$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa File: 4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa (raw, json) Hash identifier: icB8dRZyOY3VHr6FcnM+53SGBDYUAeMjzWbc2zFBre0= Subject key identifier: 7F:2C:1B:5A:45:5A:44:2C:DA:7B:66:80:BC:FA:1D:4A:62:05:E5:06 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858479AABE0119951CA4A2045D7C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 14618 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e0:11:99:51:ca:4a:20:45:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=36a31cc0-1c44-4a7e-bb10-0e99befe6d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6f:f1:8f:48:e4:26:7b:06:f6:5e:4e:fc:5f: 3c:69:c8:e9:f8:16:89:70:43:00:2b:4e:c2:78:c3: f7:2b:db:5b:6f:10:57:97:80:3f:5d:3d:4f:ac:d2: 28:b7:42:21:30:cb:8f:01:74:3b:7f:22:fa:aa:aa: de:e1:d7:3d:44:a6:03:4e:8b:7c:5f:20:3d:2a:79: b4:07:6f:30:21:61:99:6c:c0:ff:9a:0f:1a:a8:55: a7:3d:a2:ee:95:d2:71:8e:1a:8e:43:79:92:82:b1: c8:ee:28:7d:5f:da:f3:ff:91:84:2b:eb:b1:4f:ca: 80:0b:2c:3a:c5:fe:d4:6f:8a:ba:88:1b:e6:d0:fb: b6:6a:1e:f0:e7:1c:0f:df:31:9c:43:db:99:24:b8: 81:7f:65:21:3d:b8:2a:95:9f:8b:6f:6b:a7:1d:14: dc:67:4a:1c:e0:ac:95:88:6f:50:90:02:ee:dc:5c: 5f:2e:a1:41:cd:4b:43:68:ce:81:7f:b2:44:3b:17: 51:00:48:f8:6e:b1:3d:0e:8c:3b:c6:d7:a5:b1:a2: 47:c4:e8:a3:15:27:9a:bf:d1:7b:18:d1:8a:85:21: 4f:d3:43:95:dd:ce:11:b7:18:1c:a0:95:08:1c:f2: 5a:14:f4:de:ff:31:a1:0e:33:a0:90:dc:c9:1e:98: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2C:1B:5A:45:5A:44:2C:DA:7B:66:80:BC:FA:1D:4A:62:05:E5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:95:fe:46:d7:22:2d:f6:d2:31:45:df:be:5f:44:0f:a6:b9: f2:0b:41:09:09:8f:63:d1:15:97:83:ad:e3:b5:f6:f3:6b:5f: 08:bb:04:3a:d4:b5:9f:b9:17:da:b0:02:a0:21:20:32:80:e3: 37:a3:79:01:fe:53:8d:22:ca:d2:6f:0a:ee:ed:c6:93:4e:e1: 88:ff:ad:bd:7b:26:07:e6:54:2e:68:5b:84:0b:50:bb:cb:57: f9:83:6b:75:9b:5e:5a:a2:df:93:f3:7a:ab:25:3a:1e:e1:bf: a4:67:5a:68:a4:d1:25:63:7c:cf:2a:9f:72:5d:65:7c:a6:f1: e4:89:db:10:80:90:97:75:c8:03:f6:38:48:e1:61:54:a1:f7: db:57:d0:62:31:85:12:9b:28:ce:8c:2c:5d:9b:46:3d:17:56: 24:dc:72:17:6a:53:f8:75:a6:b5:e3:f0:00:a6:68:27:b8:48: 55:36:83:ce:24:6f:9a:2f:9e:ac:f6:ea:d4:8f:c4:5c:21:6e: b9:e1:6e:fd:d1:b6:c4:1d:fd:2c:34:ea:87:a2:b4:d4:ae:bf: d5:34:f6:09:27:14:51:e5:1c:8b:be:69:13:f0:bb:b3:e4:00: f3:05:9b:88:1d:f2:5f:7c:9d:64:81:84:77:10:82:11:da:5d: f2:66:06:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+ARmVHKSiBF18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MzZhMzFjYzAtMWM0NC00YTdlLWJiMTAtMGU5OWJlZmU2ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m/xj0jkJnsG9l5O/F88acjp+BaJcEMAK07C eMP3K9tbbxBXl4A/XT1PrNIot0IhMMuPAXQ7fyL6qqre4dc9RKYDTot8XyA9Knm0 B28wIWGZbMD/mg8aqFWnPaLuldJxjhqOQ3mSgrHI7ih9X9rz/5GEK+uxT8qACyw6 xf7Ub4q6iBvm0Pu2ah7w5xwP3zGcQ9uZJLiBf2UhPbgqlZ+Lb2unHRTcZ0oc4KyV iG9QkALu3FxfLqFBzUtDaM6Bf7JEOxdRAEj4brE9Dow7xtelsaJHxOijFSeav9F7 GNGKhSFP00OV3c4RtxgcoJUIHPJaFPTe/zGhDjOgkNzJHpjcuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8sG1pFWkQs2ntmgLz6HUpiBeUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNGU0YzBlODEtZTE2Zi0z ZTg4LThlZjMtZWU0Zjg0NWFjOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOV/kbXIi320jFF375fRA+mufILQQkJj2PRFZeDreO19vNrXwi7BDrU tZ+5F9qwAqAhIDKA4zejeQH+U40iytJvCu7txpNO4Yj/rb17JgfmVC5oW4QLULvL V/mDa3WbXlqi35PzeqslOh7hv6RnWmik0SVjfM8qn3JdZXym8eSJ2xCAkJd1yAP2 OEjhYVSh99tX0GIxhRKbKM6MLF2bRj0XViTcchdqU/h1prXj8ACmaCe4SFU2g84k b5ovnqz26tSPxFwhbrnhbv3RtsQd/Sw06oeitNSuv9U09gknFFHlHIu+aRPwu7Pk APMFm4gd8l98nWSBhHcQghHaXfJmBvo= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:56 2024 by rpki-client on console-ams.rpki-client.org