$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa File: 3e3631a7-6a34-3455-850a-0ec197b42195.roa (raw, json) Hash identifier: mimT6ninznhOj+qWyZ9ocqWNyeGdqfMgRcA4hC71wPA= Subject key identifier: 1E:49:F3:1E:D2:D3:53:34:D0:15:EC:48:10:A7:26:58:A8:4C:3B:85 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F43285847CA3F80ACDEA6EE7612FA9D00 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 800 IP address blocks: 207.32.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:80:ac:de:a6:ee:76:12:fa:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=cbaaa959-408e-4fa8-b179-cecd255d3252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:b3:44:7d:79:11:fa:d0:95:68:2f:4c:16: 4f:d5:6e:c7:2b:a7:f9:52:a3:39:cd:30:61:cf:54: d1:d7:d4:d8:ef:d8:85:40:e7:3e:08:62:98:99:43: fa:dc:18:c3:43:09:52:d3:de:31:d2:8d:d8:3d:cb: 49:85:68:92:03:d6:3c:62:84:61:cb:aa:f3:cf:4c: e3:1c:18:a7:13:00:10:80:6c:2f:1c:83:12:49:30: 07:1a:de:e0:f9:e9:b3:42:67:a9:e7:08:31:88:b3: 99:e8:63:9f:81:80:48:05:64:32:24:40:9c:67:c7: 30:77:c5:a5:b2:62:ad:47:65:6c:b9:00:c6:df:27: f6:b2:93:ac:6c:f3:79:61:a1:6a:c7:4b:af:9c:06: 16:8f:8e:0a:8f:52:dd:45:7f:9a:f6:04:0e:52:d8: 6f:eb:1c:50:82:a3:b0:25:69:ee:b5:f3:b8:08:08: 5a:ed:fc:48:9e:ae:bf:b1:66:b1:6f:4b:6b:6f:e1: 7c:e7:27:60:e7:6c:4b:11:51:99:1e:d0:1c:20:67: 5a:34:62:60:9f:8f:da:34:13:c5:6e:10:b9:6b:c9: 9b:0d:5d:35:30:08:44:f0:f4:7a:4a:b2:1b:bc:f2: 3b:de:fa:67:2d:be:26:29:a2:44:10:b7:5c:40:b9: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:49:F3:1E:D2:D3:53:34:D0:15:EC:48:10:A7:26:58:A8:4C:3B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 207.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9d:30:53:8b:d8:be:6f:e4:f2:03:39:f6:6d:cb:b2:15:65: 77:2d:5b:2d:c9:e1:6c:2b:4f:df:03:96:e4:ad:e8:c1:8e:51: 18:ec:37:06:e4:8a:02:77:20:5b:a0:3d:ae:32:5e:81:ca:f8: 3d:9a:47:37:2e:e6:91:41:a5:1c:fe:af:a2:d0:d5:09:b3:ef: 37:c0:be:05:af:d6:09:1f:c9:99:79:89:53:9b:a1:ff:93:5d: 45:da:0c:a2:95:82:a0:dc:9f:10:2d:a3:f7:99:a5:72:e5:3b: 68:c1:b4:f6:b7:dd:f5:31:39:d0:a3:0f:17:78:56:d3:c8:e3: bb:ed:d8:00:a2:11:23:64:29:8c:63:01:b0:fe:fb:43:33:38: da:1c:0a:50:20:8c:3c:81:12:2a:34:ac:fb:4e:5e:0c:cd:30: 91:45:c3:b2:3d:9c:b2:17:97:1e:91:3f:ba:1e:53:ce:08:79: c0:50:00:2c:fe:48:f0:4f:8e:22:cc:f3:1c:7c:1b:de:4d:f9: c8:2c:11:fd:dd:e9:d1:f3:96:d6:da:01:24:f8:f5:47:ab:b1: f3:5d:28:3b:b0:89:d1:21:b5:25:72:7f:17:39:a3:ba:1e:0f: 50:8a:0c:46:d4:cf:16:6e:94:41:55:8e:fa:bc:e3:db:59:6b: 6e:91:06:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4Cs3qbudhL6nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2JhYWE5NTktNDA4ZS00ZmE4LWIxNzktY2VjZDI1NWQzMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqSzRH15EfrQlWgvTBZP1W7HK6f5UqM5zTBh z1TR19TY79iFQOc+CGKYmUP63BjDQwlS094x0o3YPctJhWiSA9Y8YoRhy6rzz0zj HBinEwAQgGwvHIMSSTAHGt7g+emzQmep5wgxiLOZ6GOfgYBIBWQyJECcZ8cwd8Wl smKtR2VsuQDG3yf2spOsbPN5YaFqx0uvnAYWj44Kj1LdRX+a9gQOUthv6xxQgqOw JWnutfO4CAha7fxInq6/sWaxb0trb+F85ydg52xLEVGZHtAcIGdaNGJgn4/aNBPF bhC5a8mbDV01MAhE8PR6SrIbvPI73vpnLb4mKaJEELdcQLlvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5J8x7S01M00BXsSBCnJlioTDuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvM2UzNjMxYTctNmEzNC0z NDU1LTg1MGEtMGVjMTk3YjQyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCdMFOL2L5v5PIDOfZty7IVZXctWy3J4WwrT98DluSt6MGOURjsNwbk igJ3IFugPa4yXoHK+D2aRzcu5pFBpRz+r6LQ1Qmz7zfAvgWv1gkfyZl5iVObof+T XUXaDKKVgqDcnxAto/eZpXLlO2jBtPa33fUxOdCjDxd4VtPI47vt2ACiESNkKYxj AbD++0MzONocClAgjDyBEio0rPtOXgzNMJFFw7I9nLIXlx6RP7oeU84IecBQACz+ SPBPjiLM8xx8G95N+cgsEf3d6dHzltbaAST49UersfNdKDuwidEhtSVyfxc5o7oe D1CKDEbUzxZulEFVjvq849tZa26RBk0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:07 2024 by rpki-client on console-ams.rpki-client.org