$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa File: 63db3ed2-26ed-3f99-9a9b-2878649952c7.roa (raw, json) Hash identifier: nQ6Jt6PQ5BP3visSZPHHGC11wbmzfLB2nOeZxlyrh0Q= Subject key identifier: 50:49:F0:20:AC:16:54:00:A1:FF:E0:D5:04:35:1B:23:92:BA:96:75 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B4AA87FAE9527AB52BC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 208.76.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:4a:a8:7f:ae:95:27:ab:52:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=5d7592e0-a11e-416d-8b2e-282a4f321ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:ec:6f:20:8d:8e:85:a0:f8:c3:46:9f:1b: 00:3d:4d:d4:2c:65:5b:d7:81:06:53:8f:64:9e:70: a8:48:a7:65:bc:7e:73:ac:ac:b7:f8:2a:b9:df:cb: f3:95:70:89:e3:2a:9b:3c:39:9d:a8:62:ae:56:1e: 89:94:30:d3:b8:79:94:df:94:cc:6e:4a:6c:60:ea: 58:90:65:b1:8d:be:76:34:84:47:19:0c:00:bf:ab: 14:20:1a:f9:c8:49:cf:32:54:7d:7c:ee:ae:cb:d2: 62:d1:de:13:00:41:5e:aa:84:55:72:af:ed:a0:70: af:95:b1:ba:fb:ff:84:84:95:e2:b2:82:1b:15:5a: 19:0e:e0:ef:e0:d7:e5:70:be:a6:65:c5:0d:f2:47: 45:de:b6:fa:5c:32:d3:76:8e:f7:e6:87:39:c3:93: 5d:1d:1f:3a:2b:dc:4e:07:87:03:29:46:69:90:0d: da:b0:51:07:1c:23:67:c0:d0:5a:3e:c0:56:64:7e: 0c:c8:08:f0:ff:a3:6c:f0:06:4c:ba:d4:ad:24:d2: 0a:66:26:98:1b:3e:85:a3:f7:11:4f:cd:7b:59:17: 27:e5:d1:be:80:01:da:0f:f9:73:a4:dc:0b:f0:5b: 8a:2d:02:5f:0b:fe:3d:9f:22:a0:27:cf:77:6a:ed: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:49:F0:20:AC:16:54:00:A1:FF:E0:D5:04:35:1B:23:92:BA:96:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63db3ed2-26ed-3f99-9a9b-2878649952c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:24:1f:bb:b7:e7:1f:7e:de:ba:18:5a:9d:39:8a:f3:49:d0: c0:a1:d6:f3:c8:aa:a8:e6:8c:60:e7:f3:50:2f:ed:2b:1f:43: c7:d7:59:76:05:de:e0:18:47:f1:49:92:0f:aa:9b:bf:ba:3a: 5f:80:30:13:92:bc:98:a4:a7:e7:be:d2:aa:44:24:ad:65:b0: bd:cd:50:71:34:b3:79:f3:4a:40:09:44:0d:94:d8:cc:5c:c6: 30:f1:e4:65:11:3e:7e:ad:0e:7a:77:a5:1b:c9:ab:de:99:4a: c8:75:af:3d:ed:9e:db:d0:e1:92:eb:ed:d0:67:c8:04:d0:39: ea:db:39:d3:6f:96:f9:14:dd:83:b9:48:82:b4:30:2a:76:00: da:82:6c:fd:50:ca:0c:0f:10:c8:23:50:2f:3e:74:62:ce:c5: 87:f1:b8:a9:de:8d:51:20:0c:ae:c1:f2:84:05:0a:d7:ed:89: a5:65:d7:ab:22:ad:70:06:42:bc:f6:c3:ad:ab:0e:97:c0:12: 8c:39:b9:3c:24:18:92:e6:18:0e:dd:68:da:62:3c:df:ca:0a: 68:18:ce:7c:93:62:32:89:51:49:2e:30:c4:6e:66:01:41:a8: 17:8f:42:93:03:1d:56:12:bf:1f:87:78:23:62:d4:5c:44:32: 2e:41:d6:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0qof66VJ6tSvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NWQ3NTkyZTAtYTExZS00MTZkLThiMmUtMjgyYTRmMzIxYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi/sbyCNjoWg+MNGnxsAPU3ULGVb14EGU49k nnCoSKdlvH5zrKy3+Cq538vzlXCJ4yqbPDmdqGKuVh6JlDDTuHmU35TMbkpsYOpY kGWxjb52NIRHGQwAv6sUIBr5yEnPMlR9fO6uy9Ji0d4TAEFeqoRVcq/toHCvlbG6 +/+EhJXisoIbFVoZDuDv4NflcL6mZcUN8kdF3rb6XDLTdo735oc5w5NdHR86K9xO B4cDKUZpkA3asFEHHCNnwNBaPsBWZH4MyAjw/6Ns8AZMutStJNIKZiaYGz6Fo/cR T817WRcn5dG+gAHaD/lzpNwL8FuKLQJfC/49nyKgJ893au29owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBJ8CCsFlQAof/g1QQ1GyOSupZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNkYjNlZDItMjZlZC0z Zjk5LTlhOWItMjg3ODY0OTk1MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABckH7u35x9+3roYWp05ivNJ0MCh1vPIqqjmjGDn81Av7SsfQ8fXWXYF 3uAYR/FJkg+qm7+6Ol+AMBOSvJikp+e+0qpEJK1lsL3NUHE0s3nzSkAJRA2U2Mxc xjDx5GURPn6tDnp3pRvJq96ZSsh1rz3tntvQ4ZLr7dBnyATQOerbOdNvlvkU3YO5 SIK0MCp2ANqCbP1QygwPEMgjUC8+dGLOxYfxuKnejVEgDK7B8oQFCtftiaVl16si rXAGQrz2w62rDpfAEow5uTwkGJLmGA7daNpiPN/KCmgYznyTYjKJUUkuMMRuZgFB qBePQpMDHVYSvx+HeCNi1FxEMi5B1ro= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:17 2024 by rpki-client on console-fra.rpki-client.org