$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa File: d8d9475d-3273-347c-bebb-562c1777f770.roa (raw, json) Hash identifier: PxXz+AilLm1xtG/cJQKmBDqrxOWbW4BgrY3Ros7e1o8= Subject key identifier: 42:7B:40:7F:13:41:4C:9E:FD:0D:4F:F4:72:7B:64:AF:E3:B5:53:02 Certificate issuer: /CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Certificate serial: 010D0C9F432858471E705F2F38935C8020107DC0 Authority key identifier: 87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa Signing time: Fri 06 Sep 2024 01:00:31 +0000 ROA not before: Fri 06 Sep 2024 01:00:31 +0000 ROA not after: Thu 05 Dec 2024 02:00:31 +0000 asID: 6939 IP address blocks: 208.65.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1e:70:5f:2f:38:93:5c:80:20:10:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Validity Not Before: Sep 6 01:00:31 2024 GMT Not After : Dec 5 02:00:31 2024 GMT Subject: CN=897cd236-21fa-4b9c-911f-5c6423711148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:4c:af:6b:4d:d4:6f:47:03:8f:1a:00:8f: 32:2f:c2:df:25:fb:a7:67:f5:ed:69:b8:13:d9:2a: 9d:10:ac:78:88:a8:76:5b:84:f7:74:bb:57:35:4f: 77:fa:57:24:8d:56:24:01:d7:fc:f9:26:70:d6:4b: 53:f2:ce:3f:99:19:0a:4f:e5:d4:6c:bf:ab:d5:74: 3f:d6:e1:50:cb:a7:09:51:49:3d:2d:b8:63:31:78: 7f:81:78:6e:16:8d:1f:4d:c1:a4:7b:9b:af:af:6e: 0b:31:76:a9:b3:bf:ef:18:cb:1c:61:8e:70:4b:3b: ca:5e:d0:2b:2e:78:7f:a8:96:37:f0:fd:be:8f:4f: a8:ba:60:8a:16:41:49:6e:ba:40:75:80:ca:22:0d: d7:0e:26:62:a3:7c:f6:99:d3:f1:5b:15:70:af:ee: 4c:ab:50:45:df:84:29:4b:ac:34:26:77:37:36:31: b9:48:fa:2e:3c:2e:64:e7:f3:a1:64:d3:e8:0f:1c: 3a:8a:4b:cc:2e:5c:b5:65:52:56:14:fc:18:8c:cb: d6:50:63:99:df:a9:d2:b3:b7:fa:e3:b0:f9:b7:a7: 0e:5b:22:b3:e6:a8:5c:64:c3:2c:46:9b:92:c3:18: 56:47:00:94:ee:e5:3f:33:f2:81:ca:2f:26:19:2c: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7B:40:7F:13:41:4C:9E:FD:0D:4F:F4:72:7B:64:AF:E3:B5:53:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl X509v3 Authority Key Identifier: keyid:87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer sbgp-ipAddrBlock: critical IPv4: 208.65.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1f:dd:c7:12:f7:9d:80:86:f8:74:4e:68:86:5d:a8:1a:42: 00:c3:b8:a3:ea:6d:68:62:03:c2:5f:e9:c0:b1:84:26:c9:3e: e9:29:1d:6e:1f:5d:f2:98:92:00:a4:ff:d8:61:aa:a8:8e:70: 3b:d4:9d:56:8f:69:07:7a:4f:52:88:19:e0:c7:7c:4f:c6:f1: d7:7a:5c:1e:36:98:07:65:2c:44:aa:55:b4:a6:40:e8:a6:88: 2f:e1:4d:b0:05:65:b0:b0:a3:20:55:71:57:22:cb:84:0e:f0: 67:73:2f:b9:be:c7:aa:36:d7:0d:f0:9f:27:07:9f:a5:54:58: ed:d3:04:ca:ca:c9:fd:ae:32:03:d7:06:5d:5e:19:31:29:2c: fa:1f:71:d1:a6:bb:22:4a:07:ee:99:d4:40:7c:20:6c:a2:23: bb:2a:c2:06:6f:73:3a:76:ae:18:01:df:bc:1c:7d:cb:18:4e: be:58:6d:9a:19:b9:a3:17:26:46:59:2a:c0:c1:7e:d7:41:bf: 40:e6:44:e6:38:2b:71:78:01:ac:61:7f:6d:f4:43:5a:dd:1a: 28:d3:f2:61:79:5a:14:f3:4e:3a:0b:ad:4d:c5:7b:98:a3:7a: c7:79:53:77:7c:7c:f9:04:ec:f6:6a:7b:44:f1:4a:ff:20:8e: 39:b3:4b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecF8vOJNcgCAQfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiNzA0NWQtMmQ1Zi00YzU2LWJmYTQtZTM1Zjc0NWE2 MWY4MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk ODk3Y2QyMzYtMjFmYS00YjljLTkxMWYtNWM2NDIzNzExMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7lMr2tN1G9HA48aAI8yL8LfJfunZ/XtabgT 2SqdEKx4iKh2W4T3dLtXNU93+lckjVYkAdf8+SZw1ktT8s4/mRkKT+XUbL+r1XQ/ 1uFQy6cJUUk9LbhjMXh/gXhuFo0fTcGke5uvr24LMXaps7/vGMscYY5wSzvKXtAr Lnh/qJY38P2+j0+oumCKFkFJbrpAdYDKIg3XDiZio3z2mdPxWxVwr+5Mq1BF34Qp S6w0Jnc3NjG5SPouPC5k5/OhZNPoDxw6ikvMLly1ZVJWFPwYjMvWUGOZ36nSs7f6 47D5t6cOWyKz5qhcZMMsRpuSwxhWRwCU7uU/M/KByi8mGSw+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ7QH8TQUye/Q1P9HJ7ZK/jtVMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3 MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVmNzQ1YTYxZjgvZDhkOTQ3NWQtMzI3My0z NDdjLWJlYmItNTYyYzE3NzdmNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2ZiNzA0NWQtMmQ1Zi00YzU2LWJm YTQtZTM1Zjc0NWE2MWY4L2NmYjcwNDVkLTJkNWYtNGM1Ni1iZmE0LWUzNWY3NDVh NjFmOC5jcmwwHwYDVR0jBBgwFoAUhwj6zBq9YZAPQRQZOmoB/dpea44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVm NzQ1YTYxZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0f3ccS952Ahvh0TmiGXagaQgDDuKPqbWhiA8Jf6cCxhCbJPukpHW4f XfKYkgCk/9hhqqiOcDvUnVaPaQd6T1KIGeDHfE/G8dd6XB42mAdlLESqVbSmQOim iC/hTbAFZbCwoyBVcVciy4QO8GdzL7m+x6o21w3wnycHn6VUWO3TBMrKyf2uMgPX Bl1eGTEpLPofcdGmuyJKB+6Z1EB8IGyiI7sqwgZvczp2rhgB37wcfcsYTr5YbZoZ uaMXJkZZKsDBftdBv0DmROY4K3F4Aaxhf230Q1rdGijT8mF5WhTzTjoLrU3Fe5ij esd5U3d8fPkE7PZqe0TxSv8gjjmzS2Y= -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org