$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa File: 26239fe9-1b4c-309b-baa7-62dcf11a0892.roa (raw, json) Hash identifier: PI55VFCtyYzQi1octu0WBqPxAG55TKG2wV0P3/C4L8o= Subject key identifier: 40:22:4D:7B:07:B3:05:B1:C9:96:44:D2:37:FE:E8:31:A2:25:9F:A0 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F43285847C34486F0E8126A982A1D37F0 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 40805 IP address blocks: 108.161.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:86:f0:e8:12:6a:98:2a:1d:37:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=837c234a-46c9-4a0f-9455-772f113cf638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f9:dd:ee:9f:c3:33:5f:54:a0:62:fd:58:6a: ee:b5:16:31:0c:43:76:f6:ef:8a:eb:38:be:66:ab: 9c:c7:e1:98:33:0f:31:2f:66:54:d3:65:63:49:ba: 3c:ac:b7:47:6c:94:f6:a1:78:d5:72:a6:b6:b4:25: d0:45:aa:71:28:36:b1:88:d7:4f:50:77:e3:d7:4f: 04:58:b6:57:7a:69:9b:92:ad:73:6a:aa:3d:83:90: ed:a4:0a:25:86:e7:c8:37:b4:58:e4:09:db:61:28: da:bc:a5:f4:c1:9a:fd:79:9b:3a:ec:8a:47:35:be: dc:30:81:b0:94:ef:d3:ba:d6:06:4a:df:9e:43:52: 17:95:12:fb:cc:a0:4c:5b:40:40:93:64:62:3b:22: b7:4f:1a:7a:b4:38:d1:ad:cc:eb:67:05:a3:46:68: 58:f7:df:a9:44:68:02:b9:12:a4:73:d7:99:18:95: 3a:0e:29:2d:86:e3:f4:64:55:62:51:43:2e:c7:9d: ee:86:98:b2:c4:d7:21:84:eb:07:de:ae:25:74:8c: e8:f5:e9:d6:fe:63:05:38:7f:7c:b7:0b:66:62:c4: e1:f3:0e:a5:f5:97:5a:0b:0a:be:d9:96:1d:24:1d: cd:22:e7:15:8b:f8:1c:01:2d:c5:72:aa:b3:52:0d: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:4D:7B:07:B3:05:B1:C9:96:44:D2:37:FE:E8:31:A2:25:9F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 108.161.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fe:73:58:fc:c6:84:f9:e0:fb:f8:bd:68:2b:20:96:4c:5c: 03:ad:44:00:d9:9d:88:e5:3f:2b:43:21:40:e7:cf:d2:5b:30: 95:45:d8:52:5c:33:d4:fe:51:f2:65:f9:ef:27:15:e8:85:8c: ce:79:0b:47:20:d3:17:42:09:97:a6:b9:bb:27:ae:cb:13:47: 2a:72:9c:49:63:c2:72:a0:c3:ae:47:0c:37:01:c6:3e:66:27: 48:b3:6e:a9:8f:9b:0e:3f:81:cd:8e:93:f7:b6:85:70:b0:83: ec:b1:d4:91:f8:81:af:d0:45:4f:39:db:4e:e9:c3:7c:c2:4d: e1:48:80:98:6c:aa:81:96:a4:5e:f1:3e:19:06:b8:8a:89:83: 62:5e:1d:3a:50:ba:30:f9:0f:51:35:b3:9f:dc:e5:39:d6:ee: 06:97:ee:31:5d:14:6e:ad:91:81:c6:74:22:03:8b:59:03:db: 7c:0e:c6:c8:3b:42:fb:a8:d7:45:52:f2:c9:b0:45:24:94:f0: 07:e9:4d:44:d1:ff:71:b8:67:fc:cc:90:11:0a:0b:6c:71:be: a4:89:3e:12:aa:8f:b3:cd:24:37:7d:41:09:b3:87:4a:b1:fc: f5:aa:4b:04:88:10:ce:8b:aa:74:89:0c:05:8e:ea:02:4c:a1: 15:01:a1:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRIbw6BJqmCodN/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk ODM3YzIzNGEtNDZjOS00YTBmLTk0NTUtNzcyZjExM2NmNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vnd7p/DM19UoGL9WGrutRYxDEN29u+K6zi+ Zqucx+GYMw8xL2ZU02VjSbo8rLdHbJT2oXjVcqa2tCXQRapxKDaxiNdPUHfj108E WLZXemmbkq1zaqo9g5DtpAolhufIN7RY5AnbYSjavKX0wZr9eZs67IpHNb7cMIGw lO/TutYGSt+eQ1IXlRL7zKBMW0BAk2RiOyK3Txp6tDjRrczrZwWjRmhY99+pRGgC uRKkc9eZGJU6DikthuP0ZFViUUMux53uhpiyxNchhOsH3q4ldIzo9enW/mMFOH98 twtmYsTh8w6l9ZdaCwq+2ZYdJB3NIucVi/gcAS3FcqqzUg3cyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAiTXsHswWxyZZE0jf+6DGiJZ+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMjYyMzlmZTktMWI0Yy0z MDliLWJhYTctNjJkY2YxMWEwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7+c1j8xoT54Pv4vWgrIJZMXAOtRADZnYjlPytDIUDnz9JbMJVF2FJc M9T+UfJl+e8nFeiFjM55C0cg0xdCCZemubsnrssTRypynEljwnKgw65HDDcBxj5m J0izbqmPmw4/gc2Ok/e2hXCwg+yx1JH4ga/QRU85207pw3zCTeFIgJhsqoGWpF7x PhkGuIqJg2JeHTpQujD5D1E1s5/c5TnW7gaX7jFdFG6tkYHGdCIDi1kD23wOxsg7 Qvuo10VS8smwRSSU8AfpTUTR/3G4Z/zMkBEKC2xxvqSJPhKqj7PNJDd9QQmzh0qx /PWqSwSIEM6LqnSJDAWO6gJMoRUBoWo= -----END CERTIFICATE-----Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org