$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa File: ca248d62-3f50-35a2-9999-0258d4f72f02.roa (raw, json) Hash identifier: TyvrQIGrvFJYO1AifMh5IZ8s0rs8xVM1Kuu8xVjiJ0E= Subject key identifier: 2C:57:11:8B:25:53:BC:7B:27:F0:12:20:F6:26:9D:5D:95:EA:46:4A Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F432858473E8B4B8D528DA0D00B38C2C0 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa Signing time: Tue 17 Sep 2024 13:00:41 +0000 ROA not before: Tue 17 Sep 2024 13:00:41 +0000 ROA not after: Mon 16 Dec 2024 14:00:41 +0000 asID: 8014 IP address blocks: 204.236.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3e:8b:4b:8d:52:8d:a0:d0:0b:38:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Sep 17 13:00:41 2024 GMT Not After : Dec 16 14:00:41 2024 GMT Subject: CN=b664edea-c151-4c4c-b59c-162ff7da9225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:7c:ec:8a:6a:18:70:13:ef:18:63:dc:9f: 8b:07:3a:1d:e1:37:35:45:3d:4b:a3:e3:92:73:b7: 2a:d9:92:21:be:b9:0e:f3:42:77:9c:7b:da:f7:9e: b3:bf:8c:50:0e:1e:b0:7b:07:29:44:14:e1:de:d6: dd:ca:1a:eb:cc:44:66:7b:5d:50:f2:e2:a7:38:3b: 86:a9:57:d5:97:83:04:b9:6f:44:b6:0a:67:cd:7f: ae:6d:a3:64:89:1f:12:b9:36:73:9d:48:ef:4c:07: 92:5e:cd:73:9f:b6:ba:ff:9c:23:38:92:ec:63:cb: b7:fa:ac:f7:97:be:2b:b1:2e:be:f0:38:02:6f:1d: 35:ee:a6:be:b7:6f:ac:f7:c2:5f:c9:36:55:d9:b0: 04:e8:b9:99:c2:ef:3a:9c:a5:ec:f2:da:f9:a7:79: 53:18:24:d1:f3:68:b2:7c:3f:2b:78:83:c9:44:db: 9c:c3:b7:61:ad:72:62:ed:3b:ec:27:e4:92:6c:e7: ca:87:dd:30:80:42:9d:43:68:f6:e5:93:18:5a:bf: 5c:3d:9b:65:34:9d:8a:ac:49:13:28:cf:1d:73:10: f4:51:b5:7e:34:85:46:25:4f:a5:a0:9e:7d:10:df: df:4e:e5:8d:4f:b3:6f:4e:ce:4b:fe:cf:d6:f0:af: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:57:11:8B:25:53:BC:7B:27:F0:12:20:F6:26:9D:5D:95:EA:46:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4a:9f:e9:b9:18:5c:aa:ca:4e:25:ab:bc:db:be:56:0a:11: c2:a3:d7:5e:9a:3d:ba:1c:cb:94:d9:e2:e2:63:73:ae:28:8e: 1b:9f:dc:80:c8:e9:6d:b5:36:a6:51:54:b6:02:57:b5:e5:3c: 6f:ab:c9:43:e0:3b:68:76:55:1a:83:ba:8f:22:8f:62:14:48: 31:31:27:95:32:f9:93:2d:1d:75:a7:94:f3:18:f0:8e:68:ca: d0:ab:b2:39:78:47:d8:d1:4e:32:07:4c:c1:6d:69:f7:0a:c8: 9b:d1:08:2a:2e:89:12:bf:ad:da:74:7d:82:d8:59:39:8e:46: 36:22:9b:b9:bc:5a:a0:25:90:da:82:0c:42:8b:49:50:7a:43: 64:d0:66:49:a2:38:9f:87:8c:a0:58:1a:34:63:ad:60:c4:5a: 16:63:40:20:01:ef:14:a7:75:6b:2e:f8:fe:64:f7:6e:cf:83: dc:11:f1:63:cd:d8:c3:56:07:4d:34:fb:c0:05:35:a0:a2:00: 70:78:ab:e0:67:ad:fb:16:41:1a:70:22:11:54:da:fa:6f:4f: a5:88:ec:c0:42:fe:6f:b2:75:4c:33:9b:85:83:4c:35:ed:e5: 85:9d:05:0e:b0:01:22:03:73:f8:10:95:f3:57:3f:43:e4:5d: 03:44:d6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc+i0uNUo2g0As4wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI0MDkxNzEzMDA0MVoXDTI0MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YjY2NGVkZWEtYzE1MS00YzRjLWI1OWMtMTYyZmY3ZGE5MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gV87IpqGHAT7xhj3J+LBzod4Tc1RT1Lo+OS c7cq2ZIhvrkO80J3nHva956zv4xQDh6wewcpRBTh3tbdyhrrzERme11Q8uKnODuG qVfVl4MEuW9EtgpnzX+ubaNkiR8SuTZznUjvTAeSXs1zn7a6/5wjOJLsY8u3+qz3 l74rsS6+8DgCbx017qa+t2+s98JfyTZV2bAE6LmZwu86nKXs8tr5p3lTGCTR82iy fD8reIPJRNucw7dhrXJi7TvsJ+SSbOfKh90wgEKdQ2j25ZMYWr9cPZtlNJ2KrEkT KM8dcxD0UbV+NIVGJU+loJ59EN/fTuWNT7NvTs5L/s/W8K9h+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxXEYslU7x7J/ASIPYmnV2V6kZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvY2EyNDhkNjItM2Y1MC0z NWEyLTk5OTktMDI1OGQ0ZjcyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhKn+m5GFyqyk4lq7zbvlYKEcKj116aPbocy5TZ4uJjc64ojhuf3IDI 6W21NqZRVLYCV7XlPG+ryUPgO2h2VRqDuo8ij2IUSDExJ5Uy+ZMtHXWnlPMY8I5o ytCrsjl4R9jRTjIHTMFtafcKyJvRCCouiRK/rdp0fYLYWTmORjYim7m8WqAlkNqC DEKLSVB6Q2TQZkmiOJ+HjKBYGjRjrWDEWhZjQCAB7xSndWsu+P5k927Pg9wR8WPN 2MNWB000+8AFNaCiAHB4q+BnrfsWQRpwIhFU2vpvT6WI7MBC/m+ydUwzm4WDTDXt 5YWdBQ6wASIDc/gQlfNXP0PkXQNE1gA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:41 2024 by rpki-client on console-ams.rpki-client.org