$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa File: c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (raw, json) Hash identifier: 6dY83SmS/9O2BtCr0KjKx8iBBpPg9UFeu0EYhMrz0eo= Subject key identifier: A5:A9:EC:47:7B:F5:49:67:CC:4E:C4:DC:8D:07:B0:70:F9:1E:FD:07 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F432858472C65E436E6B57395D09EEE00 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 205627 IP address blocks: 170.2.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:e4:36:e6:b5:73:95:d0:9e:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=28d6040d-43f9-4b6b-aff3-23b31e17e04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:ef:29:fa:e9:48:31:55:eb:21:96:f6:2a: 01:41:4d:09:72:52:e7:b4:b6:ee:88:1a:8d:8b:7a: 8c:3d:15:24:ed:6d:09:eb:12:5a:3a:c1:77:39:bf: c2:b5:46:f5:da:05:19:26:63:ee:f0:22:63:2d:fb: ed:86:be:af:49:95:ca:8e:28:a0:6a:df:e5:52:c7: 98:4e:28:f1:51:6a:e2:ef:5b:d0:7a:b1:55:70:a6: 3a:8c:d8:1e:8b:e8:9b:de:70:b0:2a:9b:56:3d:9c: af:a6:60:6e:62:b5:ae:c8:65:b6:00:f3:f8:e5:1a: 5b:1b:c1:0e:fa:fc:7b:e3:ed:ae:f6:bd:57:ed:84: da:3c:f9:32:84:ad:38:4a:d0:8b:a7:e6:2a:85:d6: 74:33:2c:b0:d0:b7:ab:98:2f:20:76:c8:f9:e2:48: 14:e1:a2:3a:14:50:0e:f5:18:d6:4b:49:c2:aa:0e: ed:ff:88:7c:4d:ef:99:e8:63:af:de:ff:dc:c0:d7: a6:74:0b:0b:ea:11:65:b6:4f:7b:ba:9e:e4:df:0f: 02:93:84:6e:96:25:8c:bf:f5:a4:e9:77:9e:cb:ca: 1b:f8:b8:7a:19:1e:fe:49:7c:b3:a7:af:20:5b:bf: 30:9e:2c:2c:58:a7:61:6e:6a:8b:8a:9e:ad:41:31: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A9:EC:47:7B:F5:49:67:CC:4E:C4:DC:8D:07:B0:70:F9:1E:FD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:68:ac:bc:24:c5:10:0d:b3:2d:ba:a4:30:0e:98:19:fb:30: 2c:5b:16:51:2b:2f:fe:f9:f1:20:9c:42:73:1d:ec:f2:15:36: e0:e6:18:e7:ec:95:31:b6:67:f9:5e:ab:ee:d1:96:f7:bc:ba: 72:6f:32:fc:c7:76:5d:fb:d3:79:93:94:ec:8a:61:bb:73:68: 8a:e2:94:30:5e:c5:9a:05:81:92:30:30:da:90:de:93:5c:07: c9:c0:81:f4:c3:48:1a:ff:ec:ad:69:a9:7d:ab:d2:a4:64:a8: 82:5b:59:8e:2c:e0:a0:f3:0a:09:35:65:1e:e7:eb:50:88:85: bd:40:10:45:15:08:e5:b7:b5:79:78:7c:34:f4:90:19:3c:6b: cb:ce:ee:7d:29:62:ea:18:a7:3e:9d:b4:87:9a:91:1a:88:44: 52:3e:34:16:b8:05:db:30:25:d2:5f:e1:03:d3:3a:66:f9:9b: ac:d9:48:6c:a0:67:9c:25:5b:7e:2d:da:d1:b7:70:b1:80:b3: 57:c6:c4:8f:c7:27:dc:1f:e5:03:ac:a6:5e:aa:cb:ee:d7:87: d8:6e:b3:99:3e:a2:5b:40:86:97:62:85:99:6c:2b:11:e2:b9: f5:74:91:7b:72:5f:a7:c2:c6:eb:6c:ce:73:00:09:f4:87:dd: 10:49:ce:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZeQ25rVzldCe7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MjhkNjA0MGQtNDNmOS00YjZiLWFmZjMtMjNiMzFlMTdlMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklLvKfrpSDFV6yGW9ioBQU0JclLntLbuiBqN i3qMPRUk7W0J6xJaOsF3Ob/CtUb12gUZJmPu8CJjLfvthr6vSZXKjiigat/lUseY TijxUWri71vQerFVcKY6jNgei+ib3nCwKptWPZyvpmBuYrWuyGW2APP45RpbG8EO +vx74+2u9r1X7YTaPPkyhK04StCLp+YqhdZ0Myyw0LermC8gdsj54kgU4aI6FFAO 9RjWS0nCqg7t/4h8Te+Z6GOv3v/cwNemdAsL6hFltk97up7k3w8Ck4RuliWMv/Wk 6Xeey8ob+Lh6GR7+SXyzp68gW78wniwsWKdhbmqLip6tQTGRSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWp7Ed79UlnzE7E3I0HsHD5Hv0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYzg2ZmNiOTItZTJhYy0z MGYzLWIzZjktNmViZmU4NmRkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqgL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRorLwkxRANsy26pDAOmBn7MCxbFlErL/758SCcQnMd7PIVNuDmGOfs lTG2Z/leq+7Rlve8unJvMvzHdl3703mTlOyKYbtzaIrilDBexZoFgZIwMNqQ3pNc B8nAgfTDSBr/7K1pqX2r0qRkqIJbWY4s4KDzCgk1ZR7n61CIhb1AEEUVCOW3tXl4 fDT0kBk8a8vO7n0pYuoYpz6dtIeakRqIRFI+NBa4BdswJdJf4QPTOmb5m6zZSGyg Z5wlW34t2tG3cLGAs1fGxI/HJ9wf5QOspl6qy+7Xh9hus5k+oltAhpdihZlsKxHi ufV0kXtyX6fCxutsznMACfSH3RBJzl0= -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:54 2024 by rpki-client on console-ams.rpki-client.org