$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa File: 8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa (raw, json) Hash identifier: 6BYr5GirVcJlFTkh+RVXe2d6+nE+PKBuKic4dwoTer4= Subject key identifier: 10:AB:2D:27:E0:E0:4E:B5:7B:AE:7D:B4:FE:69:CC:7B:6C:03:B5:50 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F43285847521610E2ABA88D1797C5C880 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa Signing time: Tue 24 Sep 2024 13:00:40 +0000 ROA not before: Tue 24 Sep 2024 13:00:40 +0000 ROA not after: Mon 23 Dec 2024 14:00:40 +0000 asID: 19198 IP address blocks: 209.178.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:16:10:e2:ab:a8:8d:17:97:c5:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Sep 24 13:00:40 2024 GMT Not After : Dec 23 14:00:40 2024 GMT Subject: CN=be23d4d1-e75c-4f30-8db5-2acc78587687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:47:98:00:a7:4a:29:1c:9e:67:bd:35:5e: c9:9d:31:a3:67:85:37:21:7a:be:56:e0:fa:72:38: a8:32:36:65:ad:64:ea:3b:4d:9b:bd:cb:4f:a0:26: 16:ca:d6:fd:99:9e:5b:9c:4a:cc:55:e8:9a:b0:7a: dc:39:58:20:c1:95:af:e6:b8:73:a0:3f:97:92:d4: 5f:f8:ba:6a:42:23:52:9c:ce:c5:69:63:3a:c2:2f: 26:b5:e5:47:bd:49:27:70:f6:c7:e1:5a:fb:87:9f: 98:de:f8:de:10:72:fc:12:5b:2a:87:bf:19:fd:b4: ce:9b:e9:ec:34:b9:85:01:79:54:3a:d2:a3:3c:d6: da:9c:e8:0d:55:2d:96:56:73:5b:ae:d9:ce:52:75: be:df:41:71:48:ca:17:6c:2a:c1:95:1a:7a:91:79: ff:e2:09:46:0c:38:60:d6:e5:c4:88:b2:56:07:d1: 2e:3c:c7:b8:9b:ec:d6:d9:34:5f:21:d3:c5:e4:c0: 09:e1:04:5e:77:2e:38:69:49:f8:46:a6:bc:22:2b: 4e:ff:2b:48:69:b4:c6:72:d8:f2:b2:68:d0:e6:ee: 73:51:e9:8a:0f:0f:d5:22:a1:40:e0:31:cf:65:5d: 79:dd:a9:9b:14:15:72:05:b7:41:03:ab:e0:80:93: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:2D:27:E0:E0:4E:B5:7B:AE:7D:B4:FE:69:CC:7B:6C:03:B5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 209.178.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a3:96:c0:6a:3c:eb:91:63:a2:ec:b0:fd:04:1d:89:88:f0: fc:ef:38:93:74:70:cf:1a:6f:5e:c5:dc:d4:10:03:e4:f4:f9: d1:cb:a0:4c:76:5a:ff:5d:8f:c6:5c:4d:d5:a1:49:64:dc:7b: c5:bb:48:e0:7e:55:45:a5:4a:e1:16:67:56:85:17:20:a5:b2: 5f:3e:74:c0:8e:b0:19:ca:46:65:d7:a1:f0:30:1c:6d:13:28: 9e:62:c4:5a:77:4b:8b:af:03:84:f6:f6:dc:5c:73:3a:64:ef: 5d:47:4d:69:0e:70:6b:f6:09:43:ca:57:44:4a:bd:a7:b0:54: 9f:9f:e0:df:89:64:54:8a:fd:36:12:10:2d:cb:ec:35:69:a1: 80:ec:e4:d7:23:86:18:6a:90:8c:4f:97:22:40:b7:db:47:1f: 5c:9f:1c:95:22:bd:c7:9e:46:e9:59:21:af:fb:ae:fb:b1:f5: 8a:19:53:c7:14:80:65:94:89:59:19:95:74:16:5f:83:8d:aa: 57:9e:48:42:b6:86:5a:a7:92:f6:27:25:9a:06:6f:4b:cf:9c: a7:79:23:8f:03:a3:e8:4f:a6:3a:61:4a:e3:70:99:38:7b:43: 97:6a:8b:82:3a:cd:48:b3:69:30:56:b0:7d:c0:1b:14:de:2c: 56:b3:87:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhDiq6iNF5fFyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk YmUyM2Q0ZDEtZTc1Yy00ZjMwLThkYjUtMmFjYzc4NTg3Njg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvpHmACnSikcnme9NV7JnTGjZ4U3IXq+VuD6 cjioMjZlrWTqO02bvctPoCYWytb9mZ5bnErMVeiasHrcOVggwZWv5rhzoD+XktRf +LpqQiNSnM7FaWM6wi8mteVHvUkncPbH4Vr7h5+Y3vjeEHL8Elsqh78Z/bTOm+ns NLmFAXlUOtKjPNbanOgNVS2WVnNbrtnOUnW+30FxSMoXbCrBlRp6kXn/4glGDDhg 1uXEiLJWB9EuPMe4m+zW2TRfIdPF5MAJ4QRedy44aUn4Rqa8IitO/ytIabTGctjy smjQ5u5zUemKDw/VIqFA4DHPZV153ambFBVyBbdBA6vggJP+zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCrLSfg4E61e659tP5pzHtsA7VQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvOGVjZDY5NzgtYzFmMS0z YjlmLTkxMmUtZDRmNmMzMDZjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0bL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6jlsBqPOuRY6LssP0EHYmI8PzvOJN0cM8ab17F3NQQA+T0+dHLoEx2 Wv9dj8ZcTdWhSWTce8W7SOB+VUWlSuEWZ1aFFyClsl8+dMCOsBnKRmXXofAwHG0T KJ5ixFp3S4uvA4T29txcczpk711HTWkOcGv2CUPKV0RKvaewVJ+f4N+JZFSK/TYS EC3L7DVpoYDs5NcjhhhqkIxPlyJAt9tHH1yfHJUivceeRulZIa/7rvux9YoZU8cU gGWUiVkZlXQWX4ONqleeSEK2hlqnkvYnJZoGb0vPnKd5I48Do+hPpjphSuNwmTh7 Q5dqi4I6zUizaTBWsH3AGxTeLFazh+U= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org