$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa File: 18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa (raw, json) Hash identifier: KBuTy5OKw6U8bM764PTTzNEqYv3tH48mFLnnWTd3fgQ= Subject key identifier: 9B:5B:CE:CE:65:B9:4C:62:58:0C:0C:92:E2:B8:29:9E:47:5C:10:70 Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F432858474F4B745197CEA6DD204DBAA0 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 20398 IP address blocks: 167.206.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:74:51:97:ce:a6:dd:20:4d:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=4148ea29-277d-4a02-90a1-904e1950d97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:06:78:cf:fa:1f:f1:8a:0e:3e:24:af:de:0d: fd:92:08:fd:15:6e:41:0e:49:7b:97:6d:8c:43:0c: 7d:05:cf:61:f9:41:0a:7d:27:d1:92:97:4f:73:f6: 64:02:78:f6:23:7d:1a:fb:bc:62:54:3d:8f:61:34: 1e:90:aa:51:97:44:0b:dd:09:87:24:08:bc:63:08: 43:ef:7a:a8:1d:75:45:22:be:b3:57:86:3e:24:2a: 30:27:5e:49:99:ad:b4:18:c6:50:a5:8d:7a:92:62: 49:43:9b:5f:21:99:d8:a5:f6:2d:c8:04:4d:57:5e: ff:00:e0:7e:4d:aa:99:4b:26:4c:69:81:52:5a:7d: ab:99:e2:c6:a0:a4:59:49:be:e6:b4:0f:f9:2c:f7: a1:0e:e1:84:89:eb:ae:90:98:f1:fb:19:f1:78:5e: d0:89:7a:7f:bc:de:d6:87:ba:ed:01:81:dd:fd:b5: 8c:1b:0d:a1:61:ac:7f:3a:79:d8:f3:01:76:c5:57: 18:8f:aa:82:14:42:56:58:2c:0a:c2:74:b6:ed:44: fe:96:83:11:a8:3e:c2:4f:c0:3d:df:d4:d1:51:2a: 3b:88:06:97:9a:a2:95:bb:6b:38:13:49:03:42:95: 3b:9a:6c:d5:a2:10:e0:6d:50:af:1e:da:b3:ec:af: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5B:CE:CE:65:B9:4C:62:58:0C:0C:92:E2:B8:29:9E:47:5C:10:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/18ab42b3-a69e-3f0c-a071-7923bd39e60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:64:2e:8e:ce:ef:d7:e7:61:78:c0:27:67:5b:21:51:48:30: 88:18:c9:7a:24:15:aa:0b:4d:53:92:22:13:78:e9:e7:c8:2e: 52:c3:bb:aa:ef:df:97:59:bd:d0:b9:16:14:44:e6:a5:ef:cf: b8:aa:25:a5:31:a5:7f:0a:0c:f8:b0:5a:a5:9d:5f:dd:76:14: c1:db:52:98:97:bc:f5:8b:28:38:09:f7:ec:c7:88:cc:21:cc: eb:f5:a3:ca:cc:4a:fa:93:a2:a9:5a:eb:ce:0c:d2:0e:89:fd: ba:e5:e4:7b:ca:a5:5c:d6:20:46:01:e0:00:35:46:f7:e9:a7: fc:93:6b:fd:ea:2f:41:84:8e:05:a5:9c:51:a5:bc:7e:ba:65: fd:0c:bb:2a:16:50:72:10:7f:43:f1:e1:87:f1:d3:c3:e2:4b: 59:8d:b2:c2:03:d6:db:17:17:aa:7e:d3:3a:70:88:90:fa:44: 86:5d:8f:eb:61:30:e5:c8:22:e7:6e:3a:69:48:be:36:0e:76: d7:70:c8:a0:f4:b2:46:35:18:39:4a:bc:f6:8a:e7:4f:a4:1d: 32:73:80:0d:09:d0:b0:e5:34:63:44:0e:82:16:9e:47:20:2a: bf:34:a3:09:51:e3:75:e3:b9:37:28:a5:c0:0e:e8:b4:a1:d3: 18:db:90:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS3RRl86m3SBNuqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NDE0OGVhMjktMjc3ZC00YTAyLTkwYTEtOTA0ZTE5NTBkOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gZ4z/of8YoOPiSv3g39kgj9FW5BDkl7l22M Qwx9Bc9h+UEKfSfRkpdPc/ZkAnj2I30a+7xiVD2PYTQekKpRl0QL3QmHJAi8YwhD 73qoHXVFIr6zV4Y+JCowJ15Jma20GMZQpY16kmJJQ5tfIZnYpfYtyARNV17/AOB+ TaqZSyZMaYFSWn2rmeLGoKRZSb7mtA/5LPehDuGEieuukJjx+xnxeF7QiXp/vN7W h7rtAYHd/bWMGw2hYax/OnnY8wF2xVcYj6qCFEJWWCwKwnS27UT+loMRqD7CT8A9 39TRUSo7iAaXmqKVu2s4E0kDQpU7mmzVohDgbVCvHtqz7K+XpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtbzs5luUxiWAwMkuK4KZ5HXBBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMThhYjQyYjMtYTY5ZS0z ZjBjLWEwNzEtNzkyM2JkMzllNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp85WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFkLo7O79fnYXjAJ2dbIVFIMIgYyXokFaoLTVOSIhN46efILlLDu6rv 35dZvdC5FhRE5qXvz7iqJaUxpX8KDPiwWqWdX912FMHbUpiXvPWLKDgJ9+zHiMwh zOv1o8rMSvqToqla684M0g6J/brl5HvKpVzWIEYB4AA1Rvfpp/yTa/3qL0GEjgWl nFGlvH66Zf0MuyoWUHIQf0Px4Yfx08PiS1mNssID1tsXF6p+0zpwiJD6RIZdj+th MOXIIuduOmlIvjYOdtdwyKD0skY1GDlKvPaK50+kHTJzgA0J0LDlNGNEDoIWnkcg Kr80owlR43XjuTcopcAO6LSh0xjbkMI= -----END CERTIFICATE-----Generated at Fri Nov 22 08:07:06 2024 by rpki-client on console-ams.rpki-client.org