$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa File: 12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa (raw, json) Hash identifier: fnidVzygGjYLLL+rqAn/Ta3aet2PdzOnA7aZnY1I9Ro= Subject key identifier: E1:33:1D:86:F0:34:C9:94:77:CC:00:D8:22:94:FE:F4:0D:90:ED:25 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F43285847ED24B3E2B47EEC2AC167E180 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 40805 IP address blocks: 208.96.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:b3:e2:b4:7e:ec:2a:c1:67:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=1b3f03e9-7d01-4553-955a-d40cf9a0a116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:97:96:38:78:68:0d:60:1d:00:a0:b7:fc: ef:16:e6:c8:71:f4:46:88:45:4b:71:20:85:00:73: 83:bc:00:dd:fe:f2:93:54:b6:53:fd:cc:60:a1:1a: e5:c3:3f:74:82:bf:e4:c0:f3:b9:78:24:49:3f:7e: 2b:e4:f7:52:d9:63:44:9c:5e:6f:2e:ca:18:ed:74: 3a:ef:d7:87:11:2d:4b:ae:bc:d4:ff:e5:e4:24:d1: 8f:49:61:89:dd:1f:63:e5:d8:2a:d2:16:1b:49:e2: b5:a0:38:96:69:14:8f:3b:b1:3b:74:b5:a4:5e:85: 2d:73:7e:b8:e9:c2:57:d8:58:9f:2f:5f:b1:25:e7: cb:c7:3c:75:3d:99:94:3a:c8:46:40:66:59:a8:d9: c8:48:f6:de:3a:b9:c5:ca:de:99:03:32:3b:85:32: 77:2d:d6:ad:8c:36:24:e5:b4:dc:6b:83:74:4a:81: 91:7a:67:1a:e4:8f:44:b1:9b:e7:1a:92:2d:f9:15: 5b:0d:47:5f:a5:26:37:b5:29:31:df:0d:ff:66:1d: 10:10:17:17:66:e2:66:e7:49:c5:0d:96:d0:bf:c3: 23:a1:41:75:4f:bc:7c:8b:55:2f:10:d1:4f:af:a1: 77:20:c9:fe:7d:40:cc:b8:87:af:87:60:0b:d6:be: 3b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:33:1D:86:F0:34:C9:94:77:CC:00:D8:22:94:FE:F4:0D:90:ED:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ce:b3:0f:ae:07:c3:5b:6e:2f:81:9e:44:df:3e:50:ae:eb: a7:13:8a:ab:0d:48:ea:06:1e:ee:ad:0a:67:84:bd:eb:aa:d5: 04:ae:91:50:51:f3:76:20:ab:65:94:28:4f:9e:5a:ac:4d:a4: af:b1:a1:31:59:6c:18:54:0d:82:f0:52:50:1e:6b:57:e1:b4: e7:92:cd:a6:85:b4:fc:18:2e:69:d0:8d:ac:2a:5c:bd:11:81: a6:a2:c0:1d:77:55:40:e4:23:f4:cc:5d:60:c6:17:9b:f4:6d: bf:d9:4a:71:67:ae:ff:10:80:17:58:1e:20:33:ac:e9:19:ed: f8:4f:b2:23:46:55:fa:b1:48:79:17:3e:54:42:3d:bd:cb:90: 17:7f:20:20:9f:3a:93:06:8c:f6:01:77:4e:1d:bd:af:a6:f6: 19:9d:e6:fb:ab:b5:89:f4:12:14:04:d4:26:2f:e0:84:c9:db: e7:c5:87:eb:29:69:aa:af:09:51:6a:5b:a8:2d:24:ed:9d:ae: 0d:2e:4b:6e:0b:37:eb:53:92:26:59:01:96:58:22:8e:25:50: 7f:a5:13:a4:1b:69:fc:a1:37:5e:25:a2:c7:09:8f:4a:cf:6a: 93:1b:81:c8:17:c6:3f:c1:b1:67:f4:d2:76:f8:c6:84:e8:1e: 68:f6:03:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJLPitH7sKsFn4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk MWIzZjAzZTktN2QwMS00NTUzLTk1NWEtZDQwY2Y5YTBhMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOKXljh4aA1gHQCgt/zvFubIcfRGiEVLcSCF AHODvADd/vKTVLZT/cxgoRrlwz90gr/kwPO5eCRJP34r5PdS2WNEnF5vLsoY7XQ6 79eHES1LrrzU/+XkJNGPSWGJ3R9j5dgq0hYbSeK1oDiWaRSPO7E7dLWkXoUtc364 6cJX2FifL1+xJefLxzx1PZmUOshGQGZZqNnISPbeOrnFyt6ZAzI7hTJ3LdatjDYk 5bTca4N0SoGRemca5I9EsZvnGpIt+RVbDUdfpSY3tSkx3w3/Zh0QEBcXZuJm50nF DZbQv8MjoUF1T7x8i1UvENFPr6F3IMn+fUDMuIevh2AL1r47ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEzHYbwNMmUd8wA2CKU/vQNkO0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMTJkOGUyZWUtYWY4OS0z Yjg0LTg3MDUtZjM2ZjdmOGM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0GCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjOsw+uB8Nbbi+BnkTfPlCu66cTiqsNSOoGHu6tCmeEveuq1QSukVBR 83Ygq2WUKE+eWqxNpK+xoTFZbBhUDYLwUlAea1fhtOeSzaaFtPwYLmnQjawqXL0R gaaiwB13VUDkI/TMXWDGF5v0bb/ZSnFnrv8QgBdYHiAzrOkZ7fhPsiNGVfqxSHkX PlRCPb3LkBd/ICCfOpMGjPYBd04dva+m9hmd5vurtYn0EhQE1CYv4ITJ2+fFh+sp aaqvCVFqW6gtJO2drg0uS24LN+tTkiZZAZZYIo4lUH+lE6QbafyhN14loscJj0rP apMbgcgXxj/BsWf00nb4xoToHmj2A+I= -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:42 2024 by rpki-client on console-ams.rpki-client.org