$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa File: b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa (raw, json) Hash identifier: xrRTNs75iBnAGK7/FNQWp7JJwQgQoe6XnUSt2RniwpU= Subject key identifier: BE:32:8E:23:E7:FF:CD:5E:B2:6E:1B:1F:4D:3B:4F:FA:EE:35:C4:20 Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9 Certificate serial: 010D0C9F43285847818BC4D87487E5EA3575E180 Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa Signing time: Fri 11 Oct 2024 13:00:41 +0000 ROA not before: Fri 11 Oct 2024 13:00:41 +0000 ROA not after: Thu 09 Jan 2025 14:00:41 +0000 asID: 32821 IP address blocks: 208.94.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:81:8b:c4:d8:74:87:e5:ea:35:75:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9 Validity Not Before: Oct 11 13:00:41 2024 GMT Not After : Jan 9 14:00:41 2025 GMT Subject: CN=d795ef16-5d6d-4dc9-b136-251ebd354d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:c5:4b:19:bc:0a:86:58:2f:24:29:1d:a2: 39:06:51:6b:58:0d:6b:c7:6d:1f:7d:44:f8:7d:f4: f8:cd:07:7a:16:db:22:49:89:9c:f7:45:e7:a6:c6: b0:67:32:cf:98:b5:74:9d:b7:f2:3b:92:d5:9c:ea: ef:28:3a:e2:2e:0b:4c:37:b4:da:4a:ad:af:39:69: 5a:cf:31:3d:89:94:bc:9f:61:1c:ef:bd:be:0c:97: b3:89:6e:2b:1e:71:df:84:77:42:0d:dc:fc:32:d2: c7:45:a2:01:75:75:13:22:6f:10:2a:98:44:8a:f9: e8:1a:d4:f5:1e:6b:a6:7c:3c:fa:58:02:68:c9:92: 10:64:6d:46:3a:89:17:5c:43:99:6b:c4:1e:e9:03: 3d:ae:1b:34:da:50:b4:68:b1:35:44:ea:0f:58:82: dc:56:9b:17:00:da:c0:bc:32:f3:36:cf:20:f6:3b: 82:3e:c6:28:05:29:4d:c1:19:22:34:95:fd:9f:54: bb:b4:d5:26:18:7c:f1:4c:e1:84:53:77:98:45:40: c7:8e:75:0e:66:02:fb:bf:10:52:f1:10:e8:93:f0: d5:a6:45:ae:72:3c:d2:38:65:ab:9e:35:2b:66:b1: d1:1e:b0:ff:e9:03:2e:e2:1f:33:4a:a7:68:a6:44: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:32:8E:23:E7:FF:CD:5E:B2:6E:1B:1F:4D:3B:4F:FA:EE:35:C4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl X509v3 Authority Key Identifier: keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer sbgp-ipAddrBlock: critical IPv4: 208.94.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8a:4b:6a:c2:5b:38:c5:25:53:a7:5b:59:43:32:8d:ea:24: d7:75:b8:aa:63:42:b3:47:58:3d:0c:39:86:c7:6b:cb:71:12: 50:42:d7:3b:2e:09:ce:e4:47:81:27:40:fa:ca:ff:18:e1:e0: 0e:37:81:b4:78:3c:c6:b6:ac:07:74:36:76:71:d0:74:ca:68: 31:21:6f:fb:84:41:11:3c:23:03:05:a3:b4:c0:d3:ff:c3:3b: 1b:84:10:7c:13:56:fd:81:49:5d:8e:8a:75:a4:2e:7b:2f:00: 64:8f:f5:aa:8d:ea:a9:5c:26:5e:c6:36:d2:09:3e:11:8e:be: 56:8a:c4:bb:ce:d3:eb:c7:40:e1:44:61:fc:99:7e:bb:b6:d5: f6:11:9b:55:c2:be:33:8a:96:e2:24:2b:e0:7f:47:f2:49:cc: 0f:a9:17:b7:d8:9e:c1:c8:8c:56:7d:ac:34:5e:07:61:b2:de: 96:4a:62:ed:a8:69:30:87:47:3d:51:77:a4:36:76:71:aa:4d: a5:a6:35:39:09:5f:fa:cc:ef:31:0a:d6:18:3b:cf:e0:78:86: 90:24:07:f4:82:06:d8:bf:6b:fc:52:43:2c:e4:7c:b1:05:73: 4a:92:3c:dd:67:7d:23:d5:a6:b1:21:bb:24:c8:e2:e9:e4:20: 13:02:79:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeBi8TYdIfl6jV14YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj YmY5MB4XDTI0MTAxMTEzMDA0MVoXDTI1MDEwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDc5NWVmMTYtNWQ2ZC00ZGM5LWIxMzYtMjUxZWJkMzU0ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipbFSxm8CoZYLyQpHaI5BlFrWA1rx20ffUT4 ffT4zQd6FtsiSYmc90XnpsawZzLPmLV0nbfyO5LVnOrvKDriLgtMN7TaSq2vOWla zzE9iZS8n2Ec772+DJeziW4rHnHfhHdCDdz8MtLHRaIBdXUTIm8QKphEivnoGtT1 HmumfDz6WAJoyZIQZG1GOokXXEOZa8Qe6QM9rhs02lC0aLE1ROoPWILcVpsXANrA vDLzNs8g9juCPsYoBSlNwRkiNJX9n1S7tNUmGHzxTOGEU3eYRUDHjnUOZgL7vxBS 8RDok/DVpkWucjzSOGWrnjUrZrHRHrD/6QMu4h8zSqdopkT8KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4yjiPn/81esm4bH007T/ruNcQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvYjJhNWViYjctOTc3Zi0z NTExLWJkY2UtMWUxYThiNWRmMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl ZGJlZmNiZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F50MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKKS2rCWzjFJVOnW1lDMo3qJNd1uKpjQrNHWD0MOYbHa8txElBC1zsu Cc7kR4EnQPrK/xjh4A43gbR4PMa2rAd0NnZx0HTKaDEhb/uEQRE8IwMFo7TA0//D OxuEEHwTVv2BSV2OinWkLnsvAGSP9aqN6qlcJl7GNtIJPhGOvlaKxLvO0+vHQOFE YfyZfru21fYRm1XCvjOKluIkK+B/R/JJzA+pF7fYnsHIjFZ9rDReB2Gy3pZKYu2o aTCHRz1Rd6Q2dnGqTaWmNTkJX/rM7zEK1hg7z+B4hpAkB/SCBti/a/xSQyzkfLEF c0qSPN1nfSPVprEhuyTI4unkIBMCedE= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:43 2024 by rpki-client on console-ams.rpki-client.org