$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa File: 21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa (raw, json) Hash identifier: u0fD78zJgi6sdcEIYdFPPRIpSofNMUtpRb1xvPdu2zM= Subject key identifier: 0F:A0:A5:91:4D:FA:EB:C7:B4:7F:32:96:53:73:BA:E3:4F:81:64:02 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F432858472B77A93B7E30EEEF50434300 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa Signing time: Tue 10 Sep 2024 17:00:49 +0000 ROA not before: Tue 10 Sep 2024 17:00:49 +0000 ROA not after: Mon 09 Dec 2024 18:00:49 +0000 asID: 62240 IP address blocks: 209.107.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:77:a9:3b:7e:30:ee:ef:50:43:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Sep 10 17:00:49 2024 GMT Not After : Dec 9 18:00:49 2024 GMT Subject: CN=429debf5-da67-4b7c-86fd-e7c1200744d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bf:0c:83:a4:03:24:50:3b:93:82:a6:fc:4d: 3f:75:5f:05:88:2f:e9:b7:dc:f1:e6:34:f3:48:ab: 85:c5:f5:5c:88:d8:80:c5:be:70:71:dd:9f:31:20: ff:4e:e0:38:82:43:87:cd:9f:19:51:68:ba:4f:d6: 1c:29:d1:b3:4b:19:32:87:5e:d5:c5:89:d6:e2:b5: c4:1c:f0:fa:57:ad:92:1f:6f:54:21:60:79:e9:d9: 3d:a0:92:c7:d6:7c:67:6d:53:8b:17:82:fe:42:d7: 78:71:21:50:f1:4e:f6:88:ee:28:f2:d3:7c:71:d1: 8b:93:93:6d:1c:2a:90:2c:5b:7b:91:4e:10:38:60: a3:f1:5a:eb:a1:26:04:67:4c:b7:b5:77:f1:2d:26: 76:d9:a1:97:d6:ba:8c:ad:b1:16:8b:41:b1:d0:a3: 83:52:c6:ae:34:b7:23:33:3b:9f:0b:2f:3a:50:80: 94:e3:f7:b3:77:77:f1:be:f1:1d:c5:a9:e1:58:2b: d5:ee:06:c9:fc:65:03:4b:62:97:96:f7:31:70:7a: 6d:29:38:95:26:38:38:6c:df:b7:ad:2a:cb:42:15: 56:3c:e3:5d:71:15:be:9e:d5:3b:a6:75:ab:bc:d6: 48:66:4b:c5:fe:30:de:ef:cf:79:2c:9e:31:64:01: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:A5:91:4D:FA:EB:C7:B4:7F:32:96:53:73:BA:E3:4F:81:64:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:08:bb:03:a3:d7:8d:ed:37:1f:63:91:c4:3b:71:3e:47:78: b2:28:7a:ee:9b:43:e0:59:09:0c:28:eb:2a:f1:2c:41:97:5e: a3:f6:6f:d2:5f:9c:e0:a4:fd:b8:ee:73:46:69:0d:45:e1:88: 27:f4:e0:02:d2:37:f5:82:bf:ff:f9:0e:0c:0a:da:ec:bb:c7: 88:94:20:5e:27:d2:7e:17:4f:36:90:e9:40:49:6f:2c:89:46: 74:f7:3a:9b:8b:41:f6:6e:b7:91:27:9f:7f:bb:20:9c:4f:96: 67:68:8f:17:b0:a2:9c:61:20:a7:f6:47:86:65:45:f7:58:e2: e4:94:da:f8:bc:a5:10:b6:91:83:31:d1:ea:4e:0d:95:98:58: 9b:8e:9f:ec:47:90:2e:27:52:a3:aa:61:19:52:12:f6:1d:99: 12:56:1e:ec:02:bd:55:63:cc:34:5b:d3:58:78:c1:9d:25:9b: b5:c6:b7:62:ce:13:02:66:63:1b:0a:95:7a:e3:cb:03:e9:01: 52:fc:14:9a:62:29:49:1d:a7:d8:3b:55:36:db:8f:15:8d:15: 34:f2:2b:65:39:f0:e2:14:89:5f:14:b5:e3:60:8c:23:4c:8a: 87:ee:72:c1:28:b3:fb:b6:0c:c4:5d:a0:2e:e8:34:48:4d:06: 46:40:c4:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrd6k7fjDu71BDQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI0MDkxMDE3MDA0OVoXDTI0MTIwOTE4MDA0OVowLzEtMCsGA1UEAxMk NDI5ZGViZjUtZGE2Ny00YjdjLTg2ZmQtZTdjMTIwMDc0NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh78Mg6QDJFA7k4Km/E0/dV8FiC/pt9zx5jTz SKuFxfVciNiAxb5wcd2fMSD/TuA4gkOHzZ8ZUWi6T9YcKdGzSxkyh17VxYnW4rXE HPD6V62SH29UIWB56dk9oJLH1nxnbVOLF4L+Qtd4cSFQ8U72iO4o8tN8cdGLk5Nt HCqQLFt7kU4QOGCj8VrroSYEZ0y3tXfxLSZ22aGX1rqMrbEWi0Gx0KODUsauNLcj MzufCy86UICU4/ezd3fxvvEdxanhWCvV7gbJ/GUDS2KXlvcxcHptKTiVJjg4bN+3 rSrLQhVWPONdcRW+ntU7pnWrvNZIZkvF/jDe7895LJ4xZAEHGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+gpZFN+uvHtH8yllNzuuNPgWQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjFhYjAzM2UtNDNiNC0z OGY1LTkyYmQtOWNjNjA4MWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMIuwOj143tNx9jkcQ7cT5HeLIoeu6bQ+BZCQwo6yrxLEGXXqP2b9Jf nOCk/bjuc0ZpDUXhiCf04ALSN/WCv//5DgwK2uy7x4iUIF4n0n4XTzaQ6UBJbyyJ RnT3OpuLQfZut5Enn3+7IJxPlmdojxewopxhIKf2R4ZlRfdY4uSU2vi8pRC2kYMx 0epODZWYWJuOn+xHkC4nUqOqYRlSEvYdmRJWHuwCvVVjzDRb01h4wZ0lm7XGt2LO EwJmYxsKlXrjywPpAVL8FJpiKUkdp9g7VTbbjxWNFTTyK2U58OIUiV8UteNgjCNM iofucsEos/u2DMRdoC7oNEhNBkZAxMI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:42:49 2024 by rpki-client on console-ams.rpki-client.org