$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/29a8680e-a487-38f7-b659-a738723ce915.roa File: 29a8680e-a487-38f7-b659-a738723ce915.roa (raw, json) Hash identifier: xmstKbD3SB2ufJosPjpt4HTTvf0vajSqdd/IAH7yi6I= Subject key identifier: EC:98:90:00:B3:A6:87:43:0A:AA:B4:E7:9C:92:3F:62:9A:60:70:37 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F43285847967BCA721E5C93CE86236540 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/29a8680e-a487-38f7-b659-a738723ce915.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 14618 IP address blocks: 209.240.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:ca:72:1e:5c:93:ce:86:23:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=6b8d38c1-02ef-4ea9-9190-df1ccb4be879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:9d:2a:c3:a1:3b:40:23:ad:30:0e:23:6c: 0b:47:82:3b:e5:2a:fc:e8:11:8f:fa:95:38:ca:2e: 77:ed:38:8a:9e:17:67:02:bd:13:a7:cb:42:16:03: 8d:44:6a:f6:d3:f9:d1:69:44:59:e0:3f:a0:d3:bc: 44:d2:98:02:75:3a:ea:61:a9:6e:11:8a:da:a6:68: ca:81:49:56:a0:4b:56:f7:22:44:b2:11:89:f0:df: 97:33:12:49:77:ef:5c:7c:ce:52:c1:45:06:47:39: 05:be:41:c2:e9:db:71:06:a5:69:0a:f7:fc:36:40: d5:35:ea:4d:4b:99:35:10:88:1e:fb:21:ab:37:2f: 3c:a0:69:8b:e0:7e:c2:6e:ed:2a:ce:63:89:65:b0: 0f:83:12:1c:18:13:e1:d2:eb:53:da:07:36:67:0a: 96:84:5b:9f:d7:90:af:76:f3:9d:36:72:86:8c:27: 2a:2e:18:50:ab:fc:2d:8a:18:43:30:f1:0b:b7:ba: 4a:e6:3b:4d:e9:b5:eb:bb:6a:3f:9c:15:ed:69:94: 40:0c:20:81:e3:6d:2f:92:44:d8:24:69:e3:a1:8d: 80:fc:46:5f:95:b9:0b:f3:d6:2c:63:70:42:07:8a: 2c:17:1a:e4:fa:45:38:ab:34:ca:25:fd:75:44:b1: 43:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:90:00:B3:A6:87:43:0A:AA:B4:E7:9C:92:3F:62:9A:60:70:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/29a8680e-a487-38f7-b659-a738723ce915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9b:84:4d:e8:e5:19:30:f1:19:c8:d5:ce:25:3d:e2:7a:6a: 6c:6f:36:ce:2d:f5:92:72:99:d1:3d:00:e9:6d:7e:ff:e0:e6: 4b:54:37:7f:e4:ad:a4:ef:d5:5d:d1:3e:08:b7:64:0d:db:37: 4a:7e:32:02:95:02:03:cd:8a:f4:b5:eb:9e:d7:17:60:c0:33: f9:8d:a2:07:76:0c:02:b6:5b:8b:38:0b:e3:36:b1:c6:b5:ea: 0b:df:27:8f:33:fb:03:1e:9c:5c:33:73:e9:69:23:5a:22:d7: 60:4f:38:bf:9e:9e:24:b0:9a:a2:ed:66:d8:9a:f7:cb:76:84: b3:e1:8f:80:6a:ac:43:29:80:f4:a6:85:79:a8:f2:23:3c:f9: 7e:57:5d:2a:53:eb:bb:c5:d6:41:43:51:9f:61:c1:a5:be:3a: 0a:5e:ec:55:55:f4:bb:74:8c:83:88:96:a4:af:08:13:ad:55: 08:f2:11:58:99:58:52:63:14:28:50:6e:c7:9e:69:a8:b8:0e: 17:92:fb:4b:96:07:7e:b7:b0:fd:89:00:a4:a7:8d:a0:07:b8: 9a:38:eb:7a:0e:fc:0f:73:ff:4d:86:6b:85:6b:cb:41:17:98: 9d:23:e5:df:07:b8:4f:32:fd:f9:a0:7a:4e:4b:17:1d:f9:b2: 1c:06:14:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8pyHlyTzoYjZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk NmI4ZDM4YzEtMDJlZi00ZWE5LTkxOTAtZGYxY2NiNGJlODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoridKsOhO0AjrTAOI2wLR4I75Sr86BGP+pU4 yi537TiKnhdnAr0Tp8tCFgONRGr20/nRaURZ4D+g07xE0pgCdTrqYaluEYrapmjK gUlWoEtW9yJEshGJ8N+XMxJJd+9cfM5SwUUGRzkFvkHC6dtxBqVpCvf8NkDVNepN S5k1EIge+yGrNy88oGmL4H7Cbu0qzmOJZbAPgxIcGBPh0utT2gc2ZwqWhFuf15Cv dvOdNnKGjCcqLhhQq/wtihhDMPELt7pK5jtN6bXru2o/nBXtaZRADCCB420vkkTY JGnjoY2A/EZflbkL89YsY3BCB4osFxrk+kU4qzTKJf11RLFDwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyYkACzpodDCqq055ySP2KaYHA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMjlhODY4MGUtYTQ4Ny0z OGY3LWI2NTktYTczODcyM2NlOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2bhE3o5Rkw8RnI1c4lPeJ6amxvNs4t9ZJymdE9AOltfv/g5ktUN3/k raTv1V3RPgi3ZA3bN0p+MgKVAgPNivS1657XF2DAM/mNogd2DAK2W4s4C+M2sca1 6gvfJ48z+wMenFwzc+lpI1oi12BPOL+eniSwmqLtZtia98t2hLPhj4BqrEMpgPSm hXmo8iM8+X5XXSpT67vF1kFDUZ9hwaW+Ogpe7FVV9Lt0jIOIlqSvCBOtVQjyEViZ WFJjFChQbseeaai4DheS+0uWB363sP2JAKSnjaAHuJo463oO/A9z/02Ga4Vry0EX mJ0j5d8HuE8y/fmgek5LFx35shwGFMs= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:46 2024 by rpki-client on console-fra.rpki-client.org