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0MmNkMWUtMTM1MC00MWQ1LWExNGUtNTFiZGRiNTJj MzM2MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk MTk3MzJlOGMtZTBlNi00NzY1LThmZWQtZGEwODBkOTk0NzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowPqPw4W7GMbNAZlVPsonCH3OPWirdStxfJU 1aKfvEmBskJh/VcZN1SceXcz9a6rq82yMKNA54uzr/UYMENNRN718o8XG2nRscQz XkfwVsp783hLPDjoTdt9e2mxZmXw20MHhnID8QDst5icFUf4Zw3DgUdR7dSAFaUy rW1TJadHmZpJtXjGAIKaU3pZ/7DyTkvAAxZe4IA0dF7DXmXsXl28V59+GUVzIiD+ ZQ2KMp1+h+lVDBFl7CkH41E38d7PtsU0MPVEps768fctuxLzEpEECC7MfaY3M22N 2RyLLSIU2k+UgkrVG1VjF2I3u2fcTk2LWEKLD9/GC0KpRc6+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEATgBxcBMX43HmsnjRe3uojbc4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wOTQy Y2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJkZGI1MmMzMzYvYmNhNWFhMjAtMGFiOS0z MzE1LThkOTctZjJlZDUwMzM2OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDk0MmNkMWUtMTM1MC00MWQ1LWEx NGUtNTFiZGRiNTJjMzM2LzA5NDJjZDFlLTEzNTAtNDFkNS1hMTRlLTUxYmRkYjUy YzMzNi5jcmwwHwYDVR0jBBgwFoAUWsdYmsqiyRvuds1T1i6jaRsQMkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wOTQyY2QxZS0xMzUwLTQxZDUtYTE0ZS01MWJk ZGI1MmMzMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoCoQGCslB/TLF/9a7Hc9JnTH4bup4CR+zR09aUOK+WYzn0Wm4Ip7Wm vxplCHasw0Hmxiiqg/RdJ1yJnZuMms0FAPxHHftgAKtAJr4f+WSmbgPic2MQNgcX rjwkJ0tuBi7oCdRmcqBqil5aDptIpMRsOxTu5bryaEMsHzJC597qrZIWiQ1jJ4oA Nl81hW2/CyjX6wtoOccEdrR0qSTpcx0r33qaJJ+u6JnVOrwgWWJWzG4HmeTQyaqr HlHTy21w3qFGJjRsf9MmOCP7i3/9/QffZ2JTo4RKUn8IrV1CY7GtwMjHELpQEF1W tFMNid320YmkL3TKVyftCl6bLCeSjlQ= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:08 2024 by rpki-client on console-ams.rpki-client.org