$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da522889-ebe1-3e20-88a7-7cccf27b5b03.roa File: da522889-ebe1-3e20-88a7-7cccf27b5b03.roa (raw, json) Hash identifier: J1dQq3VI2vfty94g23eNUnI8mx/GEdZ5F0gSoz7rrUc= Subject key identifier: 00:7C:5B:05:EA:56:9E:D2:02:9C:E5:05:78:15:67:B6:C3:D6:04:3C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285847B696BB2E928AD62F6ABC6E20 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da522889-ebe1-3e20-88a7-7cccf27b5b03.roa Signing time: Wed 30 Oct 2024 13:00:40 +0000 ROA not before: Wed 30 Oct 2024 13:00:40 +0000 ROA not after: Tue 28 Jan 2025 14:00:40 +0000 asID: 16417 IP address blocks: 207.54.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b6:96:bb:2e:92:8a:d6:2f:6a:bc:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 30 13:00:40 2024 GMT Not After : Jan 28 14:00:40 2025 GMT Subject: CN=4e46cc91-6c4c-4129-84c2-1881e0438a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ea:50:11:f4:6c:9d:72:71:12:8e:5d:c7:c9: 07:42:18:67:35:2b:b5:9d:0b:f3:10:a8:e9:10:b3: e3:60:a1:e8:27:d9:29:6c:19:9a:04:fc:f6:65:5b: d9:37:f2:40:a0:dd:7b:4a:6a:f9:7a:40:3c:80:61: 9e:94:2d:eb:07:ce:55:70:04:af:1a:3f:cf:35:2f: fc:35:32:ef:fd:58:fd:05:51:ea:ba:88:3c:7a:dc: 33:49:49:34:a2:ce:4d:07:60:79:50:74:0f:51:09: f1:fa:a9:10:c3:e4:85:a1:13:39:a8:6c:48:4e:6b: e0:ec:a4:16:7d:73:78:01:29:ae:27:58:e8:05:33: 50:8c:03:84:1b:d2:3a:ae:d9:ef:24:26:e9:65:6d: d1:97:bc:38:8b:ca:43:d5:02:b4:24:a8:3c:0c:6b: 65:5e:58:a5:c4:47:9c:7a:9d:0c:ba:b3:61:bd:82: 13:bc:06:56:19:72:8f:24:7a:ab:ed:c7:ef:c6:77: 1d:37:f4:be:06:94:dd:8e:aa:75:e6:1d:99:02:91: ce:b5:68:b8:a6:b2:14:91:ed:01:89:1d:42:0b:a4: b7:cb:d5:e3:9b:0f:5a:20:70:06:1d:ca:a2:26:b9: 96:0f:14:a4:a3:51:40:18:af:3d:d1:70:e3:5a:02: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7C:5B:05:EA:56:9E:D2:02:9C:E5:05:78:15:67:B6:C3:D6:04:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da522889-ebe1-3e20-88a7-7cccf27b5b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:97:af:b5:fe:bc:07:45:fb:f0:48:15:34:c7:88:88:be:49: 79:e1:35:ba:03:b0:ee:72:4d:e4:a1:d6:da:dc:f3:5e:c9:61: b9:41:cd:d5:76:f2:18:c4:bb:7a:02:8d:1e:1f:6c:47:5e:5a: 77:89:2e:30:9e:6f:9b:3a:00:d6:e2:73:ed:5e:95:a3:dc:77: 96:4b:87:c9:e5:65:dd:51:f0:b1:7a:44:3d:b9:8c:20:b1:58: d3:2b:a8:af:12:ce:f9:73:30:09:f3:90:a0:f5:ec:81:44:45: b8:7c:94:58:5f:2d:28:6d:0e:39:ce:46:bb:40:9d:04:c8:e9: ba:2c:b1:67:53:34:67:c6:8f:58:ef:1e:27:7f:06:83:e9:d6: e7:66:d0:b0:98:07:69:6d:e3:f7:ac:42:2a:db:5b:9f:a8:12: 54:06:28:95:e7:fd:45:c3:39:29:45:b3:9d:b9:50:85:4c:00: 68:b8:51:c3:c4:ed:e2:92:c6:d6:20:f7:81:1d:12:19:a8:5c: 0b:02:1b:cd:89:df:12:14:88:e3:73:22:dd:54:3e:e3:bd:1c: 8d:73:f9:11:a4:d6:cd:44:92:45:90:1e:aa:9a:77:42:ad:41: ec:d8:62:43:59:d1:55:b2:95:22:fb:e8:36:5a:77:48:a0:da: 9b:11:59:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lrsukorWL2q8biAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk NGU0NmNjOTEtNmM0Yy00MTI5LTg0YzItMTg4MWUwNDM4YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8upQEfRsnXJxEo5dx8kHQhhnNSu1nQvzEKjp ELPjYKHoJ9kpbBmaBPz2ZVvZN/JAoN17Smr5ekA8gGGelC3rB85VcASvGj/PNS/8 NTLv/Vj9BVHquog8etwzSUk0os5NB2B5UHQPUQnx+qkQw+SFoRM5qGxITmvg7KQW fXN4ASmuJ1joBTNQjAOEG9I6rtnvJCbpZW3Rl7w4i8pD1QK0JKg8DGtlXlilxEec ep0MurNhvYITvAZWGXKPJHqr7cfvxncdN/S+BpTdjqp15h2ZApHOtWi4prIUke0B iR1CC6S3y9Xjmw9aIHAGHcqiJrmWDxSko1FAGK890XDjWgLkXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB8WwXqVp7SApzlBXgVZ7bD1gQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGE1MjI4ODktZWJlMS0z ZTIwLTg4YTctN2NjY2YyN2I1YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaXr7X+vAdF+/BIFTTHiIi+SXnhNboDsO5yTeSh1trc817JYblBzdV2 8hjEu3oCjR4fbEdeWneJLjCeb5s6ANbic+1elaPcd5ZLh8nlZd1R8LF6RD25jCCx WNMrqK8SzvlzMAnzkKD17IFERbh8lFhfLShtDjnORrtAnQTI6bossWdTNGfGj1jv Hid/BoPp1udm0LCYB2lt4/esQirbW5+oElQGKJXn/UXDOSlFs525UIVMAGi4UcPE 7eKSxtYg94EdEhmoXAsCG82J3xIUiONzIt1UPuO9HI1z+RGk1s1EkkWQHqqad0Kt QezYYkNZ0VWylSL76DZad0ig2psRWTw= -----END CERTIFICATE-----Generated at Sun Nov 24 17:24:46 2024 by rpki-client on console-fra.rpki-client.org