$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa File: ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa (raw, json) Hash identifier: ElPNiokmGTP+SWcFhF3HwX3n9Dj8RctAexx3GzYLo9s= Subject key identifier: 31:92:BB:9E:65:46:56:60:FF:B5:4B:87:3E:FE:D6:E5:03:1B:4D:6B Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F432858473A5B92E8FB80A7328038DB00 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 14618 IP address blocks: 208.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:92:e8:fb:80:a7:32:80:38:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=26746757-9905-4196-aa38-11b4916756ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:5c:8d:f3:ed:05:ab:4b:51:51:d1:77:68: 86:9c:c1:87:ee:de:ad:0d:da:12:d1:a6:65:54:63: 13:c3:d2:c8:87:1b:86:e3:41:5c:87:c5:3c:da:ec: bb:0c:d4:17:46:17:26:c0:c7:2c:f2:6f:1c:98:d9: 8f:5f:db:ae:1f:54:f5:32:31:38:63:82:11:da:64: 2f:eb:99:e2:2b:af:96:d3:27:50:48:c3:53:9d:45: 43:cb:d9:a2:2c:7e:bb:5b:b4:84:c0:e1:83:f0:a4: dc:bf:71:a3:c3:09:c2:4a:22:30:ad:fa:b3:ac:2f: bd:e3:38:48:db:51:c8:6e:f0:2a:de:17:f5:53:ba: 04:79:f8:3e:16:b2:b6:dc:08:ad:1c:7a:df:c8:e9: 42:1b:09:8c:fd:52:88:0d:be:c1:fb:9b:0b:92:f7: f4:d1:b8:a9:ba:25:9a:74:31:16:4b:8f:f7:ad:8f: 44:7e:7f:31:e1:bb:1a:c4:0b:ed:16:e3:90:f2:18: 42:13:e4:17:70:68:45:74:85:5a:01:a1:97:2a:59: 44:a2:74:74:59:63:f9:7e:58:dc:1f:85:af:04:07: a8:ce:96:1c:16:31:e2:9f:76:61:18:d9:da:fa:7b: 5a:a7:7a:e1:81:74:a7:f8:ad:00:25:48:0a:bf:da: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:92:BB:9E:65:46:56:60:FF:B5:4B:87:3E:FE:D6:E5:03:1B:4D:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 208.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9f:70:3a:7c:36:03:74:e2:13:c8:9f:11:df:85:51:aa:25: 77:74:2b:11:38:5d:5c:8d:82:a5:bd:f8:20:db:8d:4c:86:13: 97:c8:53:1a:2d:65:a7:a6:af:08:f3:86:5a:b5:53:1d:0d:06: 86:e4:5f:4e:d6:fd:cc:75:fd:0f:6a:7c:ce:64:6d:13:7a:9e: 5a:a2:38:dd:b8:c9:d9:81:b8:8f:72:58:3b:8f:d4:11:57:96: 40:19:9e:53:b2:18:46:9e:6b:8a:80:ca:b2:5d:63:e9:72:23: cf:f6:40:83:f1:55:2a:e6:d1:fe:a7:4a:c6:16:48:41:ff:50: da:d0:3f:ea:6f:8f:50:13:6d:d5:09:a5:0a:f5:a0:d6:01:93: b6:3a:6c:49:cb:ff:d9:81:2e:27:ee:ea:06:42:4a:44:89:b6: 73:52:53:af:64:75:06:30:92:83:ed:e1:bd:8a:d7:1e:bf:a1: ce:bc:15:5c:00:f5:e3:ce:af:81:5b:40:69:8d:43:80:70:37: b2:0c:4f:86:1f:0e:b1:97:d8:42:e1:70:6c:a9:39:7b:df:40: ae:3d:a9:2f:05:fc:1f:19:25:d7:42:7e:98:80:18:2c:ad:2e: 74:38:3d:17:da:31:bd:bf:52:46:4e:dd:85:65:ee:dd:6e:f0: 00:3b:81:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W5Lo+4CnMoA42wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk MjY3NDY3NTctOTkwNS00MTk2LWFhMzgtMTFiNDkxNjc1NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWRcjfPtBatLUVHRd2iGnMGH7t6tDdoS0aZl VGMTw9LIhxuG40Fch8U82uy7DNQXRhcmwMcs8m8cmNmPX9uuH1T1MjE4Y4IR2mQv 65niK6+W0ydQSMNTnUVDy9miLH67W7SEwOGD8KTcv3GjwwnCSiIwrfqzrC+94zhI 21HIbvAq3hf1U7oEefg+FrK23AitHHrfyOlCGwmM/VKIDb7B+5sLkvf00bipuiWa dDEWS4/3rY9Efn8x4bsaxAvtFuOQ8hhCE+QXcGhFdIVaAaGXKllEonR0WWP5fljc H4WvBAeozpYcFjHin3ZhGNna+ntap3rhgXSn+K0AJUgKv9r32wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGSu55lRlZg/7VLhz7+1uUDG01rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYWU4NTBiOGQtYmYxOS0z N2JlLTk3NmEtMmNjOTVlYjRiN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWfcDp8NgN04hPInxHfhVGqJXd0KxE4XVyNgqW9+CDbjUyGE5fIUxot Zaemrwjzhlq1Ux0NBobkX07W/cx1/Q9qfM5kbRN6nlqiON24ydmBuI9yWDuP1BFX lkAZnlOyGEaea4qAyrJdY+lyI8/2QIPxVSrm0f6nSsYWSEH/UNrQP+pvj1ATbdUJ pQr1oNYBk7Y6bEnL/9mBLifu6gZCSkSJtnNSU69kdQYwkoPt4b2K1x6/oc68FVwA 9ePOr4FbQGmNQ4BwN7IMT4YfDrGX2ELhcGypOXvfQK49qS8F/B8ZJddCfpiAGCyt LnQ4PRfaMb2/UkZO3YVl7t1u8AA7gcw= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:28 2024 by rpki-client on console-ams.rpki-client.org