$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json) Hash identifier: cct/G8x42tgu9PSm/g0o9WrEyVSveBHVOscQl64VQB4= Subject key identifier: 8D:F7:B9:78:42:5B:32:6C:88:8D:06:8C:0B:6C:24:86:5A:19:8E:67 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F43285847BEF6D35B5BA9535F04363300 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 14618 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d3:5b:5b:a9:53:5f:04:36:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=cf40640c-da1c-4c10-9f08-f2e51374360f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:54:40:e4:59:5e:86:83:14:43:21:3a:ff: 18:97:95:44:a7:81:84:91:95:2a:20:92:cc:2f:e2: 30:ff:21:97:dd:ce:bb:16:5e:ba:fd:b7:87:87:20: 99:d1:b0:35:d3:7e:c9:25:0f:19:f5:b6:a2:b8:71: 99:34:bd:63:4d:8b:56:b9:05:54:48:00:63:6d:1a: db:d0:73:80:d2:da:51:38:8d:ee:51:a9:af:51:89: b4:67:a4:de:b8:35:f9:4b:1a:59:fa:26:2e:8c:1c: 84:12:d2:88:c6:25:54:8e:dd:7a:a9:3d:42:6e:d2: b6:07:5b:66:d9:79:0f:ca:10:15:01:71:71:b3:b9: 6a:b2:22:cd:3d:cb:5e:ed:50:59:1d:d7:31:16:0e: d7:7f:d2:f9:cd:58:03:d1:16:79:c9:cf:47:61:ba: 05:9b:f6:1d:48:59:5e:5c:b2:51:b9:71:32:2d:9c: 40:43:7f:30:f9:62:8c:4f:55:46:e4:16:b3:fa:79: f5:ac:44:01:63:1d:2a:c0:dc:95:c9:29:24:96:bd: f9:c6:ab:63:33:8a:07:25:8d:21:96:8f:13:b2:6b: 77:dd:f5:aa:1b:d4:db:c1:55:2c:d7:88:30:d6:27: c3:0d:72:38:7a:11:a9:86:10:c5:46:d1:1e:30:d4: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F7:B9:78:42:5B:32:6C:88:8D:06:8C:0B:6C:24:86:5A:19:8E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:78:40:fb:f5:7b:02:12:c7:8c:54:50:d1:fb:b3:cd:80:c5: 56:34:55:9a:0b:bf:8a:aa:e8:6c:e8:ec:1f:8b:7d:d4:10:0e: 10:6b:bd:ad:6e:e9:fb:b0:47:c6:04:de:b0:da:b2:16:43:06: a9:9b:63:64:5f:87:62:7a:ca:65:d5:d4:04:99:3c:8c:06:04: ee:e9:d9:ec:78:3a:5c:34:d6:c5:10:ea:15:62:df:3d:24:b6: 3a:2c:74:2f:b4:4a:73:8d:72:c5:af:9e:28:6e:01:d0:e9:eb: a6:b6:10:f6:ae:db:da:ae:4f:f0:98:9a:2b:70:89:79:b5:d7: b8:1a:d9:a7:0f:8d:23:f4:76:e8:e4:78:01:ce:bd:91:f0:75: c1:56:fc:9c:43:46:e5:e4:b2:d5:67:ae:3d:77:14:b3:fa:3f: e8:52:9b:56:9d:25:40:e6:21:e1:99:66:9c:fd:c7:62:a0:e4: 9b:ac:bf:a4:c8:d7:9d:ea:51:a2:f7:3b:62:47:5c:56:8b:ad: 35:ba:e4:28:01:db:4e:0d:0d:43:af:27:0f:61:6c:a5:fd:a9: 60:f1:76:98:22:1c:5b:91:e0:ad:f1:72:99:2d:2f:00:35:48: 52:04:33:eb:5e:3c:cd:a7:f2:a6:da:0f:69:27:b1:bf:db:a3: cf:fd:94:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tNbW6lTXwQ2MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk Y2Y0MDY0MGMtZGExYy00YzEwLTlmMDgtZjJlNTEzNzQzNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+dUQORZXoaDFEMhOv8Yl5VEp4GEkZUqIJLM L+Iw/yGX3c67Fl66/beHhyCZ0bA1037JJQ8Z9baiuHGZNL1jTYtWuQVUSABjbRrb 0HOA0tpROI3uUamvUYm0Z6TeuDX5SxpZ+iYujByEEtKIxiVUjt16qT1CbtK2B1tm 2XkPyhAVAXFxs7lqsiLNPcte7VBZHdcxFg7Xf9L5zVgD0RZ5yc9HYboFm/YdSFle XLJRuXEyLZxAQ38w+WKMT1VG5Baz+nn1rEQBYx0qwNyVySkklr35xqtjM4oHJY0h lo8Tsmt33fWqG9TbwVUs14gw1ifDDXI4ehGphhDFRtEeMNRZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI33uXhCWzJsiI0GjAtsJIZaGY5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNTAzZTNhZWEtN2ZmNy0z ZTM3LTk2MTEtMmZhNjVlZTBkNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ4QPv1ewISx4xUUNH7s82AxVY0VZoLv4qq6Gzo7B+LfdQQDhBrva1u 6fuwR8YE3rDashZDBqmbY2Rfh2J6ymXV1ASZPIwGBO7p2ex4Olw01sUQ6hVi3z0k tjosdC+0SnONcsWvnihuAdDp66a2EPau29quT/CYmitwiXm117ga2acPjSP0dujk eAHOvZHwdcFW/JxDRuXkstVnrj13FLP6P+hSm1adJUDmIeGZZpz9x2Kg5Jusv6TI 153qUaL3O2JHXFaLrTW65CgB204NDUOvJw9hbKX9qWDxdpgiHFuR4K3xcpktLwA1 SFIEM+tePM2n8qbaD2knsb/bo8/9lHg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:08 2024 by rpki-client on console-ams.rpki-client.org