$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa File: d5ee5953-1179-38f3-9cd8-1324c853f484.roa (raw, json) Hash identifier: igP4Ch2UpAPOi/ElJSCA9T93lypNbol2Hc6eggRUBHo= Subject key identifier: 0C:C5:D1:C4:54:B7:27:1F:FD:D2:30:76:AF:01:85:F9:5B:31:70:8A Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F43285847B10162D789BF4CA313F58740 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 14618 IP address blocks: 208.71.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:62:d7:89:bf:4c:a3:13:f5:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=ea38307c-1354-4b89-a2e2-7b1a6139734a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b2:14:bb:da:61:61:4f:b5:9c:69:8a:99:ca: 03:28:74:ea:85:48:d1:2d:93:2e:e4:b3:5c:6a:1d: e2:7b:e3:47:55:5b:0b:c9:7f:23:4f:89:50:2e:91: ff:d7:82:e8:74:55:d8:7c:f7:7a:fe:0b:ae:8b:2c: 13:d2:57:17:29:d0:62:a7:37:82:6e:8e:2c:62:02: 1c:6e:30:f5:8e:54:ce:ec:28:33:5a:92:b8:31:76: db:3c:71:fd:e6:0c:41:c0:b1:f2:e9:25:1d:1d:04: b8:b1:5f:a5:80:27:e3:f9:5d:04:c1:c3:de:a9:60: f1:7d:ed:b8:b4:33:0c:ef:b3:ae:d0:c6:9b:bc:cb: 36:66:f6:d6:39:8f:4d:73:1b:57:4b:4d:da:65:00: 27:22:5a:5b:0f:ae:b3:0e:77:8a:25:c6:fd:e5:a5: 55:2d:bd:ad:40:01:80:95:bc:87:b1:77:a6:72:b3: 49:8c:3b:fa:80:01:59:cb:4b:64:7d:b0:c0:06:45: ed:ca:08:87:f0:24:b1:1b:f4:d3:42:a8:02:6a:3d: da:ff:af:15:89:0a:c1:ae:8b:5d:af:e7:66:ce:bd: 4d:dd:c2:3e:6b:ae:2b:ed:bb:71:9c:03:30:09:5a: c3:07:3e:bb:92:2b:56:2d:df:85:e2:94:bb:f1:06: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C5:D1:C4:54:B7:27:1F:FD:D2:30:76:AF:01:85:F9:5B:31:70:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:dc:6c:2e:21:05:f3:c8:eb:fa:ab:fe:5b:76:96:bf:dd:c1: 0d:32:69:ec:16:b4:b1:38:e5:d6:4f:ac:ec:46:fc:aa:38:c3: f6:99:54:6a:3d:0e:14:f4:22:38:fa:62:87:1b:f8:29:93:a4: 92:c5:f1:5e:f3:6f:87:d7:8a:98:f2:e1:d3:87:0f:74:d6:57: 62:24:57:c7:11:02:e8:9c:04:8b:df:99:2f:7f:dc:23:9c:7b: 4b:b9:9d:8c:78:ef:08:de:b7:ed:cc:8c:a8:f1:f3:89:dd:50: b1:ce:a0:fe:e7:5a:4a:68:f1:2d:57:54:95:6e:10:2c:77:40: 4e:18:cf:a3:c1:a8:9c:a4:ad:87:42:5f:22:e2:10:d3:bd:e6: 62:2e:5d:b9:34:bc:ce:a2:70:c1:6a:f9:8d:bf:25:3f:89:62: 32:98:d8:32:a4:b5:89:b5:9b:a2:79:5d:5e:6d:e7:8c:9d:ce: 78:9d:45:0d:72:76:ab:df:3c:49:44:e8:d4:9d:78:09:8c:65: f8:ba:83:9b:f5:fb:ba:5d:0c:3c:1a:e9:db:b8:41:e9:8a:7b: ca:31:b4:5e:15:5d:1e:1a:84:c7:dd:96:01:78:3a:2b:ad:cf: 59:99:61:a4:2e:d6:64:4c:23:09:47:29:4c:a7:86:0e:fa:38: c6:e1:b5:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWLXib9MoxP1h0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk ZWEzODMwN2MtMTM1NC00Yjg5LWEyZTItN2IxYTYxMzk3MzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7IUu9phYU+1nGmKmcoDKHTqhUjRLZMu5LNc ah3ie+NHVVsLyX8jT4lQLpH/14LodFXYfPd6/guuiywT0lcXKdBipzeCbo4sYgIc bjD1jlTO7CgzWpK4MXbbPHH95gxBwLHy6SUdHQS4sV+lgCfj+V0EwcPeqWDxfe24 tDMM77Ou0MabvMs2ZvbWOY9NcxtXS03aZQAnIlpbD66zDneKJcb95aVVLb2tQAGA lbyHsXemcrNJjDv6gAFZy0tkfbDABkXtygiH8CSxG/TTQqgCaj3a/68ViQrBrotd r+dmzr1N3cI+a64r7btxnAMwCVrDBz67kitWLd+F4pS78QboUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzF0cRUtycf/dIwdq8BhflbMXCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvZDVlZTU5NTMtMTE3OS0z OGYzLTljZDgtMTMyNGM4NTNmNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLcbC4hBfPI6/qr/lt2lr/dwQ0yaewWtLE45dZPrOxG/Ko4w/aZVGo9 DhT0Ijj6Yocb+CmTpJLF8V7zb4fXipjy4dOHD3TWV2IkV8cRAuicBIvfmS9/3COc e0u5nYx47wjet+3MjKjx84ndULHOoP7nWkpo8S1XVJVuECx3QE4Yz6PBqJykrYdC XyLiENO95mIuXbk0vM6icMFq+Y2/JT+JYjKY2DKktYm1m6J5XV5t54ydznidRQ1y dqvfPElE6NSdeAmMZfi6g5v1+7pdDDwa6du4QemKe8oxtF4VXR4ahMfdlgF4Oiut z1mZYaQu1mRMIwlHKUynhg76OMbhtbk= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org