$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa File: 409dcb1b-8e11-32f3-b345-ba1e33a44598.roa (raw, json) Hash identifier: OmPJwuoUjLth2lVsR0yWn60D1XTMvI91NFTOdM66ea8= Subject key identifier: 6B:72:F4:1A:0A:6F:C6:36:09:10:9E:E6:F2:67:41:58:F0:E0:2E:62 Certificate issuer: /CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Certificate serial: 010D0C9F4328584746EB56F7F76C37DF25321A00 Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa Signing time: Fri 20 Sep 2024 13:00:42 +0000 ROA not before: Fri 20 Sep 2024 13:00:42 +0000 ROA not after: Thu 19 Dec 2024 14:00:42 +0000 asID: 32746 IP address blocks: 204.8.88.0/22 maxlen: 24 208.86.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:46:eb:56:f7:f7:6c:37:df:25:32:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Validity Not Before: Sep 20 13:00:42 2024 GMT Not After : Dec 19 14:00:42 2024 GMT Subject: CN=a1fa2f11-f7d4-4f2c-9bf1-4eba44d15258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:e3:6f:3d:49:2e:12:d1:bc:92:8c:cc:36: 7d:1f:51:5a:02:b4:23:3d:b8:0f:a9:a9:2b:80:b3: 14:99:89:c7:5b:a9:5e:35:e7:4a:b4:37:10:e5:aa: e3:73:55:c1:bd:16:5e:60:c4:ac:04:16:78:4f:6d: 6f:7a:df:2f:e0:67:05:46:45:98:f3:86:d5:84:7c: 26:2e:b2:78:6a:6c:ea:08:67:19:90:03:0b:c0:06: ce:3f:2c:08:35:25:ec:be:32:44:05:75:27:33:17: fe:d1:c4:bc:cd:82:50:b4:a0:4b:3f:06:48:ac:57: bb:3c:95:6d:1d:74:92:ff:6e:b6:00:84:69:81:97: 43:ea:0c:b6:07:c5:fd:26:2c:ad:bb:b4:45:1a:eb: 50:e6:3c:fc:73:d8:39:8e:b1:f8:03:df:39:26:7e: 05:2e:71:2e:f5:ee:ed:a6:3a:d6:ca:a1:3a:bd:a4: 3d:3f:64:57:c1:46:bd:b0:ae:94:35:76:38:00:33: 24:df:3a:99:c0:8e:ef:bd:24:0b:02:0b:5a:b6:b8: 38:3e:90:3b:34:78:83:2b:57:36:de:1e:60:42:9a: 38:4f:d8:25:6c:3f:b5:f0:12:bf:43:c7:17:1a:87: 6a:7e:0b:11:76:4e:1c:2a:5a:4b:3f:0d:19:ad:b4: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:F4:1A:0A:6F:C6:36:09:10:9E:E6:F2:67:41:58:F0:E0:2E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl X509v3 Authority Key Identifier: keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer sbgp-ipAddrBlock: critical IPv4: 204.8.88.0/22 208.86.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6f:03:6f:c3:e7:12:8f:93:a6:f1:64:b9:00:88:a4:fd:ac: 6b:39:60:76:64:ca:41:e6:d0:67:e1:e1:bf:d4:d3:e5:c4:55: ff:0f:4f:12:51:96:ed:a6:87:4e:82:00:f3:0f:6c:83:ba:c4: 24:cf:03:d8:69:02:34:c0:65:0b:33:32:ef:c8:3d:b1:ec:21: d6:50:a8:dc:69:b6:c0:ae:f5:38:0b:85:71:3e:53:35:0e:17: 89:07:a4:ea:be:0a:0b:e5:a6:38:b6:7c:2b:ee:58:1e:71:1c: 87:f8:f4:4f:83:58:ee:a7:a3:00:0e:68:e4:44:98:78:f1:d1: 75:14:12:36:16:da:58:51:55:0a:c6:29:3a:ea:1e:de:d1:08: bc:34:77:2e:50:a7:4c:d0:eb:6c:fd:43:c4:aa:f0:57:94:f7: df:5a:4b:97:1f:d2:31:b5:6c:fe:a3:6a:74:ba:32:6a:5c:86: ad:91:0c:e4:64:40:d2:75:b4:b7:c4:61:95:fe:97:7f:ce:df: 30:ea:89:62:2d:3c:f5:c4:d0:8c:6f:b6:66:ea:92:26:b2:37: 9d:e6:78:32:9e:85:b9:d7:c2:09:30:e4:ac:68:3b:09:7f:38: 13:7d:fe:65:56:1b:d0:f2:46:64:bf:35:75:3f:a8:b5:dc:88: 35:6a:e0:e7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdG61b392w33yUyGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNm ODUwMB4XDTI0MDkyMDEzMDA0MloXDTI0MTIxOTE0MDA0MlowLzEtMCsGA1UEAxMk YTFmYTJmMTEtZjdkNC00ZjJjLTliZjEtNGViYTQ0ZDE1MjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR3jbz1JLhLRvJKMzDZ9H1FaArQjPbgPqakr gLMUmYnHW6leNedKtDcQ5arjc1XBvRZeYMSsBBZ4T21vet8v4GcFRkWY84bVhHwm LrJ4amzqCGcZkAMLwAbOPywINSXsvjJEBXUnMxf+0cS8zYJQtKBLPwZIrFe7PJVt HXSS/262AIRpgZdD6gy2B8X9Jiytu7RFGutQ5jz8c9g5jrH4A985Jn4FLnEu9e7t pjrWyqE6vaQ9P2RXwUa9sK6UNXY4ADMk3zqZwI7vvSQLAgtatrg4PpA7NHiDK1c2 3h5gQpo4T9glbD+18BK/Q8cXGodqfgsRdk4cKlpLPw0ZrbTKVQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGty9BoKb8Y2CRCe5vJnQVjw4C5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kM2Jm OTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvNDA5ZGNiMWItOGUxMS0z MmYzLWIzNDUtYmExZTMzYTQ0NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDNiZjkyM2QtNmM5ZC00NzEzLTg4 N2YtMWYzMDA3NWNmODUwL2QzYmY5MjNkLTZjOWQtNDcxMy04ODdmLTFmMzAwNzVj Zjg1MC5jcmwwHwYDVR0jBBgwFoAUW36UafuPFj/MySVSVEX7bbvaxbswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMw MDc1Y2Y4NTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAhYAwQC 0FYoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD1vA2/D5xKPk6bxZLkAiKT9rGs5YHZkykHm0Gfh4b/U0+XE Vf8PTxJRlu2mh06CAPMPbIO6xCTPA9hpAjTAZQszMu/IPbHsIdZQqNxptsCu9TgL hXE+UzUOF4kHpOq+Cgvlpji2fCvuWB5xHIf49E+DWO6nowAOaOREmHjx0XUUEjYW 2lhRVQrGKTrqHt7RCLw0dy5Qp0zQ62z9Q8Sq8FeU999aS5cf0jG1bP6janS6Mmpc hq2RDORkQNJ1tLfEYZX+l3/O3zDqiWItPPXE0IxvtmbqkiayN53meDKehbnXwgkw 5KxoOwl/OBN9/mVWG9DyRmS/NXU/qLXciDVq4Oc= -----END CERTIFICATE-----Generated at Mon Nov 25 21:42:34 2024 by rpki-client on console-ams.rpki-client.org