$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa File: 4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa (raw, json) Hash identifier: PBYU+efdFRZi12Ck6GC9lh9scNe9Z22OtUBLjSLhUnw= Subject key identifier: 48:60:35:B4:FB:88:33:3B:FE:4D:A2:D3:53:05:BB:AD:AA:8C:2C:DE Certificate issuer: /CN=1226980a-2c43-43da-83fd-198696a9b02e Certificate serial: 010D0C9F432858476C9DBA8CD7786DF0C69AB100 Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 14618 IP address blocks: 207.110.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:ba:8c:d7:78:6d:f0:c6:9a:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=45cb94c7-66ff-4d7b-881d-3f6968f84c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:10:f9:58:85:eb:6f:2b:e4:14:e1:56:50:d2: 14:95:e9:7d:ad:c0:b0:d7:b4:cb:87:23:ad:c6:37: 8a:1a:4b:92:a6:ff:20:25:b8:dc:28:d3:e0:aa:c7: 31:83:34:2e:ac:69:cc:6d:df:87:4b:87:e2:95:0e: 35:5a:82:5e:d2:a1:4f:1f:b5:40:53:35:4f:06:57: f1:07:2f:c8:60:2c:20:35:a9:6c:a6:da:e4:af:95: fc:db:db:f9:9c:2f:96:08:80:ed:35:9b:2d:9b:48: a7:a5:56:31:e0:cd:22:98:76:2d:82:ab:5f:d2:a4: 98:1c:44:df:d6:18:aa:ed:96:78:22:2c:99:d4:cb: d3:34:90:f3:77:8c:b4:82:34:63:65:7b:79:ed:8d: 7a:08:c9:90:72:c5:46:c7:7a:24:c6:3f:82:5f:52: b6:a9:e0:87:1f:e9:ff:67:ff:8f:d9:86:5f:cc:50: 11:16:c0:93:c4:c3:6a:fe:d2:5a:13:ea:8f:64:07: e2:e2:3f:91:38:bb:eb:cc:34:2e:2a:54:97:2b:79: 3c:c8:29:f2:71:ea:20:0c:a6:24:91:29:e7:20:8e: 0c:b9:a3:8c:dd:23:b8:15:7f:73:65:f3:12:1c:91: e1:b2:d9:ef:45:17:c5:d0:c9:9e:2f:86:7d:45:86: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:60:35:B4:FB:88:33:3B:FE:4D:A2:D3:53:05:BB:AD:AA:8C:2C:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/4d84e689-12d4-3bdb-b52b-6c8923f3fe52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl X509v3 Authority Key Identifier: keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer sbgp-ipAddrBlock: critical IPv4: 207.110.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:73:b2:fb:d2:46:6b:55:b8:c8:9e:bb:2d:09:5a:6e:44:c8: 4f:c2:ef:b9:ea:46:c0:fd:eb:fd:84:1b:00:6e:ca:94:17:47: a2:3c:79:44:81:40:33:88:fc:44:fc:ed:f4:29:eb:ec:ca:65: 03:3f:35:ae:77:0d:9c:30:fa:a5:09:fc:b6:3d:3c:bd:c6:f1: 44:5c:ef:39:0e:0f:2f:c4:6f:3c:ff:fd:35:a6:9a:12:29:27: 2b:c3:58:49:dc:cb:f3:71:5d:1c:69:03:19:ee:86:09:29:ec: 6d:68:cd:02:43:66:a3:40:8d:5f:26:3e:31:fa:bf:71:6f:b6: 68:44:22:ff:d6:91:6c:56:b8:7a:74:ee:05:01:7d:81:1d:14: ec:ad:a4:08:86:40:41:40:3c:f5:69:58:22:c3:71:d0:8f:f2: 37:b1:0e:4d:77:aa:c0:82:c6:d3:be:18:f9:98:a9:5a:c3:0a: 9d:e4:62:2d:b3:5c:ad:33:d3:5e:49:4b:54:b7:53:74:1e:b5: 82:08:e4:d6:e8:5b:8f:64:52:3f:39:b1:32:65:84:9a:fe:2a: 08:24:52:c2:ec:ae:47:45:ca:7b:80:f9:f0:4a:58:27:f4:ac: 66:f6:70:53:41:7f:d4:14:5b:5a:6d:79:3d:9a:64:4e:22:de: 2a:80:84:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbqM13ht8MaasQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIyNjk4MGEtMmM0My00M2RhLTgzZmQtMTk4Njk2YTli MDJlMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk NDVjYjk0YzctNjZmZi00ZDdiLTg4MWQtM2Y2OTY4Zjg0YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghD5WIXrbyvkFOFWUNIUlel9rcCw17TLhyOt xjeKGkuSpv8gJbjcKNPgqscxgzQurGnMbd+HS4filQ41WoJe0qFPH7VAUzVPBlfx By/IYCwgNalsptrkr5X829v5nC+WCIDtNZstm0inpVYx4M0imHYtgqtf0qSYHETf 1hiq7ZZ4IiyZ1MvTNJDzd4y0gjRjZXt57Y16CMmQcsVGx3okxj+CX1K2qeCHH+n/ Z/+P2YZfzFARFsCTxMNq/tJaE+qPZAfi4j+ROLvrzDQuKlSXK3k8yCnyceogDKYk kSnnII4MuaOM3SO4FX9zZfMSHJHhstnvRRfF0MmeL4Z9RYZPmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhgNbT7iDM7/k2i01MFu62qjCzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2 OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2OTZhOWIwMmUvNGQ4NGU2ODktMTJkNC0z YmRiLWI1MmItNmM4OTIzZjNmZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTIyNjk4MGEtMmM0My00M2RhLTgz ZmQtMTk4Njk2YTliMDJlLzEyMjY5ODBhLTJjNDMtNDNkYS04M2ZkLTE5ODY5NmE5 YjAyZS5jcmwwHwYDVR0jBBgwFoAU6HPdb/rXZzrymoMc4BJjmUFXnsUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2 OTZhOWIwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz26KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFzsvvSRmtVuMieuy0JWm5EyE/C77nqRsD96/2EGwBuypQXR6I8eUSB QDOI/ET87fQp6+zKZQM/Na53DZww+qUJ/LY9PL3G8URc7zkODy/Ebzz//TWmmhIp JyvDWEncy/NxXRxpAxnuhgkp7G1ozQJDZqNAjV8mPjH6v3FvtmhEIv/WkWxWuHp0 7gUBfYEdFOytpAiGQEFAPPVpWCLDcdCP8jexDk13qsCCxtO+GPmYqVrDCp3kYi2z XK0z015JS1S3U3QetYII5NboW49kUj85sTJlhJr+KggkUsLsrkdFynuA+fBKWCf0 rGb2cFNBf9QUW1pteT2aZE4i3iqAhNg= -----END CERTIFICATE-----Generated at Sun Nov 24 20:11:56 2024 by rpki-client on console-ams.rpki-client.org