$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/da11df26-595f-3196-ac1e-9a3fac8da7f0.roa File: da11df26-595f-3196-ac1e-9a3fac8da7f0.roa (raw, json) Hash identifier: RkSuU9iSSNJLZBKqgYls0str+rkjcZg4dXHDtK1AG/s= Subject key identifier: 85:5D:30:8B:4F:02:03:35:A2:57:69:58:09:B9:8E:B7:34:06:78:9F Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F43285846957920B42D032BCB7700CE80 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/da11df26-595f-3196-ac1e-9a3fac8da7f0.roa Signing time: Wed 17 Jul 2024 12:00:00 +0000 ROA not before: Wed 17 Jul 2024 12:00:00 +0000 ROA not after: Fri 21 Aug 2026 04:00:00 +0000 asID: 36692 IP address blocks: 208.67.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:95:79:20:b4:2d:03:2b:cb:77:00:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Jul 17 12:00:00 2024 GMT Not After : Aug 21 04:00:00 2026 GMT Subject: CN=c237793a-6596-4a71-88ef-f6a22c89631a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:69:0b:51:3e:f4:6d:d0:76:84:7f:6c:3b: e1:4f:f0:c4:59:a3:0d:43:aa:c8:aa:85:c8:85:70: 15:ba:00:e4:4d:0e:22:a5:89:0f:27:ea:cf:e8:5d: ce:89:f6:70:a6:8b:52:2f:0b:5e:dc:21:10:e1:3e: 9f:6c:b1:38:0c:42:fb:bc:bb:98:9d:00:9d:7b:7e: a0:3b:a2:36:3e:b4:8e:b0:d7:1b:fc:22:e3:78:4e: a0:38:0e:7c:74:4a:9d:bb:de:62:8c:6d:2c:36:a9: 8d:a7:08:54:d7:4e:c0:17:55:be:d2:e5:e5:7f:92: 91:ca:73:6f:e0:10:87:b3:5c:68:85:fd:00:82:7f: 37:d0:e7:8c:b3:8a:29:dc:61:30:f8:cd:66:30:1b: c9:ab:ef:7b:9b:81:c8:b1:d3:e5:9c:3a:79:a9:46: dd:a9:f0:6b:e3:03:1a:59:ba:30:e2:d2:54:50:20: bd:59:fe:83:27:97:c4:c6:44:e8:50:e7:6e:97:fb: bc:28:0b:37:94:ef:f1:0d:6b:52:0f:51:15:19:36: f7:49:90:80:3b:c4:7b:01:61:e8:7b:b0:f4:d3:e9: b6:ca:34:70:b6:e3:42:17:af:5a:9c:fa:94:42:9c: 51:d5:fc:93:34:a0:a2:ef:d8:f1:25:66:1c:aa:ed: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:30:8B:4F:02:03:35:A2:57:69:58:09:B9:8E:B7:34:06:78:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/da11df26-595f-3196-ac1e-9a3fac8da7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 208.67.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:24:92:ca:65:e9:b7:58:7e:47:5f:8c:61:75:89:42:e0:1e: 8d:9a:31:4f:2f:ea:3e:87:02:36:23:1c:7c:b5:68:ca:0f:af: a0:7e:a6:f5:5e:1b:f1:0a:21:e7:5e:40:5b:4c:59:da:da:16: 93:49:4b:2b:4e:31:ab:be:73:a9:30:55:25:c1:1d:a7:01:0e: 2b:3e:38:af:e8:29:c1:fa:5a:9d:69:d2:fd:6e:17:14:65:06: 96:58:5e:d9:36:fc:22:7a:41:fd:51:e2:bc:59:e9:2c:7c:b8: 56:bb:c3:8a:32:b9:78:15:08:0f:fc:85:74:f5:5d:84:9c:90: 6d:e0:1b:a3:b1:fb:74:52:eb:e3:75:40:76:2d:70:50:69:1b: c9:4e:c5:c2:e3:5b:7c:02:5c:fb:fe:be:f7:f5:9f:a5:3a:de: 4e:ec:8c:39:44:90:ef:1a:0f:ab:d3:af:5b:38:3a:65:70:d2: 65:fb:25:07:c1:d6:53:75:df:fc:4d:37:21:6c:0a:79:27:67: a0:02:d4:61:d0:ae:d2:fe:1f:da:ee:fd:d4:e8:bc:a0:90:0a: 72:ad:fa:ef:ec:20:e1:70:55:9a:4b:c2:c7:b3:d0:ed:ac:b4: 1c:20:1b:6f:cc:a7:7d:0c:a4:39:47:de:20:37:17:bf:5c:db: f1:e9:9d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaVeSC0LQMry3cAzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI0MDcxNzEyMDAwMFoXDTI2MDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk YzIzNzc5M2EtNjU5Ni00YTcxLTg4ZWYtZjZhMjJjODk2MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov5pC1E+9G3QdoR/bDvhT/DEWaMNQ6rIqoXI hXAVugDkTQ4ipYkPJ+rP6F3OifZwpotSLwte3CEQ4T6fbLE4DEL7vLuYnQCde36g O6I2PrSOsNcb/CLjeE6gOA58dEqdu95ijG0sNqmNpwhU107AF1W+0uXlf5KRynNv 4BCHs1xohf0Agn830OeMs4op3GEw+M1mMBvJq+97m4HIsdPlnDp5qUbdqfBr4wMa Wbow4tJUUCC9Wf6DJ5fExkToUOdul/u8KAs3lO/xDWtSD1EVGTb3SZCAO8R7AWHo e7D00+m2yjRwtuNCF69anPqUQpxR1fyTNKCi79jxJWYcqu36mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVdMItPAgM1oldpWAm5jrc0BnifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZGExMWRmMjYtNTk1Zi0z MTk2LWFjMWUtOWEzZmFjOGRhN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFokkspl6bdYfkdfjGF1iULgHo2aMU8v6j6HAjYjHHy1aMoPr6B+pvVe G/EKIedeQFtMWdraFpNJSytOMau+c6kwVSXBHacBDis+OK/oKcH6Wp1p0v1uFxRl BpZYXtk2/CJ6Qf1R4rxZ6Sx8uFa7w4oyuXgVCA/8hXT1XYSckG3gG6Ox+3RS6+N1 QHYtcFBpG8lOxcLjW3wCXPv+vvf1n6U63k7sjDlEkO8aD6vTr1s4OmVw0mX7JQfB 1lN13/xNNyFsCnknZ6AC1GHQrtL+H9ru/dTovKCQCnKt+u/sIOFwVZpLwsez0O2s tBwgG2/Mp30MpDlH3iA3F79c2/HpnVQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org