$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa File: 43cff616-436a-30b8-bd98-b94373b4be05.roa (raw, json) Hash identifier: 89V4cqdXdaaf/pPPE3MDI8kcoyaC88LeJra7h09ZaOs= Subject key identifier: 65:24:E9:38:25:B6:AA:50:C8:E1:6D:45:37:1B:B0:AE:91:6F:85:E7 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F43285847A5D6ABC81B89F4675B3B3310 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 33146 IP address blocks: 209.222.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:ab:c8:1b:89:f4:67:5b:3b:33:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=4bed8dfe-f361-4f96-8b4b-8a2ea6daf8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:25:06:28:44:8e:85:20:1f:13:fc:54:32: 4c:61:e4:0b:a9:9e:30:2d:79:f9:15:27:91:3f:0d: 59:bd:3c:0b:44:f1:b2:fc:d6:29:85:27:b9:68:90: 51:f6:96:a2:29:33:91:75:96:86:7d:ce:15:b3:45: d7:af:f9:4e:d4:c1:d7:95:a8:de:08:5b:a5:6c:67: 34:f2:0d:73:07:af:16:19:d5:9b:66:dd:83:4f:b6: d2:32:b4:a6:6d:ec:52:0e:e9:2c:c9:57:fb:2c:45: e4:1f:98:b5:d5:ee:ca:cf:f3:a2:d9:af:92:7b:84: 23:65:e0:e7:ba:71:d1:e8:30:81:47:f5:da:dd:a0: 68:63:fc:b5:53:7b:ef:2c:22:8d:59:b8:fd:59:7b: 12:d2:cf:be:13:8e:41:90:fe:30:b9:69:ea:cb:56: 36:6f:33:86:70:38:fd:a7:8d:4c:60:f7:17:1c:76: ad:1c:71:43:70:8f:b8:f6:46:d3:f7:e1:f3:6a:46: 8a:57:c1:09:d7:71:22:af:06:68:14:21:7c:4f:46: 07:76:af:dc:12:d0:e2:ed:5b:91:b7:34:9e:70:1d: 23:aa:d5:6d:9c:90:f6:56:c6:cb:31:91:34:d3:41: 84:8f:cf:31:bb:f1:f9:b4:96:d5:18:8c:26:84:41: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:24:E9:38:25:B6:AA:50:C8:E1:6D:45:37:1B:B0:AE:91:6F:85:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/43cff616-436a-30b8-bd98-b94373b4be05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b7:3f:7e:85:4d:3c:ce:c4:8f:79:f8:54:f2:06:b0:c5:aa: db:56:d5:6c:7c:59:d4:bc:46:ac:d8:5e:7e:a4:b6:b4:6a:be: 54:bd:ff:95:9e:24:c3:df:8a:72:62:87:96:40:5a:ce:e3:30: f5:6a:ec:72:bf:db:d5:70:72:01:ab:4b:6b:63:ce:a0:53:1d: 39:07:d0:20:ac:22:f6:d7:16:f1:76:3f:cc:66:b4:06:24:2f: ad:ab:be:78:ee:2d:f4:57:d5:5b:9f:bc:e2:f3:07:40:2e:08: 82:0a:56:93:c6:21:7d:31:12:61:51:8d:86:b5:6e:99:d5:39: 31:73:d7:f5:fa:e0:d3:ac:78:e9:ac:5b:a2:34:67:73:89:de: b3:38:4e:89:68:95:14:94:68:3f:c9:df:cf:86:72:bc:54:98: 8b:59:b2:01:1d:0b:67:2f:54:d3:f1:22:04:6d:aa:05:a8:74: 51:50:0d:f2:ca:38:02:52:a9:d2:1a:5b:57:fe:de:a4:69:23: 15:4b:a1:f2:48:f4:4d:05:05:e3:e2:a7:db:7c:f0:75:45:fe: 17:af:21:05:f7:cc:e9:ed:eb:e0:f8:45:b7:39:fc:e1:a8:22: 0f:e8:98:74:84:49:46:97:3a:c2:88:fd:ca:b7:84:77:cb:ca: db:63:98:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qvIG4n0Z1s7MxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NGJlZDhkZmUtZjM2MS00Zjk2LThiNGItOGEyZWE2ZGFmOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFolBihEjoUgHxP8VDJMYeQLqZ4wLXn5FSeR Pw1ZvTwLRPGy/NYphSe5aJBR9paiKTORdZaGfc4Vs0XXr/lO1MHXlajeCFulbGc0 8g1zB68WGdWbZt2DT7bSMrSmbexSDuksyVf7LEXkH5i11e7Kz/Oi2a+Se4QjZeDn unHR6DCBR/Xa3aBoY/y1U3vvLCKNWbj9WXsS0s++E45BkP4wuWnqy1Y2bzOGcDj9 p41MYPcXHHatHHFDcI+49kbT9+HzakaKV8EJ13EirwZoFCF8T0YHdq/cEtDi7VuR tzSecB0jqtVtnJD2VsbLMZE000GEj88xu/H5tJbVGIwmhEHzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUk6TgltqpQyOFtRTcbsK6Rb4XnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNDNjZmY2MTYtNDM2YS0z MGI4LWJkOTgtYjk0MzczYjRiZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0d7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm3P36FTTzOxI95+FTyBrDFqttW1Wx8WdS8RqzYXn6ktrRqvlS9/5We JMPfinJih5ZAWs7jMPVq7HK/29VwcgGrS2tjzqBTHTkH0CCsIvbXFvF2P8xmtAYk L62rvnjuLfRX1VufvOLzB0AuCIIKVpPGIX0xEmFRjYa1bpnVOTFz1/X64NOseOms W6I0Z3OJ3rM4TololRSUaD/J38+GcrxUmItZsgEdC2cvVNPxIgRtqgWodFFQDfLK OAJSqdIaW1f+3qRpIxVLofJI9E0FBePip9t88HVF/hevIQX3zOnt6+D4Rbc5/OGo Ig/omHSESUaXOsKI/cq3hHfLyttjmCQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org