$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa File: c70e9fda-4775-3e35-b953-e37e4d13808d.roa (raw, json) Hash identifier: xEo5bJAEWiaE2QljtbS1iYCWoK92ohRJuNOB4tTLEFE= Subject key identifier: 63:30:04:56:F2:58:C4:34:9B:C3:9B:49:2E:06:D3:97:7D:C2:02:0F Certificate issuer: /CN=4c855281-0740-46c1-8432-9952688807bc Certificate serial: 010D0C9F43285847A30BF74F4C6F3D9C44606D80 Authority key identifier: 99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 14713 IP address blocks: 204.109.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:f7:4f:4c:6f:3d:9c:44:60:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c855281-0740-46c1-8432-9952688807bc Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=c7185e34-1a77-4f0a-a232-4cdda7840418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:af:bb:9b:94:30:f5:f3:62:4c:62:33:6e:46: 20:07:5b:22:ac:2b:ae:86:f7:5e:83:aa:a8:2b:7c: 54:4b:35:97:96:2c:92:cc:86:a6:46:44:04:8e:04: 90:aa:22:eb:62:bc:7f:c1:07:72:13:4d:10:1f:52: b8:1f:84:9d:ea:cf:90:42:72:b4:21:b8:0a:f8:2d: af:7f:e5:68:15:a4:eb:f8:5b:eb:88:46:c8:e3:a7: 95:47:9a:46:f7:27:0b:da:e3:bb:22:3b:a1:06:e6: 51:1d:6a:f2:9b:0e:d5:40:ed:d0:39:b7:09:3a:f0: f1:a6:02:3c:c1:85:83:85:6b:e3:19:76:c9:ae:f0: a3:44:97:3e:50:93:1d:a3:07:96:c8:18:9f:e2:55: 63:34:aa:ba:a0:08:c8:db:1f:bd:a8:61:c9:8d:c0: a9:c3:1d:25:5f:55:b7:b8:22:f5:4e:06:86:fe:e0: ce:a0:4d:a6:8c:b9:82:a9:00:b0:b7:df:bb:5a:27: f5:ec:db:d4:b5:19:de:27:a7:f2:14:3a:54:2a:45: 8e:d6:bb:b4:6d:30:c1:4f:b7:07:c8:2d:f9:ff:6b: aa:a6:4e:9e:53:bf:b1:2d:c6:33:ed:67:f6:6b:c9: 01:56:07:5f:62:be:36:27:96:c1:18:40:84:88:01: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:30:04:56:F2:58:C4:34:9B:C3:9B:49:2E:06:D3:97:7D:C2:02:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl X509v3 Authority Key Identifier: keyid:99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer sbgp-ipAddrBlock: critical IPv4: 204.109.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:77:9d:f7:f8:0a:26:86:e2:53:9e:af:55:7e:08:b5:82:11: 6e:04:5a:4d:fa:37:35:08:40:9f:4d:f0:16:10:da:7e:72:7d: dc:f0:12:0f:b1:cb:14:f3:d0:d0:7a:73:bd:af:9f:06:85:30: b0:19:d6:4b:fb:7d:78:3f:2f:ad:ba:0e:15:3e:e3:54:a7:a5: 1d:b0:d3:65:7a:ce:1c:0a:ce:23:34:1b:4a:33:b1:ba:2c:4d: cd:ba:97:2e:2c:84:eb:ab:98:78:72:3d:e0:70:6c:e2:95:3f: 0f:d9:2d:ed:04:c6:c0:e6:bc:ec:69:55:90:e6:0b:82:06:12: 4e:ee:2b:3f:2f:ba:7f:2e:8e:14:c3:69:4f:7d:80:9d:94:3d: e0:60:55:35:a2:ba:da:23:8d:82:5a:31:35:b3:1a:88:ee:61: 1a:c6:34:5b:cf:69:f0:bd:aa:52:52:a5:b9:e1:d2:e3:2a:af: d8:77:64:d1:41:ac:6e:85:4f:04:25:d6:2d:04:f9:39:94:f8: ee:9f:01:a9:e4:be:8e:75:00:66:4d:98:92:76:06:93:19:4e: 31:ba:f6:46:8a:8a:ea:71:fb:35:4f:84:5e:a0:2d:ad:64:0d: 12:e3:28:d7:72:32:91:93:4a:62:0a:ea:18:94:9d:21:27:23: 88:f4:26:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/dPTG89nERgbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NTUyODEtMDc0MC00NmMxLTg0MzItOTk1MjY4ODgw N2JjMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk YzcxODVlMzQtMWE3Ny00ZjBhLWEyMzItNGNkZGE3ODQwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6+7m5Qw9fNiTGIzbkYgB1sirCuuhvdeg6qo K3xUSzWXliySzIamRkQEjgSQqiLrYrx/wQdyE00QH1K4H4Sd6s+QQnK0IbgK+C2v f+VoFaTr+FvriEbI46eVR5pG9ycL2uO7IjuhBuZRHWrymw7VQO3QObcJOvDxpgI8 wYWDhWvjGXbJrvCjRJc+UJMdoweWyBif4lVjNKq6oAjI2x+9qGHJjcCpwx0lX1W3 uCL1TgaG/uDOoE2mjLmCqQCwt9+7Wif17NvUtRneJ6fyFDpUKkWO1ru0bTDBT7cH yC35/2uqpk6eU7+xLcYz7Wf2a8kBVgdfYr42J5bBGECEiAGoHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMwBFbyWMQ0m8ObSS4G05d9wgIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1 NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUyNjg4ODA3YmMvYzcwZTlmZGEtNDc3NS0z ZTM1LWI5NTMtZTM3ZTRkMTM4MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGM4NTUyODEtMDc0MC00NmMxLTg0 MzItOTk1MjY4ODgwN2JjLzRjODU1MjgxLTA3NDAtNDZjMS04NDMyLTk5NTI2ODg4 MDdiYy5jcmwwHwYDVR0jBBgwFoAUmRF0X3GaRLTgVFd0DhwnE2//o4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUy Njg4ODA3YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzG00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt3nff4CiaG4lOer1V+CLWCEW4EWk36NzUIQJ9N8BYQ2n5yfdzwEg+x yxTz0NB6c72vnwaFMLAZ1kv7fXg/L626DhU+41SnpR2w02V6zhwKziM0G0ozsbos Tc26ly4shOurmHhyPeBwbOKVPw/ZLe0ExsDmvOxpVZDmC4IGEk7uKz8vun8ujhTD aU99gJ2UPeBgVTWiutojjYJaMTWzGojuYRrGNFvPafC9qlJSpbnh0uMqr9h3ZNFB rG6FTwQl1i0E+TmU+O6fAankvo51AGZNmJJ2BpMZTjG69kaKiupx+zVPhF6gLa1k DRLjKNdyMpGTSmIK6hiUnSEnI4j0Jv0= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:24 2024 by rpki-client on console-ams.rpki-client.org