$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa File: 38cff7ac-79e5-37d1-8a91-3327b27ea983.roa (raw, json) Hash identifier: tLokwiC4pEPjZKrjj/U/+5dQmP399i0Ft0K/2cJiXlE= Subject key identifier: 3C:10:99:F6:80:69:F7:C2:BF:FF:00:94:DB:A5:0C:17:3B:B4:A0:38 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F432858473095E5A00647502800D88AC0 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 46408 IP address blocks: 208.84.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:e5:a0:06:47:50:28:00:d8:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=650373bb-9977-48df-a853-cf88a5191cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:1a:a1:a9:23:35:98:bb:d1:04:bb:47:25: 71:46:f2:41:76:43:bb:98:dc:98:c9:14:09:c1:24: 25:f0:bb:7e:98:ca:d9:fb:c0:11:14:fd:6d:c3:86: 35:01:c5:f4:d9:70:0d:cc:5d:c9:75:b5:fd:71:8b: 9e:1d:69:50:2e:ee:b4:7d:55:7d:22:47:e5:07:fb: 38:8a:bd:ee:ee:52:3a:33:a9:8a:f1:b7:8e:14:e6: 59:3d:14:29:c4:de:92:1c:65:19:04:20:42:87:06: 1c:fa:fa:db:29:11:4f:5b:49:8a:df:d1:b0:f3:e3: 84:d7:a1:ab:d2:8e:7f:18:70:9c:cf:5e:74:62:ca: f2:fa:a1:e2:23:64:40:e9:c9:70:11:8c:59:1e:47: bb:bc:7b:c1:f9:75:ca:5d:5c:19:f6:e7:57:3c:52: ca:ac:f2:29:4a:55:ef:a0:d3:18:20:96:24:8d:b7: 27:f4:70:f4:12:3f:1e:d4:0f:9f:7a:0e:94:8a:ff: eb:b6:5d:e9:1b:c6:8a:fb:4d:c3:11:d9:61:a9:3e: 42:2e:68:ce:52:30:2b:74:0f:14:78:a5:8d:43:08: a7:b3:a2:3f:e1:d2:3a:aa:74:3b:15:1f:d7:22:9f: 66:ec:f4:03:f0:fc:ab:60:e3:f0:59:c9:f5:3a:0a: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:10:99:F6:80:69:F7:C2:BF:FF:00:94:DB:A5:0C:17:3B:B4:A0:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 208.84.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:79:29:6b:eb:11:23:c0:55:1e:01:8b:3e:3a:ba:58:30:c5: c2:5f:a3:e9:3f:83:38:2e:9f:e3:7f:19:82:40:9a:f1:5b:af: 89:6b:2b:b9:8e:0f:8f:f4:85:f0:8c:b9:43:80:10:dc:a5:89: 53:8b:57:fa:cc:1a:75:b3:5f:c7:28:c0:8f:c1:9e:c4:f8:8d: 45:39:06:96:73:23:a6:d4:cd:11:49:4d:91:73:23:b9:55:da: 1e:0b:d6:2e:10:8d:d1:b4:f0:50:f4:da:db:3b:d8:86:bd:50: 72:cc:32:dd:c5:46:51:5b:4f:c3:f7:0e:3d:1f:f8:23:af:6e: d6:1b:96:50:cb:d3:4d:31:d6:ac:d3:37:aa:6c:db:eb:50:49: 25:86:f2:57:8b:7d:e1:47:b8:e7:59:74:91:ef:ad:2a:7a:7e: e2:73:e8:e8:99:d2:54:91:8d:ab:67:fa:65:25:64:00:30:2c: 9d:71:ea:97:cd:cc:82:a3:b9:d7:2f:b5:0d:7e:ae:55:2b:ad: ea:8c:f3:c1:52:39:2b:f4:a7:5c:5c:ca:43:3a:b8:bb:cb:e9: 1a:78:cb:a3:7d:95:8a:5f:15:2b:d6:28:a4:19:3a:72:00:bd: a5:f6:61:eb:de:43:54:83:81:43:94:28:71:ca:45:2c:94:af: 8a:f2:b5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwleWgBkdQKADYisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk NjUwMzczYmItOTk3Ny00OGRmLWE4NTMtY2Y4OGE1MTkxY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmoaoakjNZi70QS7RyVxRvJBdkO7mNyYyRQJ wSQl8Lt+mMrZ+8ARFP1tw4Y1AcX02XANzF3JdbX9cYueHWlQLu60fVV9IkflB/s4 ir3u7lI6M6mK8beOFOZZPRQpxN6SHGUZBCBChwYc+vrbKRFPW0mK39Gw8+OE16Gr 0o5/GHCcz150Ysry+qHiI2RA6clwEYxZHke7vHvB+XXKXVwZ9udXPFLKrPIpSlXv oNMYIJYkjbcn9HD0Ej8e1A+feg6Uiv/rtl3pG8aK+03DEdlhqT5CLmjOUjArdA8U eKWNQwins6I/4dI6qnQ7FR/XIp9m7PQD8PyrYOPwWcn1OgoVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwQmfaAaffCv/8AlNulDBc7tKA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvMzhjZmY3YWMtNzllNS0z N2QxLThhOTEtMzMyN2IyN2VhOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF5KWvrESPAVR4Biz46ulgwxcJfo+k/gzgun+N/GYJAmvFbr4lrK7mO D4/0hfCMuUOAENyliVOLV/rMGnWzX8cowI/BnsT4jUU5BpZzI6bUzRFJTZFzI7lV 2h4L1i4QjdG08FD02ts72Ia9UHLMMt3FRlFbT8P3Dj0f+COvbtYbllDL000x1qzT N6ps2+tQSSWG8leLfeFHuOdZdJHvrSp6fuJz6OiZ0lSRjatn+mUlZAAwLJ1x6pfN zIKjudcvtQ1+rlUrreqM88FSOSv0p1xcykM6uLvL6Rp4y6N9lYpfFSvWKKQZOnIA vaX2YeveQ1SDgUOUKHHKRSyUr4ryteI= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:50 2024 by rpki-client on console-fra.rpki-client.org