$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json) Hash identifier: Kx6/0GDpkfRIVQjdU3AevoKbogh6HG3jObbC2xV2b44= Subject key identifier: 56:11:E8:80:5E:E4:13:8F:FA:D8:F1:0E:9A:04:C6:C5:F4:3E:37:1C Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F43285847C344885B0BD8D1FE9FFC7B40 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 207645 IP address blocks: 209.240.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:88:5b:0b:d8:d1:fe:9f:fc:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=20738c1a-14be-4f43-a4e6-464f904512ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:4a:af:ac:f6:1c:75:3e:10:94:65:7a:08: eb:77:6f:e0:72:40:36:c2:06:8f:a7:fe:0a:88:6c: 00:42:89:e9:56:4f:07:37:84:51:c9:b7:3f:b5:84: 3b:78:61:2e:b0:35:19:28:e0:c8:c7:de:da:e3:4d: 9f:32:35:57:fb:45:34:02:5f:4e:16:b4:e9:15:5f: df:de:93:11:3d:af:a2:20:2d:de:e3:e7:fb:9f:8b: d7:b4:42:76:23:56:94:b3:09:a0:54:a4:a9:01:3a: b8:2b:38:4b:80:7a:6e:87:09:b3:cd:db:a6:3c:f9: 8b:b6:14:73:f4:43:71:61:84:57:a4:85:1c:f8:d7: 0e:3a:4f:d1:f5:21:5c:c0:15:23:ee:9a:7e:34:23: 34:8a:0e:70:c8:5c:68:c6:70:4a:81:9e:7b:90:a3: 55:71:12:a3:4e:1f:2c:6a:40:50:bb:ed:e1:2d:f5: cc:63:97:16:0b:c3:69:62:8f:76:e0:d7:6c:3c:77: b9:f5:fe:d2:44:d4:00:ad:9d:b2:be:89:4b:be:ed: 3e:92:1c:78:2a:53:dc:43:e8:1d:7a:29:45:9c:38: 3c:28:18:24:fa:40:a0:18:57:17:2c:3c:8d:69:c2: 22:70:9e:b8:d9:0f:74:97:f4:58:11:33:79:ea:c9: 47:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:11:E8:80:5E:E4:13:8F:FA:D8:F1:0E:9A:04:C6:C5:F4:3E:37:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6c:c3:61:bb:61:93:a6:41:cb:0b:6b:07:52:2e:73:28:62: 06:1c:23:45:17:52:4c:d1:6c:c9:9e:d5:ca:54:2f:e8:b8:9c: 43:72:a4:73:9c:43:43:fa:0c:ef:dc:8d:a0:2a:0e:b6:14:1a: e5:e0:92:cd:c5:05:ad:0e:9b:20:c5:c6:69:a2:1a:91:dc:16: 3c:b2:5e:42:b1:e1:67:a8:6a:72:47:bd:f8:d0:63:51:0a:03: fe:89:39:de:c8:bc:35:7d:74:48:f2:89:92:98:fd:bf:d6:7e: 37:f8:fc:3d:d6:79:36:e3:b5:12:ea:7a:da:45:c2:04:ce:10: 1e:c4:41:10:36:c7:8a:fd:a7:c7:35:c6:59:df:eb:71:4a:fd: e1:dc:d6:99:8b:63:f5:93:a8:d9:83:b7:58:ff:ab:7d:d9:58: 59:34:cd:60:6f:cd:fa:84:41:ec:8e:b9:6e:22:30:a0:f5:3c: 3f:ab:11:1f:bf:c9:8a:fe:f6:90:02:32:4b:2c:0a:17:26:af: aa:b1:17:9d:b3:7a:26:2c:f0:09:3a:23:4b:7c:9d:1c:74:10: 01:e3:66:1e:62:47:cd:8b:1f:f6:96:e4:69:fd:c6:d0:27:c7: 99:d2:ef:20:ba:65:95:1d:dd:59:6b:38:0a:61:c1:0e:cd:7a: 53:04:d5:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRIhbC9jR/p/8e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk MjA3MzhjMWEtMTRiZS00ZjQzLWE0ZTYtNDY0ZjkwNDUxMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXFKr6z2HHU+EJRlegjrd2/gckA2wgaPp/4K iGwAQonpVk8HN4RRybc/tYQ7eGEusDUZKODIx97a402fMjVX+0U0Al9OFrTpFV/f 3pMRPa+iIC3e4+f7n4vXtEJ2I1aUswmgVKSpATq4KzhLgHpuhwmzzdumPPmLthRz 9ENxYYRXpIUc+NcOOk/R9SFcwBUj7pp+NCM0ig5wyFxoxnBKgZ57kKNVcRKjTh8s akBQu+3hLfXMY5cWC8NpYo924NdsPHe59f7SRNQArZ2yvolLvu0+khx4KlPcQ+gd eilFnDg8KBgk+kCgGFcXLDyNacIicJ642Q90l/RYETN56slHAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYR6IBe5BOP+tjxDpoExsX0PjccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMTQyNmE2MzctMTNhYS0z NmQ3LTg3YzgtMmE4ODlkY2Q3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFsw2G7YZOmQcsLawdSLnMoYgYcI0UXUkzRbMme1cpUL+i4nENypHOc Q0P6DO/cjaAqDrYUGuXgks3FBa0OmyDFxmmiGpHcFjyyXkKx4WeoanJHvfjQY1EK A/6JOd7IvDV9dEjyiZKY/b/Wfjf4/D3WeTbjtRLqetpFwgTOEB7EQRA2x4r9p8c1 xlnf63FK/eHc1pmLY/WTqNmDt1j/q33ZWFk0zWBvzfqEQeyOuW4iMKD1PD+rER+/ yYr+9pACMkssChcmr6qxF52zeiYs8Ak6I0t8nRx0EAHjZh5iR82LH/aW5Gn9xtAn x5nS7yC6ZZUd3VlrOAphwQ7NelME1SQ= -----END CERTIFICATE-----Generated at Mon Nov 25 02:49:25 2024 by rpki-client on console-ams.rpki-client.org