$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa File: d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json) Hash identifier: BwzVStIZYFeheeuBXlcOEsvM8nhfKg4wFZwXeay8Nk8= Subject key identifier: 56:B1:9F:BD:EC:49:E6:84:95:69:43:C9:24:F9:9E:E7:71:B3:CD:85 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F432858478B510C1952A2BB744257FF40 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa Signing time: Tue 15 Oct 2024 01:00:35 +0000 ROA not before: Tue 15 Oct 2024 01:00:35 +0000 ROA not after: Mon 13 Jan 2025 02:00:35 +0000 asID: 23470 IP address blocks: 209.222.100.0/24 maxlen: 24 209.222.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8b:51:0c:19:52:a2:bb:74:42:57:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Oct 15 01:00:35 2024 GMT Not After : Jan 13 02:00:35 2025 GMT Subject: CN=f3f3963d-360a-4298-94ce-8a7c02b85747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:c9:f1:52:24:d3:3c:25:4c:17:38:1f:b4: 85:f6:c8:94:5c:0c:58:c5:05:d4:ad:a8:a9:b1:91: 66:b4:6e:d5:81:c8:de:f7:6e:e5:e4:c6:b0:51:91: a0:c2:0d:6b:24:4a:41:7d:74:d8:16:ea:c7:cb:1e: 9e:09:15:0d:23:23:e8:78:50:b5:9c:96:40:35:39: c9:da:35:3d:93:f2:d2:90:0e:b7:37:6c:e0:4d:a7: e4:e5:a9:4a:60:0e:51:74:5a:93:a9:c6:a2:83:5c: 23:e5:24:e4:3a:f8:4a:ff:1b:fa:9b:1d:4a:bd:88: 03:58:67:13:08:11:1a:72:a2:bd:4c:9f:bc:d5:89: a0:de:15:7a:f7:19:a5:f8:54:d1:a7:57:39:70:ef: 1c:cb:0b:34:5f:12:5c:a9:45:b3:d9:5b:c0:dc:90: a5:f5:45:dc:a9:f1:02:2b:9d:7a:ac:0a:a4:47:a9: ce:61:21:43:0f:01:de:3d:ee:5f:69:33:3f:98:28: f5:c2:56:13:f2:22:ff:6e:9d:02:f3:2b:b1:5f:71: 58:58:4d:5c:fd:7d:2c:f3:ec:48:e0:8e:85:00:e6: 1c:af:c8:fd:69:41:90:40:3c:ea:67:86:2c:05:ef: 59:3e:ec:f5:d0:a3:3b:45:9e:36:de:57:43:30:75: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B1:9F:BD:EC:49:E6:84:95:69:43:C9:24:F9:9E:E7:71:B3:CD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 209.222.100.0/24 209.222.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a9:70:e5:6d:0a:ed:96:3b:01:9e:c8:b0:19:92:cf:f1:1a: a4:51:55:eb:4d:fd:09:e9:5c:53:6a:ee:4f:4f:32:80:12:44: 5b:ac:8d:13:33:be:c2:6b:74:ed:9a:05:87:d2:4f:61:39:af: f6:81:34:ea:58:dd:3c:f4:8d:8b:45:59:9e:69:e4:07:21:13: e9:0a:62:e8:59:3f:30:41:06:e4:7f:16:84:bb:58:c8:b9:e6: 1c:c2:67:6c:73:f1:ed:f7:4a:48:55:20:79:75:ef:13:eb:2a: 4c:a5:26:36:ca:c8:77:74:a4:b8:01:c6:73:16:17:a5:c7:f8: 39:e8:09:35:39:fe:1c:46:d1:04:76:83:48:c8:b1:9c:05:5b: 89:c6:97:81:bb:f1:9e:00:59:bf:08:d6:de:bd:7e:5c:00:fd: dc:e4:63:97:e7:fe:b1:c8:db:f7:9e:80:b9:2b:97:cf:0c:25: da:48:95:5d:e0:48:54:a9:ac:10:07:23:1c:39:37:a5:10:0c: 21:80:93:ef:34:03:94:bf:e3:84:f4:9f:af:d9:f7:81:3f:86: ae:88:41:e0:b5:42:cf:cc:96:f3:ce:b8:e0:6d:fc:0a:64:d1: 2b:eb:84:2a:69:1e:d6:69:42:e6:7d:d9:03:0e:69:dc:59:b8: 13:65:4e:d6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeLUQwZUqK7dEJX/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk ZjNmMzk2M2QtMzYwYS00Mjk4LTk0Y2UtOGE3YzAyYjg1NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT/J8VIk0zwlTBc4H7SF9siUXAxYxQXUraip sZFmtG7Vgcje927l5MawUZGgwg1rJEpBfXTYFurHyx6eCRUNIyPoeFC1nJZANTnJ 2jU9k/LSkA63N2zgTafk5alKYA5RdFqTqcaig1wj5STkOvhK/xv6mx1KvYgDWGcT CBEacqK9TJ+81Ymg3hV69xml+FTRp1c5cO8cyws0XxJcqUWz2VvA3JCl9UXcqfEC K516rAqkR6nOYSFDDwHePe5faTM/mCj1wlYT8iL/bp0C8yuxX3FYWE1c/X0s8+xI 4I6FAOYcr8j9aUGQQDzqZ4YsBe9ZPuz10KM7RZ423ldDMHVaNwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFaxn73sSeaElWlDyST5nudxs82FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZDFmMTZmMjEtMjEyMy0z NWUwLTllODctOTkxNGYwYjRkNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0d5kAwQA 0d5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFqpcOVtCu2WOwGeyLAZks/xGqRRVetN/QnpXFNq7k9PMoAS RFusjRMzvsJrdO2aBYfST2E5r/aBNOpY3Tz0jYtFWZ5p5AchE+kKYuhZPzBBBuR/ FoS7WMi55hzCZ2xz8e33SkhVIHl17xPrKkylJjbKyHd0pLgBxnMWF6XH+DnoCTU5 /hxG0QR2g0jIsZwFW4nGl4G78Z4AWb8I1t69flwA/dzkY5fn/rHI2/eegLkrl88M JdpIlV3gSFSprBAHIxw5N6UQDCGAk+80A5S/44T0n6/Z94E/hq6IQeC1Qs/MlvPO uOBt/Apk0SvrhCppHtZpQuZ92QMOadxZuBNlTtY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:04 2024 by rpki-client on console-ams.rpki-client.org