$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa File: 4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa (raw, json) Hash identifier: totN2YsJg8L8Kunm3ZY+Iwl5VSXjf+LoZ4O9JHlkkzA= Subject key identifier: 5A:90:07:8F:0F:5F:78:C2:92:85:23:6E:1C:27:7F:83:C8:B3:1E:30 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F43285847C60F243D05182F3BE5B61000 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa Signing time: Tue 05 Nov 2024 02:00:27 +0000 ROA not before: Tue 05 Nov 2024 02:00:27 +0000 ROA not after: Mon 03 Feb 2025 02:00:27 +0000 asID: 19905 IP address blocks: 209.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c6:0f:24:3d:05:18:2f:3b:e5:b6:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Nov 5 02:00:27 2024 GMT Not After : Feb 3 02:00:27 2025 GMT Subject: CN=f0d10211-dce5-4bbf-a915-9b223046573d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:26:cd:22:4d:6f:09:ee:4d:e6:77:50:a5:50: 4b:d2:b1:be:85:e1:f4:64:f9:ac:23:8b:b5:c3:95: 91:59:e7:18:50:30:df:0b:8a:cd:58:5b:e5:6b:4c: 82:ac:f2:6d:35:57:64:e0:e0:85:af:50:2d:39:6e: 16:1b:89:98:80:9c:d0:43:d6:4e:16:1e:b8:86:cd: c1:9c:ba:a4:20:8c:34:cc:b1:43:1c:d0:20:36:2a: 0a:b7:3c:6f:e0:72:84:0d:dd:e9:52:94:df:57:74: d2:cb:55:d5:0d:a5:4d:c4:7b:d4:21:91:8e:96:92: 10:8d:42:67:ad:41:a2:24:de:39:52:36:15:46:26: 83:10:88:9b:ac:ab:26:d0:cf:4b:6b:d9:c1:ce:c5: 1f:f1:d7:d9:e8:46:66:d9:14:c8:27:4d:60:ef:61: d2:b2:e9:30:36:67:91:5d:e7:01:80:d6:15:a6:31: 90:8b:e0:0a:fb:1c:0a:90:64:7a:3c:12:37:e5:1f: d7:dd:d3:34:5f:3f:96:98:ca:96:a9:9e:8b:cf:53: c3:89:4f:1f:82:75:c0:11:5d:98:d6:9f:60:8f:e2: e3:c5:60:4c:d5:ea:f2:b9:ed:74:f8:e4:4b:75:92: 81:3c:ee:92:54:b5:12:d5:19:b4:4f:8c:38:94:18: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:90:07:8F:0F:5F:78:C2:92:85:23:6E:1C:27:7F:83:C8:B3:1E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/4f5becd0-1e5a-3f0b-878a-ce5f4c2b2586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:78:8f:54:6d:4b:8a:7b:5d:86:fc:4b:31:97:c3:b0:ce:10: 3a:5a:5e:b9:fe:d1:52:7f:1d:3d:46:ab:a6:74:53:3d:f9:af: b7:4b:98:f8:9a:66:6e:17:1d:47:f2:d6:ed:53:28:0f:21:94: 98:14:c2:9f:77:e4:b4:38:90:76:2b:fe:60:78:93:31:91:c2: d8:d9:67:b0:39:f0:0e:0a:00:70:bd:10:8c:78:00:14:a6:98: d4:c2:51:03:37:3f:e3:dc:4e:39:e3:86:b5:d6:b7:ae:c2:68: 4e:f6:5b:a0:0c:b5:8a:32:99:c0:d3:5e:98:56:d7:5d:cd:d2: 1e:85:e2:10:69:e8:ac:87:73:d7:cf:5c:b9:c8:42:1d:8d:fa: 43:48:3e:58:87:29:b9:ca:59:ac:5b:e6:06:fa:12:95:55:b8: e6:db:41:a5:b5:c6:ef:d0:53:7f:3e:68:b7:a5:d7:36:51:42: 56:86:09:8e:d9:01:4f:92:df:f0:59:f2:2e:b1:2a:8d:02:11: 9c:54:43:45:c8:87:ab:6c:9e:b8:93:45:a0:2b:4a:1c:6c:38: 85:28:d9:fd:6a:6c:35:36:e4:f7:7c:53:cf:7b:f6:69:de:c1: fc:07:8f:9e:4e:93:d4:ad:9a:50:84:f5:b8:ff:1b:68:70:d0: e1:d1:51:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfGDyQ9BRgvO+W2EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI0MTEwNTAyMDAyN1oXDTI1MDIwMzAyMDAyN1owLzEtMCsGA1UEAxMk ZjBkMTAyMTEtZGNlNS00YmJmLWE5MTUtOWIyMjMwNDY1NzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiibNIk1vCe5N5ndQpVBL0rG+heH0ZPmsI4u1 w5WRWecYUDDfC4rNWFvla0yCrPJtNVdk4OCFr1AtOW4WG4mYgJzQQ9ZOFh64hs3B nLqkIIw0zLFDHNAgNioKtzxv4HKEDd3pUpTfV3TSy1XVDaVNxHvUIZGOlpIQjUJn rUGiJN45UjYVRiaDEIibrKsm0M9La9nBzsUf8dfZ6EZm2RTIJ01g72HSsukwNmeR XecBgNYVpjGQi+AK+xwKkGR6PBI35R/X3dM0Xz+WmMqWqZ6Lz1PDiU8fgnXAEV2Y 1p9gj+LjxWBM1eryue10+ORLdZKBPO6SVLUS1Rm0T4w4lBjEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqQB48PX3jCkoUjbhwnf4PIsx4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNGY1YmVjZDAtMWU1YS0z ZjBiLTg3OGEtY2U1ZjRjMmIyNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d7+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB4j1RtS4p7XYb8SzGXw7DOEDpaXrn+0VJ/HT1Gq6Z0Uz35r7dLmPia Zm4XHUfy1u1TKA8hlJgUwp935LQ4kHYr/mB4kzGRwtjZZ7A58A4KAHC9EIx4ABSm mNTCUQM3P+PcTjnjhrXWt67CaE72W6AMtYoymcDTXphW113N0h6F4hBp6KyHc9fP XLnIQh2N+kNIPliHKbnKWaxb5gb6EpVVuObbQaW1xu/QU38+aLel1zZRQlaGCY7Z AU+S3/BZ8i6xKo0CEZxUQ0XIh6tsnriTRaArShxsOIUo2f1qbDU25Pd8U8979mne wfwHj55Ok9StmlCE9bj/G2hw0OHRUaM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:10 2024 by rpki-client on console-ams.rpki-client.org