$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa File: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json) Hash identifier: wRklJ2lHK3PLr0o8t2rYPu+Mn4eBh+ezzON/CKAfv70= Subject key identifier: 03:86:34:6C:24:B1:8D:03:B4:FA:28:C8:97:86:51:2D:25:C0:52:57 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F43285847DE920B85ADF70150917B34A0 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa Signing time: Wed 13 Nov 2024 20:43:40 +0000 ROA not before: Wed 13 Nov 2024 20:43:40 +0000 ROA not after: Tue 11 Feb 2025 20:43:40 +0000 asID: 8075 IP address blocks: 208.64.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:de:92:0b:85:ad:f7:01:50:91:7b:34:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Nov 13 20:43:40 2024 GMT Not After : Feb 11 20:43:40 2025 GMT Subject: CN=b26ec9aa-9b0d-418f-bbac-f59b5b98a775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:5e:bb:1e:7f:c7:7e:d5:20:66:1a:5c:5b: 4a:89:e8:1c:43:0c:f8:c0:1a:81:d2:78:5a:5e:34: ad:1f:cd:03:11:ed:46:22:47:f8:f1:13:bc:5c:ab: d0:f1:2f:84:b2:ad:2f:f5:c3:2b:4f:bb:11:91:93: f9:62:3f:86:cc:1d:92:c6:fa:7c:d8:64:10:5b:14: 84:13:d6:be:bc:a1:84:93:31:c9:f9:2f:44:c4:91: 76:40:e3:3b:08:46:77:c0:6c:2b:a8:84:82:06:db: 34:c7:f0:e1:66:83:13:bb:93:b6:a2:25:be:a0:57: 46:0f:3b:f8:60:0b:ac:2f:79:6d:d3:76:9b:70:7e: b4:71:2d:1b:69:43:10:78:14:41:bc:6b:50:5d:94: e1:7b:41:e8:fa:5e:ad:93:25:47:97:41:1f:3f:85: b3:c4:c2:9c:84:d0:f2:8d:f4:78:e8:50:5b:89:61: ff:3b:cb:78:bd:65:1b:23:26:ef:45:f3:4b:5c:76: ac:1b:26:72:fc:3d:74:f3:54:a7:0c:b0:c3:1a:2e: 29:95:21:b9:84:76:09:a9:d6:01:39:93:63:6a:3a: dc:ca:d0:54:cb:35:e9:a2:21:75:4a:00:79:c6:23: d0:06:cc:44:1b:13:08:2d:e3:42:1b:d4:39:88:2e: 41:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:34:6C:24:B1:8D:03:B4:FA:28:C8:97:86:51:2D:25:C0:52:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a7:dc:69:9a:d8:12:0b:02:7a:11:57:cf:70:cb:6d:40:34: 0b:d5:29:a9:ff:87:b2:64:1a:bf:c9:94:45:3f:ae:6c:6e:e2: 31:a8:16:cb:b4:9f:cb:6a:3c:c1:e3:36:4e:ef:6d:84:1e:66: a4:3a:91:a3:9b:f7:7c:4c:5c:64:9b:48:2a:95:e9:35:fc:7c: 97:9b:fa:cc:dc:93:18:7f:8a:26:b5:96:0c:3d:e8:8b:f2:fc: d2:13:c9:06:bf:84:3b:fa:67:d8:1f:1b:31:a2:b3:17:5d:de: bd:0f:a8:da:9b:ab:18:1e:96:11:d3:7e:03:fa:3e:b5:5a:bd: 82:fc:c4:1d:10:7b:66:62:69:1b:c4:e5:9d:b4:46:9d:61:3a: fd:23:c0:28:18:2d:ec:e3:b2:12:40:02:12:c8:39:a3:69:d4: 1b:24:20:59:6f:01:74:99:ea:95:fc:46:0d:0e:52:40:c9:4d: 40:d6:3b:21:7f:0c:a6:ea:81:06:73:99:c9:21:1a:d4:0f:2a: 60:97:dc:a3:97:5e:fd:5c:4c:00:ef:74:ba:0c:de:a1:d0:11: 00:4e:20:83:f1:dc:ea:29:95:d7:cc:a2:bb:6a:01:f7:1a:ba: de:43:87:75:17:f3:10:d1:2e:d7:51:6e:78:8f:0c:54:fb:d2: dc:f6:7a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfekguFrfcBUJF7NKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI0MTExMzIwNDM0MFoXDTI1MDIxMTIwNDM0MFowLzEtMCsGA1UEAxMk YjI2ZWM5YWEtOWIwZC00MThmLWJiYWMtZjU5YjViOThhNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAZeux5/x37VIGYaXFtKiegcQwz4wBqB0nha XjStH80DEe1GIkf48RO8XKvQ8S+Esq0v9cMrT7sRkZP5Yj+GzB2Sxvp82GQQWxSE E9a+vKGEkzHJ+S9ExJF2QOM7CEZ3wGwrqISCBts0x/DhZoMTu5O2oiW+oFdGDzv4 YAusL3lt03abcH60cS0baUMQeBRBvGtQXZThe0Ho+l6tkyVHl0EfP4WzxMKchNDy jfR46FBbiWH/O8t4vWUbIybvRfNLXHasGyZy/D1081SnDLDDGi4plSG5hHYJqdYB OZNjajrcytBUyzXpoiF1SgB5xiPQBsxEGxMILeNCG9Q5iC5BNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOGNGwksY0DtPooyJeGUS0lwFJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvMWMyZDc2OWUtYjIxMC0z ZTZiLTkwOTUtZjA2NmI5Y2IzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGn3Gma2BILAnoRV89wy21ANAvVKan/h7JkGr/JlEU/rmxu4jGoFsu0 n8tqPMHjNk7vbYQeZqQ6kaOb93xMXGSbSCqV6TX8fJeb+szckxh/iia1lgw96Ivy /NITyQa/hDv6Z9gfGzGisxdd3r0PqNqbqxgelhHTfgP6PrVavYL8xB0Qe2ZiaRvE 5Z20Rp1hOv0jwCgYLezjshJAAhLIOaNp1BskIFlvAXSZ6pX8Rg0OUkDJTUDWOyF/ DKbqgQZzmckhGtQPKmCX3KOXXv1cTADvdLoM3qHQEQBOIIPx3OopldfMortqAfca ut5Dh3UX8xDRLtdRbniPDFT70tz2egk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:28:19 2024 by rpki-client on console-fra.rpki-client.org