$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa File: c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa (raw, json) Hash identifier: ArQXzIc/5AekL9NYWoxwVDl4zYoBVWYYgoZf5Fb+R2U= Subject key identifier: 91:E0:99:1F:1A:B0:CB:22:5E:60:03:8D:03:8E:30:F6:86:2B:AE:96 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285847FC7F93892FE10D67BDDFBC80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa Signing time: Sun 24 Nov 2024 14:00:39 +0000 ROA not before: Sun 24 Nov 2024 14:00:39 +0000 ROA not after: Sat 22 Feb 2025 14:00:39 +0000 asID: 16509 IP address blocks: 207.202.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fc:7f:93:89:2f:e1:0d:67:bd:df:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Nov 24 14:00:39 2024 GMT Not After : Feb 22 14:00:39 2025 GMT Subject: CN=1d695fc7-005c-4089-b9a0-c42726c4e357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:13:93:47:aa:ee:d9:e3:33:72:57:dc:a5:c4: 5f:8d:72:d7:88:07:6a:a4:77:36:ba:0a:3a:cd:cb: bb:59:08:58:d2:85:50:6f:98:d6:1f:b5:31:25:73: d8:51:f6:9a:3c:05:df:37:69:66:16:8d:5f:76:ac: 00:73:a9:d0:ea:87:55:5f:eb:6d:89:ac:b5:af:8d: 55:41:96:fd:03:6e:cc:48:40:9a:f6:28:ba:c4:3e: 4a:e8:98:b2:c4:f8:51:f5:f2:f0:79:c4:84:f6:53: 53:15:7e:b9:15:3b:e3:2e:b2:6c:65:7b:81:db:67: 0a:ab:61:81:e0:45:72:48:f7:e9:a9:54:17:bc:d0: 7f:09:11:b4:43:c8:7d:fe:0e:4d:21:7c:8f:23:ff: bc:41:44:23:2c:88:1c:73:5e:92:6c:1f:f4:7d:5a: dc:8c:de:a3:d6:ea:eb:18:36:a5:ab:f2:07:0a:af: ab:da:f5:0b:4d:5e:2a:43:3e:10:20:67:6e:b9:1c: 9b:67:6a:c3:c9:02:94:89:a9:e1:08:e5:0d:b3:3b: e6:1b:28:8d:b5:ab:6f:c0:f5:29:c8:db:9d:6f:22: 5a:38:eb:d8:69:39:ae:5c:38:4f:6d:38:4e:63:18: 86:1e:e1:6b:fc:ea:b3:cb:89:0a:ca:3a:cb:55:0a: 32:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E0:99:1F:1A:B0:CB:22:5E:60:03:8D:03:8E:30:F6:86:2B:AE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0e:de:94:04:d8:65:00:74:6b:e5:e7:d4:19:18:09:92:be: b1:60:5f:e3:41:fb:f6:da:f9:a2:30:f5:31:3f:f2:10:ae:31: 42:2b:2d:d3:17:47:9f:f8:a8:06:23:13:6e:3c:7c:c4:b4:3c: a7:2a:11:0d:aa:39:f0:97:4a:ef:80:a2:86:77:0b:5d:a5:c1: a0:5e:16:a4:13:b5:34:74:dc:28:42:50:73:57:14:53:3a:6b: f2:83:65:1d:c8:a5:70:12:0f:29:40:59:cf:53:ac:13:a3:ef: da:71:b5:c5:09:b2:ed:97:85:37:61:af:27:96:59:42:ef:8e: a4:2b:f0:fe:53:31:5a:9d:bd:af:47:43:1e:3a:c9:5e:1e:9d: 8d:c6:3e:b7:00:5a:e8:2f:19:49:b5:94:0f:c0:62:4a:e9:9d: fe:d0:e5:7b:c7:fb:cc:55:01:6f:e6:46:8f:f7:39:1e:f6:bb: fd:cd:35:16:b0:2e:1b:82:80:30:3c:81:4b:8b:6d:41:d0:95: c1:b7:cf:f4:ce:84:f4:81:4d:89:e0:d8:66:43:19:3f:1e:fb: 59:54:43:9f:6f:86:48:47:85:24:fd:3d:7d:d6:5e:73:0d:78: a4:f9:5f:6f:92:bf:fd:3d:eb:15:94:44:ee:87:ed:74:e5:b2: f0:2f:0f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf8f5OJL+ENZ73fvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk MWQ2OTVmYzctMDA1Yy00MDg5LWI5YTAtYzQyNzI2YzRlMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBOTR6ru2eMzclfcpcRfjXLXiAdqpHc2ugo6 zcu7WQhY0oVQb5jWH7UxJXPYUfaaPAXfN2lmFo1fdqwAc6nQ6odVX+ttiay1r41V QZb9A27MSECa9ii6xD5K6JiyxPhR9fLwecSE9lNTFX65FTvjLrJsZXuB22cKq2GB 4EVySPfpqVQXvNB/CRG0Q8h9/g5NIXyPI/+8QUQjLIgcc16SbB/0fVrcjN6j1urr GDalq/IHCq+r2vULTV4qQz4QIGduuRybZ2rDyQKUianhCOUNszvmGyiNtatvwPUp yNudbyJaOOvYaTmuXDhPbThOYxiGHuFr/Oqzy4kKyjrLVQoy+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHgmR8asMsiXmADjQOOMPaGK66WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzZkYTQzZWYtMTNmYi0z YTE5LTkwMzUtYzQ2NWNjNDVlMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwO3pQE2GUAdGvl59QZGAmSvrFgX+NB+/ba+aIw9TE/8hCuMUIrLdMX R5/4qAYjE248fMS0PKcqEQ2qOfCXSu+AooZ3C12lwaBeFqQTtTR03ChCUHNXFFM6 a/KDZR3IpXASDylAWc9TrBOj79pxtcUJsu2XhTdhryeWWULvjqQr8P5TMVqdva9H Qx46yV4enY3GPrcAWugvGUm1lA/AYkrpnf7Q5XvH+8xVAW/mRo/3OR72u/3NNRaw LhuCgDA8gUuLbUHQlcG3z/TOhPSBTYng2GZDGT8e+1lUQ59vhkhHhST9PX3WXnMN eKT5X2+Sv/096xWURO6H7XTlsvAvD2I= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:37 2024 by rpki-client on console-fra.rpki-client.org