$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa File: 4da48b61-b86f-364f-8202-7a45652e7804.roa (raw, json) Hash identifier: 26Eagfnx3UJ8im9ebzMpHl1fRPwHIsE0Dp+sMCrJS3s= Subject key identifier: DF:76:AE:9F:03:66:38:31:89:96:2A:A7:47:78:D1:D2:D8:0A:E8:FB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E094BB4D71A2C30EE0CB9C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 15169 IP address blocks: 8.8.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:bb:4d:71:a2:c3:0e:e0:cb:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=dc752013-3e06-4c7a-b6bb-b3d9d36eb786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:fa:52:f6:a4:91:97:3a:9b:19:b8:5a:1b: ee:93:e1:e8:b1:e4:a8:e7:28:53:0e:63:dc:5e:e3: 28:7c:1f:8e:12:a9:c8:4c:25:e2:5d:e1:5e:22:d3: 40:03:70:71:53:83:5b:4e:e3:1d:5f:31:01:72:85: 8b:15:1a:ca:91:60:95:f8:19:f3:9a:bc:01:26:a4: 49:82:7f:2c:ec:2a:96:41:f6:ea:02:fb:b1:38:21: 3c:58:0a:66:e8:13:3e:b3:22:a4:fd:4b:7d:23:e4: 04:76:db:e4:b9:f9:80:9a:5f:f2:87:ae:2c:ae:73: f0:93:fa:63:8f:89:40:c2:f5:48:e6:63:05:27:05: 49:57:45:f9:cf:a9:14:91:30:55:24:dd:76:b5:91: 63:6c:34:18:b8:a7:bc:eb:98:7a:d4:cf:2b:99:9c: 1e:5f:97:90:42:17:3d:10:7c:bf:3b:d0:0c:6b:44: 47:2a:47:7e:cd:d9:07:d4:7f:80:d8:63:a7:a7:3a: 32:ea:da:4a:75:e3:b3:a9:c9:a3:99:95:62:76:9a: 60:c2:3c:1e:c2:75:73:c9:34:88:f2:12:c1:0c:ee: 6d:69:61:b1:48:c5:e4:b6:b0:b1:ec:4a:3c:ce:83: 45:5a:82:1f:20:ef:8a:9c:b2:10:ac:b7:74:dc:f4: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:76:AE:9F:03:66:38:31:89:96:2A:A7:47:78:D1:D2:D8:0A:E8:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 8.8.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:48:fd:d5:9b:2a:d5:ec:a6:16:5f:71:a8:87:63:7d:a0:fa: 21:f2:63:85:92:5d:0a:a6:91:76:7e:23:45:f6:79:89:4c:91: 1f:78:c5:33:94:2a:8d:3b:8c:d0:40:32:b7:c3:96:1a:61:9b: ef:c4:1e:87:d8:01:14:52:84:5d:ee:97:86:1f:a7:2e:fc:20: 27:05:a5:96:91:ee:fa:65:b1:60:62:3a:54:01:f5:a6:08:fd: 17:a4:76:f2:fc:9e:4c:31:c7:cc:28:7e:75:8e:7b:bf:06:9a: bb:21:bf:22:40:18:be:28:78:2f:c3:60:ae:69:51:8b:b9:ea: 25:9b:01:4f:d7:f6:fb:2b:e7:d8:a7:51:38:89:dd:8f:b0:99: 71:9a:d0:18:b2:66:50:06:d0:75:20:5b:fe:02:82:8a:a7:ed: f6:b7:3c:ff:23:71:f0:a1:b5:06:bc:b8:f1:25:4d:3e:51:d6: d0:6c:07:2e:33:da:e0:3a:1e:0d:68:61:be:8d:26:8f:af:57: d6:53:61:42:38:66:0c:83:ef:9d:fd:04:d9:bc:be:56:27:b3: 9b:d0:98:cf:39:ab:ea:45:d6:84:b4:46:8e:2f:7b:b3:2f:6c: 62:de:86:a0:d6:ef:2f:06:06:a5:bc:45:57:fe:40:75:4d:b4: 61:73:8b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglLtNcaLDDuDLnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ZGM3NTIwMTMtM2UwNi00YzdhLWI2YmItYjNkOWQzNmViNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwb6UvakkZc6mxm4Whvuk+HoseSo5yhTDmPc XuMofB+OEqnITCXiXeFeItNAA3BxU4NbTuMdXzEBcoWLFRrKkWCV+BnzmrwBJqRJ gn8s7CqWQfbqAvuxOCE8WApm6BM+syKk/Ut9I+QEdtvkufmAml/yh64srnPwk/pj j4lAwvVI5mMFJwVJV0X5z6kUkTBVJN12tZFjbDQYuKe865h61M8rmZweX5eQQhc9 EHy/O9AMa0RHKkd+zdkH1H+A2GOnpzoy6tpKdeOzqcmjmZVidppgwjwewnVzyTSI 8hLBDO5taWGxSMXktrCx7Eo8zoNFWoIfIO+KnLIQrLd03PTnUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN92rp8DZjgxiZYqp0d40dLYCuj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGRhNDhiNjEtYjg2Zi0z NjRmLTgyMDItN2E0NTY1MmU3ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNI/dWbKtXsphZfcaiHY32g+iHyY4WSXQqmkXZ+I0X2eYlMkR94xTOU Ko07jNBAMrfDlhphm+/EHofYARRShF3ul4Yfpy78ICcFpZaR7vplsWBiOlQB9aYI /RekdvL8nkwxx8wofnWOe78GmrshvyJAGL4oeC/DYK5pUYu56iWbAU/X9vsr59in UTiJ3Y+wmXGa0BiyZlAG0HUgW/4Cgoqn7fa3PP8jcfChtQa8uPElTT5R1tBsBy4z 2uA6Hg1oYb6NJo+vV9ZTYUI4ZgyD7539BNm8vlYns5vQmM85q+pF1oS0Ro4ve7Mv bGLehqDW7y8GBqW8RVf+QHVNtGFzixw= -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:11 2024 by rpki-client on console-ams.rpki-client.org