$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json) Hash identifier: cgMJzrIOBkHGIU+uze6xcmF3G7i4lKDZO1uAZ/p1udc= Subject key identifier: F0:F2:28:8C:50:28:41:71:D9:AE:26:32:80:43:AF:55:AA:F5:30:70 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F43285847B7FBF2856F351A016EC3EEC0 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa Signing time: Thu 31 Oct 2024 01:00:31 +0000 ROA not before: Thu 31 Oct 2024 01:00:31 +0000 ROA not after: Wed 29 Jan 2025 02:00:31 +0000 asID: 13627 IP address blocks: 209.112.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b7:fb:f2:85:6f:35:1a:01:6e:c3:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Oct 31 01:00:31 2024 GMT Not After : Jan 29 02:00:31 2025 GMT Subject: CN=52b06801-881c-433f-93f5-de6dff8cda7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:71:63:d4:0f:1c:9d:5a:f9:e4:92:c7:d3:dc: 79:a4:87:b0:f5:2c:42:e0:cd:c4:d2:89:7c:2c:76: 99:23:a4:4d:de:92:58:8f:35:da:67:a4:67:e1:e8: e9:8b:33:e6:1a:8c:8b:91:24:99:cf:c9:73:4a:86: 46:0c:d0:17:4b:a8:0b:ed:40:a4:ca:f8:d0:54:e2: 13:11:50:e3:83:67:01:c7:1c:07:a2:7c:cc:df:aa: cf:f8:d8:fd:aa:ee:e8:07:a7:2e:1c:7a:09:e2:6d: fa:26:8b:95:c7:4f:04:96:06:12:c1:6f:7f:be:6d: a1:d4:f0:84:c0:77:23:a7:dc:3e:b2:eb:6e:2f:60: ca:ff:2a:28:09:c9:73:41:65:4a:a7:aa:37:4a:68: ed:f5:b1:d2:a5:a5:40:03:91:fd:0e:ed:1a:2d:40: fa:40:bc:a2:c2:5e:37:07:32:c0:ed:bf:1b:fb:8e: a3:13:77:fd:6a:8e:ae:62:12:e0:3d:92:eb:f7:a5: 3a:6b:02:a3:5e:72:cb:f2:63:82:e2:d9:75:3d:63: 73:5f:9b:f3:11:27:a7:8f:3b:c4:f4:6c:ee:78:ce: 1b:11:00:9e:5b:9a:2a:9d:ef:7f:67:7a:e9:aa:bd: 21:97:28:74:e5:ae:a0:3e:f7:22:f7:94:90:2d:76: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:28:8C:50:28:41:71:D9:AE:26:32:80:43:AF:55:AA:F5:30:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b4:f1:99:89:51:74:6a:0b:a9:af:a2:a5:0c:14:c0:82:16: 5f:8a:08:3f:34:e5:2b:66:ea:de:29:e2:92:f8:f5:66:bb:0f: 08:29:9b:cb:ce:e5:4f:df:66:89:4b:e1:e3:94:ab:f4:25:e8: 94:9c:c9:32:69:76:56:ba:bf:d5:d3:1a:a9:04:01:fa:7e:2d: 4c:f9:d3:a7:c0:7e:02:84:fc:f7:0e:6b:b4:3f:8b:91:a9:0c: 77:b4:03:b7:84:4c:f3:5c:dc:64:7d:0b:28:41:91:52:6e:7d: 31:83:b8:f1:a3:53:15:61:29:68:c2:ca:f9:a5:2e:70:10:fb: 9d:95:eb:a7:91:8a:c5:b8:6c:fd:a6:28:0a:1c:c3:a6:ae:8e: 74:ea:38:da:3d:85:37:61:03:24:fc:62:9d:9f:1e:7a:2c:08: a1:dd:dd:30:54:fa:a1:16:c2:9e:47:8a:85:14:13:48:fa:32: a1:77:0a:bb:0c:86:36:54:7e:98:5f:d4:25:46:93:3f:0b:70: cb:0e:aa:97:7e:2d:0d:82:0f:87:75:0f:82:4f:d5:6c:7d:d7: 1d:be:e2:02:bc:93:da:da:ba:74:e5:2e:c2:d3:bd:fe:55:85: 3a:22:f8:24:5b:26:48:c4:21:16:d0:a9:a2:c2:1a:4a:58:4c: 0b:03:fc:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe3+/KFbzUaAW7D7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI0MTAzMTAxMDAzMVoXDTI1MDEyOTAyMDAzMVowLzEtMCsGA1UEAxMk NTJiMDY4MDEtODgxYy00MzNmLTkzZjUtZGU2ZGZmOGNkYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Fj1A8cnVr55JLH09x5pIew9SxC4M3E0ol8 LHaZI6RN3pJYjzXaZ6Rn4ejpizPmGoyLkSSZz8lzSoZGDNAXS6gL7UCkyvjQVOIT EVDjg2cBxxwHonzM36rP+Nj9qu7oB6cuHHoJ4m36JouVx08ElgYSwW9/vm2h1PCE wHcjp9w+sutuL2DK/yooCclzQWVKp6o3Smjt9bHSpaVAA5H9Du0aLUD6QLyiwl43 BzLA7b8b+46jE3f9ao6uYhLgPZLr96U6awKjXnLL8mOC4tl1PWNzX5vzESenjzvE 9GzueM4bEQCeW5oqne9/Z3rpqr0hlyh05a6gPvci95SQLXYGcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDyKIxQKEFx2a4mMoBDr1Wq9TBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNDc2YzcxNGUtMmNmOS0z YjBkLWExNzktZjgzODcyNGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA208ZmJUXRqC6mvoqUMFMCCFl+KCD805Stm6t4p4pL49Wa7Dwgpm8vO 5U/fZolL4eOUq/Ql6JScyTJpdla6v9XTGqkEAfp+LUz506fAfgKE/PcOa7Q/i5Gp DHe0A7eETPNc3GR9CyhBkVJufTGDuPGjUxVhKWjCyvmlLnAQ+52V66eRisW4bP2m KAocw6aujnTqONo9hTdhAyT8Yp2fHnosCKHd3TBU+qEWwp5HioUUE0j6MqF3CrsM hjZUfphf1CVGkz8LcMsOqpd+LQ2CD4d1D4JP1Wx91x2+4gK8k9raunTlLsLTvf5V hToi+CRbJkjEIRbQqaLCGkpYTAsD/Ok= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org