$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf66bc07-3555-34cd-801b-4a2d2e3b500f.roa File: bf66bc07-3555-34cd-801b-4a2d2e3b500f.roa (raw, json) Hash identifier: cQZ102eH9yfXReO3Lahb9+ybSLD4Xuqj0admfMAwfhk= Subject key identifier: 42:2A:6F:F1:4E:9C:06:0A:EE:44:86:D6:EF:39:AB:47:93:7C:EE:60 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F432858472B11F117E012D64DA6813D80 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf66bc07-3555-34cd-801b-4a2d2e3b500f.roa Signing time: Mon 09 Sep 2024 12:00:00 +0000 ROA not before: Mon 09 Sep 2024 12:00:00 +0000 ROA not after: Tue 10 Dec 2024 05:00:00 +0000 asID: 15321 IP address blocks: 209.226.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:11:f1:17:e0:12:d6:4d:a6:81:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 9 12:00:00 2024 GMT Not After : Dec 10 05:00:00 2024 GMT Subject: CN=5b41144b-2427-4d5b-a43f-aeb50e5350f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:73:5b:68:b4:c9:25:fc:c8:52:18:0e:c3: 08:e8:b3:f9:09:cf:bf:30:38:63:9e:06:a5:c1:1a: 8a:75:d7:64:d9:f5:75:e0:aa:6d:d5:b6:f6:1f:30: 8f:a7:1d:2c:96:7b:cd:c1:66:ed:e0:e1:e2:3f:16: c1:ae:63:b8:a5:b9:64:64:62:00:70:1b:23:1f:b9: 00:b9:ae:90:4f:ae:bf:75:1b:22:aa:27:80:38:a6: 5f:e2:55:c4:bc:35:6b:81:73:22:d1:f1:79:ab:2a: ce:77:bb:2a:06:cd:20:d8:e8:b0:c1:57:60:55:74: 5c:00:b4:50:c5:93:6c:f3:d4:a6:65:e3:11:d6:28: 83:a5:3e:09:a0:0e:36:cc:fd:cf:23:a5:47:41:78: ef:44:ce:ed:4f:d2:24:b8:0e:6e:54:50:de:4a:b9: d3:b2:50:52:ce:d3:1c:b8:09:f7:f5:06:75:80:8e: be:bb:46:28:62:3f:82:33:b0:32:37:e0:ce:a3:3c: 52:24:d1:38:8b:4d:f6:30:56:d9:30:2a:60:2d:37: 81:79:2e:ec:f1:20:df:9b:81:40:17:95:af:69:1d: a3:24:91:84:e9:4b:0e:77:2d:88:e0:78:c2:75:34: 7a:2f:29:bd:63:7e:81:27:2b:ad:ad:de:e0:0b:eb: 67:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:6F:F1:4E:9C:06:0A:EE:44:86:D6:EF:39:AB:47:93:7C:EE:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf66bc07-3555-34cd-801b-4a2d2e3b500f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 209.226.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:61:98:0a:5b:ef:12:48:e8:b4:0f:54:64:8f:e8:1f:24:df: fd:78:ff:82:4c:bb:17:db:0a:d8:d0:95:19:ae:d5:35:6b:7f: 10:0e:97:ee:3d:40:5c:5b:2f:3d:fe:91:ec:97:51:72:87:fe: 39:0a:c4:0e:9b:d3:0a:ee:54:ed:03:b6:3c:5c:75:62:6a:1e: b3:a2:8e:60:f7:34:5a:2e:04:91:55:fd:e8:97:d7:88:f5:e6: 31:72:90:15:86:39:ca:1d:6e:37:8d:2b:d6:87:b0:e8:a6:73: dc:00:4f:9b:e2:c5:3a:00:a5:d8:ca:92:d6:fd:db:a7:91:bb: f9:0f:db:3d:d2:cc:05:32:fa:bf:24:2e:17:b8:ff:c9:82:db: f7:5b:9e:5c:13:1c:83:25:51:d6:cc:4f:6c:44:27:b8:6b:85: 63:fb:bf:cf:5f:ea:b1:53:6c:36:a0:49:67:f3:10:3f:45:ed: fe:05:59:22:b6:94:60:07:a6:91:9f:e5:5d:15:7e:ff:38:7e: b3:e0:95:70:ca:14:21:15:fc:51:11:fb:6c:aa:d8:88:03:46: 29:c3:35:21:cf:13:be:13:8f:c3:6b:e4:15:4e:e3:9f:36:47: 29:57:d6:d1:b5:76:fd:4e:dd:a3:1c:09:03:01:79:40:ef:80: 55:35:d3:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEfEX4BLWTaaBPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk NWI0MTE0NGItMjQyNy00ZDViLWE0M2YtYWViNTBlNTM1MGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlRzW2i0ySX8yFIYDsMI6LP5Cc+/MDhjngal wRqKdddk2fV14Kpt1bb2HzCPpx0slnvNwWbt4OHiPxbBrmO4pblkZGIAcBsjH7kA ua6QT66/dRsiqieAOKZf4lXEvDVrgXMi0fF5qyrOd7sqBs0g2OiwwVdgVXRcALRQ xZNs89SmZeMR1iiDpT4JoA42zP3PI6VHQXjvRM7tT9IkuA5uVFDeSrnTslBSztMc uAn39QZ1gI6+u0YoYj+CM7AyN+DOozxSJNE4i032MFbZMCpgLTeBeS7s8SDfm4FA F5WvaR2jJJGE6UsOdy2I4HjCdTR6Lym9Y36BJyutrd7gC+tnsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIqb/FOnAYK7kSG1u85q0eTfO5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYmY2NmJjMDctMzU1NS0z NGNkLTgwMWItNGEyZDJlM2I1MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChhmApb7xJI6LQPVGSP6B8k3/14/4JMuxfbCtjQlRmu1TVrfxAOl+49 QFxbLz3+keyXUXKH/jkKxA6b0wruVO0DtjxcdWJqHrOijmD3NFouBJFV/eiX14j1 5jFykBWGOcodbjeNK9aHsOimc9wAT5vixToApdjKktb926eRu/kP2z3SzAUy+r8k Lhe4/8mC2/dbnlwTHIMlUdbMT2xEJ7hrhWP7v89f6rFTbDagSWfzED9F7f4FWSK2 lGAHppGf5V0Vfv84frPglXDKFCEV/FER+2yq2IgDRinDNSHPE74Tj8Nr5BVO4582 RylX1tG1dv1O3aMcCQMBeUDvgFU103Q= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org