$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b27f7839-a4e4-3e21-a6eb-aceb75251914.roa File: b27f7839-a4e4-3e21-a6eb-aceb75251914.roa (raw, json) Hash identifier: Ca/pTF6SMYvhnxdhfB1vvX9pQDGVmtgjbr+rOx6bPIo= Subject key identifier: 03:9A:2E:D4:68:AD:71:B2:55:A1:E7:24:9A:18:38:5C:BC:27:21:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B4FD8148F363E2E471500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b27f7839-a4e4-3e21-a6eb-aceb75251914.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 208.76.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:4f:d8:14:8f:36:3e:2e:47:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=73cca86a-f910-43ea-ad95-3b4b1a124659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:63:f9:10:eb:0f:16:64:dd:5c:45:9e:dd: 7f:bb:9b:07:15:28:63:50:ad:88:4d:27:29:78:76: 78:8b:09:22:53:04:da:4f:47:96:81:7a:4c:d2:bc: 90:34:95:71:bc:5e:f8:24:ac:e9:16:b6:a4:46:e9: 01:ba:db:b9:e0:ba:d7:1a:66:41:e8:81:33:ab:0a: 22:ae:e8:80:39:53:ba:a2:bd:05:eb:99:a3:2d:ee: 5f:ce:6e:09:c7:b3:24:a0:b3:3d:0e:1a:f5:4a:ea: 8e:0d:31:f7:ec:06:11:27:ab:70:23:cd:99:15:dc: 35:1e:9b:ba:d6:83:8d:a4:e7:9a:30:c6:5d:b9:a4: 86:b6:77:db:f5:eb:f8:0a:b9:c7:dd:7d:fa:60:0a: 52:83:63:07:d1:4a:f1:52:e8:7b:fa:54:3a:96:87: de:c1:70:5c:80:72:fc:99:91:f0:5b:e3:1b:98:69: 1f:22:2a:04:ad:3f:7f:7a:2c:b0:93:e7:50:6c:cb: fa:52:b3:bf:dd:4d:02:d8:40:c9:40:96:85:f8:b0: 62:9a:61:df:ad:4d:d9:6e:87:5a:0f:2c:92:2b:58: c6:76:d4:b2:c0:83:fb:9a:f2:f7:56:21:03:f0:1f: b6:39:15:78:bd:6f:12:74:2d:06:d3:15:5f:3e:78: 0a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9A:2E:D4:68:AD:71:B2:55:A1:E7:24:9A:18:38:5C:BC:27:21:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b27f7839-a4e4-3e21-a6eb-aceb75251914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c3:22:94:3c:28:4e:27:34:36:3a:78:a6:ab:19:a2:80:90: 4f:58:91:38:4e:11:30:da:6e:e0:6c:45:82:c2:51:63:99:33: af:2f:77:31:c9:75:3c:42:32:fb:8f:21:45:89:fc:05:d7:a9: da:91:26:e9:59:28:a1:e9:d4:0d:be:e8:28:3a:35:a6:31:00: 51:7f:1a:f4:fa:6b:8f:4c:0f:41:a9:d9:30:e6:b4:e7:09:7d: 49:31:eb:68:c8:e2:ff:05:70:4b:f7:23:55:39:ee:95:80:ad: d5:55:82:a6:f4:c5:82:30:94:c4:35:2e:f1:ce:c5:ac:bc:2a: 6a:f3:d3:6a:17:1f:0f:8a:40:4c:47:f2:78:0c:a6:d2:76:ae: 53:ec:72:70:8e:dd:29:2e:2c:16:a3:91:ee:d3:dd:98:33:50: 54:26:b2:44:26:12:45:d9:10:a6:00:fd:3c:4e:a4:59:5c:bd: b1:4c:d1:ef:5c:6a:02:ac:3c:d8:85:54:5c:6f:df:50:cf:ac: 47:92:13:8d:49:7a:09:af:c2:99:f2:7c:e1:c5:d8:52:c6:88: 71:57:6e:70:bb:61:f9:af:a3:51:d2:9e:06:f5:78:70:b6:d1: 00:9d:7c:5c:38:16:f2:fc:c4:13:b5:51:bc:75:2e:b8:8a:98: 37:87:04:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0/YFI82Pi5HFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NzNjY2E4NmEtZjkxMC00M2VhLWFkOTUtM2I0YjFhMTI0NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhVj+RDrDxZk3VxFnt1/u5sHFShjUK2ITScp eHZ4iwkiUwTaT0eWgXpM0ryQNJVxvF74JKzpFrakRukButu54LrXGmZB6IEzqwoi ruiAOVO6or0F65mjLe5fzm4Jx7MkoLM9Dhr1SuqODTH37AYRJ6twI82ZFdw1Hpu6 1oONpOeaMMZduaSGtnfb9ev4CrnH3X36YApSg2MH0UrxUuh7+lQ6lofewXBcgHL8 mZHwW+MbmGkfIioErT9/eiywk+dQbMv6UrO/3U0C2EDJQJaF+LBimmHfrU3Zboda DyySK1jGdtSywIP7mvL3ViED8B+2ORV4vW8SdC0G0xVfPngK4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOaLtRorXGyVaHnJJoYOFy8JyHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjI3Zjc4MzktYTRlNC0z ZTIxLWE2ZWItYWNlYjc1MjUxOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnDIpQ8KE4nNDY6eKarGaKAkE9YkThOETDabuBsRYLCUWOZM68vdzHJ dTxCMvuPIUWJ/AXXqdqRJulZKKHp1A2+6Cg6NaYxAFF/GvT6a49MD0Gp2TDmtOcJ fUkx62jI4v8FcEv3I1U57pWArdVVgqb0xYIwlMQ1LvHOxay8Kmrz02oXHw+KQExH 8ngMptJ2rlPscnCO3SkuLBajke7T3ZgzUFQmskQmEkXZEKYA/TxOpFlcvbFM0e9c agKsPNiFVFxv31DPrEeSE41JegmvwpnyfOHF2FLGiHFXbnC7Yfmvo1HSngb1eHC2 0QCdfFw4FvL8xBO1Ubx1LriKmDeHBEE= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:16 2024 by rpki-client on console-fra.rpki-client.org