$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa File: 518e9091-b854-3d66-ba08-f6d275b4138b.roa (raw, json) Hash identifier: DGol0jr54qT8auGeWqE10RcymjbHqcxMws9oU7ycTJQ= Subject key identifier: 2D:8D:4F:C9:76:3B:8E:BA:7B:23:A2:33:BA:BB:DE:2D:0E:6D:E3:FC Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F43285847A73BDCAEFC498C437F8F6040 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 46450 IP address blocks: 208.64.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:dc:ae:fc:49:8c:43:7f:8f:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=71c5062a-eaef-49d4-b739-dcaa0e3dd1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:d1:51:c3:2a:e8:1e:51:aa:8f:51:8e:15: 23:e9:ee:3c:87:2e:16:72:6c:a5:61:c6:62:8a:a7: 75:7f:30:6a:13:03:2f:9e:e6:99:f8:21:a2:8b:5e: 1a:56:e9:c7:bb:15:06:1b:e8:af:2c:1a:9a:de:22: 0e:a3:8f:7d:df:9c:10:54:02:4d:c9:92:e1:85:1b: 16:97:f2:31:dd:c5:b8:2f:fa:a3:e7:25:8f:ba:b7: 82:af:5e:74:0f:a9:2a:0c:58:78:25:50:4c:fe:06: 8c:6f:8a:d0:88:e1:67:db:e3:43:60:43:0a:8f:e5: 57:3a:cb:af:39:75:b9:63:08:15:8d:f8:63:cd:87: 07:fa:11:75:15:82:c5:d7:0b:fa:e0:ed:d2:60:0c: c3:3f:0a:72:ff:bc:44:2d:f1:e4:8c:1e:c6:25:3f: 4e:6c:bf:63:87:2a:b5:7c:98:8f:fc:76:c0:a7:cd: c1:5b:da:55:86:87:5b:c7:2c:7e:5d:14:6b:f5:e1: 51:1b:a4:69:bf:ed:d7:56:8a:61:c1:cb:94:af:9c: a9:f1:38:31:ed:43:f0:e5:ae:62:28:c5:72:c2:60: 89:b9:74:c2:e6:92:6e:5b:91:25:61:79:48:bd:86: 2a:68:15:db:32:27:92:95:2a:e7:c1:eb:d9:19:2e: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8D:4F:C9:76:3B:8E:BA:7B:23:A2:33:BA:BB:DE:2D:0E:6D:E3:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/518e9091-b854-3d66-ba08-f6d275b4138b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 208.64.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:53:9a:6d:05:82:b1:a0:2e:12:57:60:5a:f1:31:68:ef:0c: fc:00:2a:c2:ed:39:38:3a:d9:5b:48:93:82:83:8f:00:42:cc: 4f:0f:6e:e1:83:3f:c3:c8:b2:df:b8:06:57:01:eb:e1:48:56: 3f:eb:75:9a:af:f0:21:8a:6d:66:64:bd:43:cd:97:37:e2:44: 72:5a:16:1e:4c:13:c9:65:18:6f:4d:ff:26:c1:84:b7:b0:4b: e7:d7:cc:81:ba:0d:03:27:c5:9e:02:79:06:5e:2e:c6:2c:c2: 71:07:af:86:1e:ff:7b:d0:a9:7c:99:22:50:84:84:0e:90:bc: b9:7d:ac:0c:79:46:f4:c0:62:5d:cd:f1:bd:2c:93:d9:73:2c: c2:d9:0d:1e:d6:38:c2:ee:6d:c7:77:df:93:05:a7:78:69:21: 8e:a8:4e:c2:02:42:73:49:51:4e:4b:61:30:7c:6a:54:c9:81: 97:ed:f5:35:94:79:43:bd:e1:3f:65:d3:84:d6:e2:64:99:c9: f1:a6:c9:2a:eb:87:7f:7e:04:27:1c:05:a4:19:61:bb:90:0b: 04:7e:f5:f5:7d:e9:85:49:56:0e:e2:a8:16:da:73:27:61:51: fa:8e:eb:68:f3:76:b4:05:a2:61:c8:b0:cb:8f:1b:d8:f2:36: 86:c5:bf:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO9yu/EmMQ3+PYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NzFjNTA2MmEtZWFlZi00OWQ0LWI3MzktZGNhYTBlM2RkMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HDRUcMq6B5Rqo9RjhUj6e48hy4WcmylYcZi iqd1fzBqEwMvnuaZ+CGii14aVunHuxUGG+ivLBqa3iIOo49935wQVAJNyZLhhRsW l/Ix3cW4L/qj5yWPureCr150D6kqDFh4JVBM/gaMb4rQiOFn2+NDYEMKj+VXOsuv OXW5YwgVjfhjzYcH+hF1FYLF1wv64O3SYAzDPwpy/7xELfHkjB7GJT9ObL9jhyq1 fJiP/HbAp83BW9pVhodbxyx+XRRr9eFRG6Rpv+3XVophwcuUr5yp8Tgx7UPw5a5i KMVywmCJuXTC5pJuW5ElYXlIvYYqaBXbMieSlSrnwevZGS5qKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2NT8l2O466eyOiM7q73i0ObeP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvNTE4ZTkwOTEtYjg1NC0z ZDY2LWJhMDgtZjZkMjc1YjQxMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EAbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxTmm0FgrGgLhJXYFrxMWjvDPwAKsLtOTg62VtIk4KDjwBCzE8PbuGD P8PIst+4BlcB6+FIVj/rdZqv8CGKbWZkvUPNlzfiRHJaFh5ME8llGG9N/ybBhLew S+fXzIG6DQMnxZ4CeQZeLsYswnEHr4Ye/3vQqXyZIlCEhA6QvLl9rAx5RvTAYl3N 8b0sk9lzLMLZDR7WOMLubcd335MFp3hpIY6oTsICQnNJUU5LYTB8alTJgZft9TWU eUO94T9l04TW4mSZyfGmySrrh39+BCccBaQZYbuQCwR+9fV96YVJVg7iqBbacydh UfqO62jzdrQFomHIsMuPG9jyNobFv/k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:42 2024 by rpki-client on console-fra.rpki-client.org