$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa File: 470a0d1c-0b52-3d81-807b-734f35cf00ea.roa (raw, json) Hash identifier: 3oar+UAqPeFVHdbvlM7Y1UbRBM0iQaKO2U6ktstluLY= Subject key identifier: 1C:37:0E:71:61:42:56:AF:61:24:44:31:61:6A:F0:90:ED:11:6C:59 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858478E1BBECFA80F49F65F76BA50 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 14618 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:be:cf:a8:0f:49:f6:5f:76:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=4cdd5166-4fe7-4aec-bdf0-f43dcb99da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1c:31:df:9f:51:fc:79:02:3e:b1:98:77:28: 1d:02:bc:82:65:c1:0e:0a:ee:14:d3:4c:9d:e4:7d: c5:88:ff:42:de:d0:d1:f2:3c:77:43:96:29:de:b6: 7a:17:6f:24:27:bf:b7:97:7b:17:72:c0:e4:88:22: d2:18:3d:54:9e:da:8c:22:c7:0d:eb:64:e6:0d:d4: 5a:b0:e0:a4:11:d9:7e:b1:96:a7:54:9b:1f:98:3f: 11:7c:d0:7d:ec:83:f4:48:82:be:a7:be:60:77:45: df:3e:c7:40:1f:05:59:d8:23:3d:0c:bc:61:16:62: 63:e5:3b:d2:d2:f9:d1:23:85:75:88:7f:69:b7:24: d2:02:c7:70:ba:66:c2:6a:4f:e3:90:71:93:07:63: 90:39:01:aa:55:b5:d9:85:f2:fc:15:93:1b:fb:48: 8e:9d:ee:90:4b:87:d6:85:c0:ad:f6:57:0b:c6:a1: 4f:cd:47:01:4a:0f:ce:b3:60:9d:e4:78:02:10:f9: 5e:41:1d:82:f6:f8:19:b7:6c:d0:94:9e:a1:ad:64: c0:c7:f9:e4:b3:2a:28:dd:1d:f7:cd:38:3a:4e:2d: 61:18:d2:37:b3:60:db:da:14:3c:b9:ee:66:ab:42: ad:08:a9:32:84:b5:a0:4a:ff:cf:54:3f:a5:e1:df: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:37:0E:71:61:42:56:AF:61:24:44:31:61:6A:F0:90:ED:11:6C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:50:bd:53:d8:9d:bc:09:8b:94:84:18:85:1b:c6:80:3f:47: c5:54:14:06:e3:b7:7b:52:13:be:95:54:02:d1:1a:cd:4f:84: 3d:c3:d2:2b:e5:d4:d7:c1:2a:37:fe:e0:2d:2e:bb:b7:52:aa: 58:46:ad:e2:92:55:3e:7e:2c:30:86:a5:96:1d:bc:d4:57:11: 13:83:99:e8:39:50:9a:70:0a:40:3e:f7:fb:2b:93:17:e8:aa: f2:fc:6a:82:20:fc:92:05:4d:6e:90:bb:b2:fc:07:5e:55:b0: 05:b3:93:b2:bc:19:ea:b5:a8:23:59:fd:8f:c9:4d:48:6b:ee: 4e:60:6e:2c:df:d3:75:c5:30:03:14:5d:cf:7c:a5:e1:23:39: 1f:be:52:c1:9b:a2:12:92:1f:fb:3a:b9:c4:e9:90:55:ca:b5: a0:97:2f:a9:c3:e0:6a:8c:72:8d:d9:6d:ec:83:e6:e0:cc:1e: 63:19:c4:0f:a9:b6:de:16:72:63:5c:99:67:eb:9a:5f:40:44: 2f:d4:c7:b9:04:4e:eb:41:e1:de:f9:d4:15:cb:41:9b:bd:50: e7:83:4f:3f:c6:76:2c:f5:e6:66:5c:53:11:26:70:64:c0:4e: 8e:10:6f:34:9a:90:c6:f9:03:66:28:1b:e2:f4:7e:19:6a:e9: 0e:1c:56:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG77PqA9J9l92ulAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk NGNkZDUxNjYtNGZlNy00YWVjLWJkZjAtZjQzZGNiOTlkYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xwx359R/HkCPrGYdygdAryCZcEOCu4U00yd 5H3FiP9C3tDR8jx3Q5Yp3rZ6F28kJ7+3l3sXcsDkiCLSGD1UntqMIscN62TmDdRa sOCkEdl+sZanVJsfmD8RfNB97IP0SIK+p75gd0XfPsdAHwVZ2CM9DLxhFmJj5TvS 0vnRI4V1iH9ptyTSAsdwumbCak/jkHGTB2OQOQGqVbXZhfL8FZMb+0iOne6QS4fW hcCt9lcLxqFPzUcBSg/Os2Cd5HgCEPleQR2C9vgZt2zQlJ6hrWTAx/nksyoo3R33 zTg6Ti1hGNI3s2Db2hQ8ue5mq0KtCKkyhLWgSv/PVD+l4d8JKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw3DnFhQlavYSREMWFq8JDtEWxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvNDcwYTBkMWMtMGI1Mi0z ZDgxLTgwN2ItNzM0ZjM1Y2YwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlQvVPYnbwJi5SEGIUbxoA/R8VUFAbjt3tSE76VVALRGs1PhD3D0ivl 1NfBKjf+4C0uu7dSqlhGreKSVT5+LDCGpZYdvNRXERODmeg5UJpwCkA+9/srkxfo qvL8aoIg/JIFTW6Qu7L8B15VsAWzk7K8Geq1qCNZ/Y/JTUhr7k5gbizf03XFMAMU Xc98peEjOR++UsGbohKSH/s6ucTpkFXKtaCXL6nD4GqMco3ZbeyD5uDMHmMZxA+p tt4WcmNcmWfrml9ARC/Ux7kETutB4d751BXLQZu9UOeDTz/Gdiz15mZcUxEmcGTA To4QbzSakMb5A2YoG+L0fhlq6Q4cVjk= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:36 2024 by rpki-client on console-fra.rpki-client.org