$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa File: c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa (raw, json) Hash identifier: 2+fH0PcBmq6vz5v+bKyZGs5s9T+xyp4yYpHFcJjWq9A= Subject key identifier: 66:53:E1:7B:53:59:9B:2C:24:FD:27:E8:08:B1:8F:8E:82:49:60:64 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F432858471345A325D7D1249D955E0EB0 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa Signing time: Mon 02 Sep 2024 01:00:31 +0000 ROA not before: Mon 02 Sep 2024 01:00:31 +0000 ROA not after: Sun 01 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:13:45:a3:25:d7:d1:24:9d:95:5e:0e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Sep 2 01:00:31 2024 GMT Not After : Dec 1 02:00:31 2024 GMT Subject: CN=c6d97298-4303-41a7-9108-9e4b994d10bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:5c:75:b6:7c:70:6d:71:18:99:70:8f:dd: 44:4e:ea:80:9c:00:04:3e:f1:44:35:be:0e:0b:2f: 25:c5:7b:47:53:b1:9e:80:43:22:c2:42:c1:03:ba: b9:99:02:37:fd:74:5a:42:cd:ce:52:ee:fb:82:44: 4d:78:0d:52:c5:a8:ef:73:bc:ff:42:bd:f8:06:7d: 60:23:51:a9:76:46:6a:e1:8f:ab:bc:78:be:0b:22: ec:f8:27:76:c2:64:8b:31:38:01:d3:e7:2f:87:4a: f0:df:d0:89:d8:3a:76:b2:24:cb:dd:b9:81:92:02: 95:11:c0:cc:93:20:ce:40:01:5c:5e:67:9d:64:0a: ce:e6:2b:fa:b6:fa:e8:1f:64:54:c9:7d:ed:6e:6f: 88:ce:f0:55:9b:bf:ae:e3:cf:1d:be:bb:8c:48:b4: 4f:00:16:02:b6:ee:02:3b:4c:b9:93:b5:1f:20:1a: 9d:fd:2c:53:b0:34:97:4a:34:40:e3:5f:e1:c4:a2: d5:2e:b4:fe:74:9f:f2:56:5b:47:ea:ce:93:19:dd: d7:01:70:ae:d6:c2:91:63:22:fd:b2:b8:4e:b1:75: 04:b7:c9:cd:3c:47:23:d5:df:26:80:3d:ab:74:b9: c2:86:1d:f9:0a:40:88:e6:d1:50:a4:b5:9f:ca:8c: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:53:E1:7B:53:59:9B:2C:24:FD:27:E8:08:B1:8F:8E:82:49:60:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0b:d1:52:a4:b9:54:91:1c:31:55:44:5f:61:f0:e3:a8:3d: 57:8e:80:59:e7:ab:5f:92:f5:ec:69:43:5c:2c:50:7c:37:1d: 95:11:5b:05:fc:81:e2:d2:51:bb:9d:e1:78:c0:28:a3:e5:a2: 8c:f7:33:55:21:36:77:33:81:fd:4f:c5:78:9c:6b:07:0f:60: cf:ca:1b:86:20:56:da:fd:1f:1c:cf:f8:df:10:c9:ca:45:3f: 8a:f7:d5:f5:35:2f:cd:34:d3:0c:3d:34:98:6d:96:8b:33:8b: 61:d4:48:34:a9:18:7b:ec:4a:ae:6e:3d:80:2d:24:9a:08:2f: 98:76:f9:01:fa:7e:eb:e8:ef:f3:62:7a:18:7e:b9:7b:98:c7: ab:87:f2:31:22:b7:f9:5b:94:c6:91:0a:3b:ae:62:51:df:d6: 03:56:9d:6c:2b:21:4f:a2:e2:10:7d:75:9f:96:f1:90:c5:d0: 31:81:6a:0e:5a:a5:2a:82:8e:c5:a6:f5:c8:9a:9a:9e:40:d3: 3c:fe:b1:c0:d0:35:0a:9a:d4:92:b5:92:ef:43:d1:fb:99:c5: c8:67:e0:cc:36:78:cc:76:33:0d:8b:8f:e8:8e:2e:bb:86:8f: ef:63:81:c9:bc:fe:9d:c5:a4:94:ec:33:f9:a8:cc:61:a4:b1: c5:50:cf:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcTRaMl19EknZVeDrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI0MDkwMjAxMDAzMVoXDTI0MTIwMTAyMDAzMVowLzEtMCsGA1UEAxMk YzZkOTcyOTgtNDMwMy00MWE3LTkxMDgtOWU0Yjk5NGQxMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9BcdbZ8cG1xGJlwj91ETuqAnAAEPvFENb4O Cy8lxXtHU7GegEMiwkLBA7q5mQI3/XRaQs3OUu77gkRNeA1Sxajvc7z/Qr34Bn1g I1GpdkZq4Y+rvHi+CyLs+Cd2wmSLMTgB0+cvh0rw39CJ2Dp2siTL3bmBkgKVEcDM kyDOQAFcXmedZArO5iv6tvroH2RUyX3tbm+IzvBVm7+u488dvruMSLRPABYCtu4C O0y5k7UfIBqd/SxTsDSXSjRA41/hxKLVLrT+dJ/yVltH6s6TGd3XAXCu1sKRYyL9 srhOsXUEt8nNPEcj1d8mgD2rdLnChh35CkCI5tFQpLWfyoycKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZT4XtTWZssJP0n6Aixj46CSWBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvYzBkOTZkZWUtNjg2Ni0z NGNmLThhZDgtYjVlZmJmY2FjMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIL0VKkuVSRHDFVRF9h8OOoPVeOgFnnq1+S9expQ1wsUHw3HZURWwX8 geLSUbud4XjAKKPlooz3M1UhNnczgf1PxXicawcPYM/KG4YgVtr9HxzP+N8QycpF P4r31fU1L8000ww9NJhtloszi2HUSDSpGHvsSq5uPYAtJJoIL5h2+QH6fuvo7/Ni ehh+uXuYx6uH8jEit/lblMaRCjuuYlHf1gNWnWwrIU+i4hB9dZ+W8ZDF0DGBag5a pSqCjsWm9ciamp5A0zz+scDQNQqa1JK1ku9D0fuZxchn4Mw2eMx2Mw2Lj+iOLruG j+9jgcm8/p3FpJTsM/mozGGkscVQz2o= -----END CERTIFICATE-----Generated at Tue Oct 22 20:13:50 2024 by rpki-client on console-fra.rpki-client.org