$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/a820aa84-3b7e-3422-a459-12296d3fef75.roa File: a820aa84-3b7e-3422-a459-12296d3fef75.roa (raw, json) Hash identifier: xeGjE5V5M+oH9mnnndCFljPydSlE6i7sGIXebUCOLts= Subject key identifier: B0:1B:5C:81:3C:33:10:21:C9:D3:CF:04:22:15:8B:DA:82:BE:D1:21 Certificate issuer: /CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Certificate serial: 010D0C9F43285847362B664A503E3FF8F9107800 Authority key identifier: 9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/a820aa84-3b7e-3422-a459-12296d3fef75.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 46138 IP address blocks: 205.209.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:66:4a:50:3e:3f:f8:f9:10:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=3a5bc4f8-782a-4a01-a866-06892b0f41bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:5d:7c:2f:f6:b0:bf:3a:5d:5b:bb:11:9d: 1c:c0:01:c4:06:36:f4:ee:2b:80:c9:61:ce:35:cd: 72:c0:16:cc:68:95:6a:16:d0:1d:70:e8:39:15:79: cb:d5:d3:cd:20:d5:04:01:72:7c:85:36:41:2b:20: 08:d9:8c:f3:bc:80:da:a0:bd:70:dd:4d:d0:2e:e8: 33:a6:e4:ef:e9:21:aa:7f:79:ad:be:68:1b:5c:53: c3:f1:14:4a:37:0c:c7:9a:cd:d3:78:c7:ba:0d:cf: b7:45:28:32:4e:f5:7d:88:d7:98:f8:6c:b2:d2:ba: 24:f9:67:b1:bd:e9:af:fa:91:28:8d:29:4d:98:3c: 96:b8:4c:8f:5b:39:08:98:4d:cf:17:fd:ff:f9:f3: bd:8a:97:60:58:38:e3:3f:9e:2c:cf:9b:06:ae:eb: 83:ad:57:09:cf:e7:45:a2:c4:c6:61:92:65:dd:d6: 4b:f6:e4:20:45:45:7c:7b:de:5e:cb:be:0c:e3:0b: 8c:5d:64:d7:70:69:6f:ae:4a:d7:4d:41:8c:d3:4c: e7:f2:dd:af:e7:91:4c:6f:05:8e:94:4b:1f:c5:59: 37:f5:4a:89:53:97:0d:c2:44:21:31:a7:12:2a:6c: ad:b7:30:43:aa:cb:70:e9:a4:8b:c4:5e:c3:3c:73: e9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1B:5C:81:3C:33:10:21:C9:D3:CF:04:22:15:8B:DA:82:BE:D1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/a820aa84-3b7e-3422-a459-12296d3fef75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl X509v3 Authority Key Identifier: keyid:9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer sbgp-ipAddrBlock: critical IPv4: 205.209.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5d:42:70:1b:aa:94:84:52:5b:24:85:e4:03:51:a0:12:6a: 3d:cf:b9:ae:b4:47:01:18:4a:16:b2:f6:8f:d5:d5:50:9b:9a: 57:3a:06:00:31:d3:73:21:18:3d:90:ef:c4:eb:ab:e2:fd:ea: 81:81:1c:be:4a:3b:6a:b9:c7:0e:f6:47:d8:10:06:8e:a9:d6: 45:e0:9d:89:a9:eb:3f:91:94:4a:f0:97:49:3d:94:bc:7d:c3: 17:30:87:54:e1:f1:68:dc:33:a2:d1:3f:e7:55:fb:48:14:c6: f7:aa:84:05:40:17:c6:d5:f8:9a:31:66:3f:0a:d9:4f:94:e6: 9e:4a:d0:12:34:8c:76:b9:17:04:a3:23:b9:69:2a:e8:94:e0: 8e:96:26:9e:97:02:9f:3e:40:35:98:ac:b1:7f:fe:1c:28:8d: 9a:a7:5d:13:45:a6:2c:a3:01:f5:70:6c:84:0a:f0:83:dc:92: e0:06:11:f7:d5:f7:75:39:e7:57:71:38:e4:06:cc:d7:ee:12: 8f:f5:80:41:ce:18:8e:98:ad:f8:db:9d:7b:f4:8e:7d:19:84: c5:4f:93:54:0a:cf:1a:d7:c1:21:5e:22:1e:04:2f:73:e3:3e: d4:2c:8c:bd:d0:72:4e:2b:4e:8d:84:29:99:57:8c:cd:92:a1: 90:17:e1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K2ZKUD4/+PkQeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmZWMzODMtODdhMi00NDI5LTkzYWUtYTQwN2M2OTBh NGUwMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk M2E1YmM0ZjgtNzgyYS00YTAxLWE4NjYtMDY4OTJiMGY0MWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWxdfC/2sL86XVu7EZ0cwAHEBjb07iuAyWHO Nc1ywBbMaJVqFtAdcOg5FXnL1dPNINUEAXJ8hTZBKyAI2YzzvIDaoL1w3U3QLugz puTv6SGqf3mtvmgbXFPD8RRKNwzHms3TeMe6Dc+3RSgyTvV9iNeY+Gyy0rok+Wex vemv+pEojSlNmDyWuEyPWzkImE3PF/3/+fO9ipdgWDjjP54sz5sGruuDrVcJz+dF osTGYZJl3dZL9uQgRUV8e95ey74M4wuMXWTXcGlvrkrXTUGM00zn8t2v55FMbwWO lEsfxVk39UqJU5cNwkQhMacSKmyttzBDqstw6aSLxF7DPHPpsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAbXIE8MxAhydPPBCIVi9qCvtEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmZl YzM4My04N2EyLTQ0MjktOTNhZS1hNDA3YzY5MGE0ZTAvYTgyMGFhODQtM2I3ZS0z NDIyLWE0NTktMTIyOTZkM2ZlZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJmZWMzODMtODdhMi00NDI5LTkz YWUtYTQwN2M2OTBhNGUwLzRiZmVjMzgzLTg3YTItNDQyOS05M2FlLWE0MDdjNjkw YTRlMC5jcmwwHwYDVR0jBBgwFoAUnzi76BLH2dRniIyhM513fN0fICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmZlYzM4My04N2EyLTQ0MjktOTNhZS1hNDA3 YzY5MGE0ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9dQnAbqpSEUlskheQDUaASaj3Pua60RwEYShay9o/V1VCbmlc6BgAx 03MhGD2Q78Trq+L96oGBHL5KO2q5xw72R9gQBo6p1kXgnYmp6z+RlErwl0k9lLx9 wxcwh1Th8WjcM6LRP+dV+0gUxveqhAVAF8bV+JoxZj8K2U+U5p5K0BI0jHa5FwSj I7lpKuiU4I6WJp6XAp8+QDWYrLF//hwojZqnXRNFpiyjAfVwbIQK8IPckuAGEffV 93U551dxOOQGzNfuEo/1gEHOGI6YrfjbnXv0jn0ZhMVPk1QKzxrXwSFeIh4EL3Pj PtQsjL3Qck4rTo2EKZlXjM2SoZAX4dk= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:02 2024 by rpki-client on console-fra.rpki-client.org