$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa File: 0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa (raw, json) Hash identifier: iz+wZHvGOWL1QAI2ghv5zkcAJlY+FWSGNQnL5Ar4/IY= Subject key identifier: B9:1D:F5:DA:5D:FB:F4:7E:EC:7B:34:3C:32:C7:91:0D:1B:E9:FE:20 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584765A0F308E2DBA40A69191FE0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 13576 IP address blocks: 208.53.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:f3:08:e2:db:a4:0a:69:19:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=4d5a440c-c6a4-41d2-8588-745b5ea842e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:69:06:be:4a:42:92:f6:cf:61:db:5d:92: 5f:af:6a:ec:40:36:61:ba:91:a6:5a:a4:6d:21:65: 24:9b:7f:21:9a:bc:45:57:07:07:34:25:c7:c4:d7: 12:1f:1c:4f:58:74:ca:63:7e:73:20:f0:75:3d:3e: 4c:30:af:ad:41:7b:09:ef:8e:e0:b0:9a:d7:84:35: 38:48:73:b8:a4:03:e6:db:56:2c:8a:cc:34:37:19: 2e:de:0d:a4:bb:d0:f9:d5:10:f8:b8:a7:df:ec:f3: 6c:95:26:8e:0f:a1:94:33:f0:fd:37:d3:dc:a8:61: dc:52:ce:dd:5e:c9:53:4a:b6:62:cf:b3:0d:75:d5: bd:cb:bc:1e:10:d1:b3:a0:3e:0b:75:25:da:e7:1c: fd:4a:62:fc:14:77:b3:82:9f:64:6d:6b:3e:eb:48: 82:39:41:ba:1b:08:c8:29:fc:dd:76:8a:5e:40:79: 28:8c:06:1b:8f:f0:28:e0:fd:c5:de:7c:b1:65:6f: 29:7e:c8:60:7a:67:d5:5d:98:52:8c:75:e0:95:ae: 6c:d8:62:3e:d6:d2:e7:ae:3e:09:fa:58:58:6e:df: ba:95:d9:10:52:28:43:1f:6f:b3:36:d8:04:1f:b3: 2c:e4:f9:a1:c2:42:74:7b:9e:98:2b:2c:65:d4:08: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:F5:DA:5D:FB:F4:7E:EC:7B:34:3C:32:C7:91:0D:1B:E9:FE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b086a3b-20d0-3e15-af4c-f69eddcfe886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:43:b1:1e:b7:fa:ab:ff:e6:c4:65:d9:14:d1:9e:74:b5:6d: 0e:18:3f:86:de:c5:dd:34:46:9e:72:0f:96:3f:dd:41:51:92: fe:21:94:75:54:c2:b5:0d:5b:1a:02:44:53:36:da:03:b6:eb: 84:5b:6b:f1:79:0e:6c:a8:53:08:fe:80:ab:e2:58:e5:5f:0a: cd:13:10:dd:9e:4e:ac:99:05:89:20:58:7d:45:c9:b3:d1:71: 68:55:3b:4d:57:bf:dd:31:bc:42:d1:67:aa:b1:3a:b2:f6:99: 16:6b:7c:4b:bd:04:03:93:5a:f7:d0:33:24:00:fa:f4:00:9a: 69:b7:8e:62:ff:cd:a1:cd:72:36:69:bc:a2:f4:b0:e4:5f:a3: 3a:5c:8d:5e:70:ce:ba:1f:c5:c6:70:bf:5e:35:67:63:5b:84: 6c:f4:08:64:84:1d:88:cd:57:df:b5:ae:dc:33:f3:bb:ce:c4: 2e:e4:ae:3c:4b:b2:ae:1b:90:bf:a6:37:3f:a2:bf:7c:c5:16: 49:cc:b8:21:42:f1:92:8c:9c:b9:5d:d5:10:6a:45:e1:4d:28: e7:28:26:e9:3b:7c:3a:c9:c0:91:c5:22:62:71:60:24:61:37: b5:44:3f:fe:b5:2c:ca:0a:ab:93:d8:ef:c2:01:15:81:3f:a0: 9b:59:4f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPMI4tukCmkZH+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk NGQ1YTQ0MGMtYzZhNC00MWQyLTg1ODgtNzQ1YjVlYTg0MmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6RpBr5KQpL2z2HbXZJfr2rsQDZhupGmWqRt IWUkm38hmrxFVwcHNCXHxNcSHxxPWHTKY35zIPB1PT5MMK+tQXsJ747gsJrXhDU4 SHO4pAPm21Ysisw0Nxku3g2ku9D51RD4uKff7PNslSaOD6GUM/D9N9PcqGHcUs7d XslTSrZiz7MNddW9y7weENGzoD4LdSXa5xz9SmL8FHezgp9kbWs+60iCOUG6GwjI KfzddopeQHkojAYbj/Ao4P3F3nyxZW8pfshgemfVXZhSjHXgla5s2GI+1tLnrj4J +lhYbt+6ldkQUihDH2+zNtgEH7Ms5PmhwkJ0e56YKyxl1Ah9EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkd9dpd+/R+7Hs0PDLHkQ0b6f4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGIwODZhM2ItMjBkMC0z ZTE1LWFmNGMtZjY5ZWRkY2ZlODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxDsR63+qv/5sRl2RTRnnS1bQ4YP4bexd00Rp5yD5Y/3UFRkv4hlHVU wrUNWxoCRFM22gO264Rba/F5DmyoUwj+gKviWOVfCs0TEN2eTqyZBYkgWH1FybPR cWhVO01Xv90xvELRZ6qxOrL2mRZrfEu9BAOTWvfQMyQA+vQAmmm3jmL/zaHNcjZp vKL0sORfozpcjV5wzrofxcZwv141Z2NbhGz0CGSEHYjNV9+1rtwz87vOxC7krjxL sq4bkL+mNz+iv3zFFknMuCFC8ZKMnLld1RBqReFNKOcoJuk7fDrJwJHFImJxYCRh N7VEP/61LMoKq5PY78IBFYE/oJtZTzY= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:33 2024 by rpki-client on console-ams.rpki-client.org