$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa File: 011c8cd8-281d-317c-b66f-0fe8c16e848a.roa (raw, json) Hash identifier: 3C2l9qmnBsWQIdMxXQZfPFHcH0ACUCSwT8eQlnosiDk= Subject key identifier: EF:BB:BC:F0:AA:73:7B:B9:5E:AE:DD:9D:A8:94:8B:F3:72:5B:0C:BF Certificate issuer: /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Certificate serial: 010D0C9F43285847D404920C8CF0F135B52A4680 Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 11472 IP address blocks: 208.65.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:92:0c:8c:f0:f1:35:b5:2a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=0a532c09-0f9f-49a6-b4b5-dbf5478826fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:94:bb:e7:d3:5e:0f:eb:10:eb:90:5c:37: f8:0b:13:91:bb:2b:76:ab:e9:bc:73:b6:5e:ed:3b: 6f:83:43:4d:1e:6c:9c:b7:6b:23:a8:b9:b8:15:d1: 54:40:a3:2b:8a:af:70:16:10:2b:f5:7d:a6:2f:b1: 71:4b:cc:d3:94:fa:22:30:e9:86:10:2e:bd:2e:ad: c9:13:a2:87:57:72:ae:3d:38:83:71:b4:11:4f:ec: ea:02:59:6e:95:e4:e9:18:bf:6f:22:63:f7:59:ac: 9a:d1:ab:df:9f:75:91:89:c2:f3:f6:0c:5b:8f:b3: 28:5d:16:db:10:a9:25:0b:bc:b8:29:00:3e:b3:10: 9e:5e:d2:bd:95:c9:49:16:c4:b1:7b:80:be:0f:01: a4:c3:21:d5:32:62:84:52:a7:61:81:ae:7d:0a:a8: bb:0a:26:9a:ed:5f:be:bd:85:10:54:ac:24:ef:6e: 93:15:65:03:c4:08:12:9a:85:61:c1:cd:62:a3:c9: ee:fc:37:1b:d8:1a:08:62:4b:c4:c8:f0:34:95:32: ad:3e:63:e6:6b:bb:73:53:94:11:68:69:a9:5c:37: ee:c2:40:4e:e3:66:00:33:59:f5:0b:1d:0b:4a:91: 10:a8:12:83:be:31:90:70:61:27:6c:83:f4:72:32: 0a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BB:BC:F0:AA:73:7B:B9:5E:AE:DD:9D:A8:94:8B:F3:72:5B:0C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl X509v3 Authority Key Identifier: keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer sbgp-ipAddrBlock: critical IPv4: 208.65.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:9f:45:a9:b4:e1:ab:2f:d6:55:e2:20:c1:45:d8:61:f0:56: d3:75:b9:b4:2a:c1:2f:ff:24:49:e8:df:41:66:61:ee:18:06: c9:b4:c8:18:6a:c8:53:07:4f:5e:15:b5:b9:13:f3:25:36:cb: ea:0b:53:a3:e9:c3:9c:6f:33:e3:6c:a2:81:53:03:09:ff:82: 50:e3:f4:b5:c8:f6:89:54:3d:2a:cb:2d:b4:2c:a2:13:59:b0: 15:d8:eb:b1:f5:64:fa:b9:b5:da:84:2f:0a:5c:06:cb:1a:4d: 8e:28:7a:9a:a6:80:b4:e0:32:7d:04:b9:0b:e6:d9:40:92:de: 66:4e:0c:9d:20:52:f7:79:13:dd:90:fa:88:9e:90:1b:cc:41: 94:7b:07:e5:d4:a8:ed:c0:20:42:45:6b:2b:99:15:05:30:ec: 85:fa:fe:e6:d6:7c:96:fe:f5:4d:05:8f:de:4b:ac:c3:33:2f: 9f:41:8c:c0:c9:b1:39:1e:4f:54:e0:9f:68:94:95:6f:8f:89: 1f:18:03:c3:08:f9:2a:fc:14:5c:84:d1:9d:6e:59:e5:4b:37: 4f:e0:1e:cf:53:98:3a:5f:1d:34:75:d3:ce:88:e4:96:76:d8: 0f:39:42:67:0a:8c:8b:4b:ce:75:8c:c4:e9:4a:f0:18:9f:49: 0d:cc:43:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJIMjPDxNbUqRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy NTNiMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk MGE1MzJjMDktMGY5Zi00OWE2LWI0YjUtZGJmNTQ3ODgyNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlKUu+fTXg/rEOuQXDf4CxORuyt2q+m8c7Ze 7Ttvg0NNHmyct2sjqLm4FdFUQKMriq9wFhAr9X2mL7FxS8zTlPoiMOmGEC69Lq3J E6KHV3KuPTiDcbQRT+zqAlluleTpGL9vImP3Waya0avfn3WRicLz9gxbj7MoXRbb EKklC7y4KQA+sxCeXtK9lclJFsSxe4C+DwGkwyHVMmKEUqdhga59Cqi7Ciaa7V++ vYUQVKwk726TFWUDxAgSmoVhwc1io8nu/Dcb2BoIYkvEyPA0lTKtPmPma7tzU5QR aGmpXDfuwkBO42YAM1n1Cx0LSpEQqBKDvjGQcGEnbIP0cjIKewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+7vPCqc3u5Xq7dnaiUi/NyWwy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0 YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvMDExYzhjZDgtMjgxZC0z MTdjLWI2NmYtMGZlOGMxNmU4NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1 YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1 YzU3MTI1M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyfRam04asv1lXiIMFF2GHwVtN1ubQqwS//JEno30FmYe4YBsm0yBhq yFMHT14VtbkT8yU2y+oLU6Ppw5xvM+NsooFTAwn/glDj9LXI9olUPSrLLbQsohNZ sBXY67H1ZPq5tdqELwpcBssaTY4oepqmgLTgMn0EuQvm2UCS3mZODJ0gUvd5E92Q +oiekBvMQZR7B+XUqO3AIEJFayuZFQUw7IX6/ubWfJb+9U0Fj95LrMMzL59BjMDJ sTkeT1Tgn2iUlW+PiR8YA8MI+Sr8FFyE0Z1uWeVLN0/gHs9TmDpfHTR1086I5JZ2 2A85QmcKjItLznWMxOlK8BifSQ3MQ3k= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:45 2024 by rpki-client on console-ams.rpki-client.org