$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa File: c8f662c9-10ab-353c-9436-2b1250c74c9a.roa (raw, json) Hash identifier: OOU7ZzxOcSsTIPYJdppTn3IWIx+VRPWWON3YsucoM68= Subject key identifier: 89:3E:95:A9:75:EA:59:E9:8E:26:44:68:95:AC:3F:FD:C4:F3:73:41 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584797E13BA2A332F3D888191200 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 54203 IP address blocks: 209.107.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:3b:a2:a3:32:f3:d8:88:19:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=d702e0a6-b589-4afd-bea0-1f60432c1e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:fa:5a:f5:fd:47:67:1c:a2:5f:e8:d8:02: 8f:7b:c1:68:15:ab:20:d0:af:be:ba:76:70:2b:cc: ac:81:96:0e:0f:09:6f:aa:d6:51:27:0d:2a:6b:04: 37:c2:bf:6e:35:54:cc:0e:a4:50:a8:6f:00:b7:f9: c7:15:86:bc:1b:f0:3a:14:34:45:09:b5:44:cc:ca: 08:91:91:62:20:61:e9:20:9f:0e:4a:f3:5c:82:5d: f9:e1:41:0a:c3:00:d2:6e:56:ff:23:76:be:a6:f1: b3:b2:b5:c1:df:0e:05:a6:69:8c:e3:79:f7:01:e8: 0c:cc:66:8e:cf:28:e4:ab:35:34:72:62:18:52:62: c6:41:2d:3e:84:6e:79:e9:92:a3:55:17:b4:7f:c8: aa:03:62:e3:28:d3:75:7f:10:d0:df:d7:f0:36:e9: 02:dc:76:23:43:e1:43:a5:5a:0f:ab:57:ad:6c:87: fa:d1:73:69:db:ff:b9:b9:8b:0e:f4:a4:7e:26:54: 91:71:a4:bc:ef:43:92:28:26:3c:ec:51:8a:1c:12: ff:af:5d:85:b9:c8:11:20:15:21:9c:1b:ce:4f:41: e3:a3:20:8f:68:f7:80:ec:ae:82:db:6c:17:ad:b8: 12:39:b2:21:e2:05:e8:5d:e6:59:74:28:74:2c:c2: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3E:95:A9:75:EA:59:E9:8E:26:44:68:95:AC:3F:FD:C4:F3:73:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c8f662c9-10ab-353c-9436-2b1250c74c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f3:e4:71:a1:ce:bd:e2:83:c7:27:90:3b:60:9d:e7:72:f4: ad:c5:43:41:80:cf:a1:06:a3:ad:52:7b:e3:11:48:c7:f9:bd: b6:49:01:ae:4e:ba:93:ed:e4:1d:d1:ca:5a:5e:6e:58:2d:d0: 11:3b:6a:3e:cc:f6:d0:1f:ce:4e:68:8a:74:12:97:24:33:21: ac:73:00:bb:13:16:7b:86:b0:fa:99:73:18:3b:1c:37:14:04: b2:60:2c:e6:d3:57:a9:4e:29:7e:65:4b:95:5a:d2:59:04:86: 53:89:e9:22:a8:c9:0d:06:84:fa:ce:f9:b7:a5:64:f1:6d:0f: 09:42:f5:53:cc:15:62:27:2b:67:ee:a8:51:84:2f:7d:bc:1e: 0b:1c:df:e8:35:f9:d1:7a:cd:09:69:45:98:28:f9:e1:b4:fd: 16:88:ff:4d:58:5a:72:bb:ea:f6:8d:63:26:7c:a4:e5:02:9b: 88:84:1a:e9:6a:c7:d3:6f:14:2a:ef:e2:f4:ce:10:c3:24:1e: 38:ac:8d:be:93:8c:9a:2a:0a:1f:d2:85:dc:31:0b:dd:eb:72: 56:43:f9:36:8d:5c:87:ab:30:4b:09:81:75:3a:b0:f8:a3:47: da:0a:f9:75:25:11:32:00:98:2f:70:90:aa:7c:a3:92:65:27: ea:6d:c1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TuiozLz2IgZEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk ZDcwMmUwYTYtYjU4OS00YWZkLWJlYTAtMWY2MDQzMmMxZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4T6WvX9R2ccol/o2AKPe8FoFasg0K++unZw K8ysgZYODwlvqtZRJw0qawQ3wr9uNVTMDqRQqG8At/nHFYa8G/A6FDRFCbVEzMoI kZFiIGHpIJ8OSvNcgl354UEKwwDSblb/I3a+pvGzsrXB3w4FpmmM43n3AegMzGaO zyjkqzU0cmIYUmLGQS0+hG556ZKjVRe0f8iqA2LjKNN1fxDQ39fwNukC3HYjQ+FD pVoPq1etbIf60XNp2/+5uYsO9KR+JlSRcaS870OSKCY87FGKHBL/r12FucgRIBUh nBvOT0HjoyCPaPeA7K6C22wXrbgSObIh4gXoXeZZdCh0LMKjpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk+lal16lnpjiZEaJWsP/3E83NBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYzhmNjYyYzktMTBhYi0z NTNjLTk0MzYtMmIxMjUwYzc0YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLz5HGhzr3ig8cnkDtgnedy9K3FQ0GAz6EGo61Se+MRSMf5vbZJAa5O upPt5B3Rylpeblgt0BE7aj7M9tAfzk5oinQSlyQzIaxzALsTFnuGsPqZcxg7HDcU BLJgLObTV6lOKX5lS5Va0lkEhlOJ6SKoyQ0GhPrO+belZPFtDwlC9VPMFWInK2fu qFGEL328Hgsc3+g1+dF6zQlpRZgo+eG0/RaI/01YWnK76vaNYyZ8pOUCm4iEGulq x9NvFCrv4vTOEMMkHjisjb6TjJoqCh/ShdwxC93rclZD+TaNXIerMEsJgXU6sPij R9oK+XUlETIAmC9wkKp8o5JlJ+ptwSs= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org