$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa File: a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa (raw, json) Hash identifier: FLadZcfEriCTKHnx1MtH1O6sO2pyeC1ENOez++r72HY= Subject key identifier: 2A:FD:0E:63:BE:3E:D8:A6:2F:15:F6:21:4D:95:07:04:A1:B0:B9:F8 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285847C8DA00455C848F1592CDDE00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 7743 IP address blocks: 209.211.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:da:00:45:5c:84:8f:15:92:cd:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=4f4ea498-822e-4137-909b-0d45f5b6143d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:ce:de:4d:ee:ef:0a:b4:97:62:98:8d:a5: fb:70:50:05:ae:f6:e0:be:5a:64:fa:ba:90:91:03: 43:fd:d9:fb:a8:c6:76:55:9c:d3:58:4d:16:a2:68: 5a:b9:37:fc:ee:e2:29:97:3e:49:72:79:bb:3a:5c: 78:04:df:a1:17:f9:13:ea:96:5d:b3:fd:48:86:46: 5a:96:26:57:99:a5:f2:49:87:aa:d1:45:75:5d:74: aa:bb:a4:fe:e8:b0:eb:05:d8:c3:79:e5:5f:8e:43: cd:d4:02:79:ad:74:1c:29:29:0e:8f:35:6d:e5:df: 27:b0:81:6e:d1:a6:3c:ba:79:71:d6:d0:cb:37:88: 7d:35:4d:ac:7e:95:4f:45:8c:79:3d:51:6b:8a:23: 2b:8a:e2:bb:0d:f1:2c:a1:6c:3c:3e:83:b1:a5:df: 09:23:c8:b0:22:31:ee:c9:70:7c:fa:26:e9:60:0b: 4c:91:1b:23:b5:df:26:3a:30:1c:6e:bf:79:71:a5: 8f:53:7c:d6:fb:53:77:97:19:b0:77:b5:51:75:1c: 2a:76:65:a3:26:2b:b7:4c:ca:64:9b:8f:43:7f:56: d2:dd:39:fa:7e:d4:a5:66:30:ed:27:fc:28:07:ce: cb:2f:43:14:d3:37:29:c3:a6:33:b2:0a:a1:01:ae: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:0E:63:BE:3E:D8:A6:2F:15:F6:21:4D:95:07:04:A1:B0:B9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:7e:54:19:df:0f:10:24:e7:32:8f:c2:a7:10:a3:3b:cd:d4: 03:c0:46:82:80:b9:28:61:00:25:77:a5:5b:dd:46:f9:0c:3f: 14:db:0a:98:59:d6:1a:40:02:6d:70:95:c8:be:01:b7:2d:b4: 71:a7:2f:0c:85:2b:c4:07:2e:96:4d:03:b4:bf:3a:2a:59:b8: dd:bb:e2:a3:8d:05:0c:ba:55:c7:cc:c0:3c:a1:68:94:a4:11: b6:e6:3b:de:4f:b8:1c:4f:5b:25:13:9e:43:73:50:1f:d6:c3: a3:b5:f2:48:c5:71:3f:57:a4:52:f9:e6:7f:7a:b8:b9:42:96: da:f2:61:d7:c1:cc:94:24:8a:81:d3:7b:2d:b5:45:e1:0a:a4: cd:da:13:b4:9c:f9:1f:42:82:12:41:cf:b7:7a:f0:c3:cb:96: 9a:bf:fe:16:d0:d9:81:e6:ee:99:53:0e:47:47:3a:b8:5e:9d: 89:1d:a7:ca:b7:14:4a:6f:da:37:ec:3f:87:5d:30:45:8e:10: 10:75:dd:dc:37:ac:0f:5a:ad:ef:34:e9:f5:48:e4:c5:97:db: 4e:be:3d:20:7c:ab:20:02:25:f0:4b:20:c3:3b:cc:f5:40:f1: e3:43:a0:83:a4:b2:24:f4:35:97:ed:2a:b0:8f:1b:9f:2a:71: b4:df:a8:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2gBFXISPFZLN3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NGY0ZWE0OTgtODIyZS00MTM3LTkwOWItMGQ0NWY1YjYxNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLvO3k3u7wq0l2KYjaX7cFAFrvbgvlpk+rqQ kQND/dn7qMZ2VZzTWE0WomhauTf87uIplz5Jcnm7Olx4BN+hF/kT6pZds/1IhkZa liZXmaXySYeq0UV1XXSqu6T+6LDrBdjDeeVfjkPN1AJ5rXQcKSkOjzVt5d8nsIFu 0aY8unlx1tDLN4h9NU2sfpVPRYx5PVFriiMriuK7DfEsoWw8PoOxpd8JI8iwIjHu yXB8+ibpYAtMkRsjtd8mOjAcbr95caWPU3zW+1N3lxmwd7VRdRwqdmWjJiu3TMpk m49Df1bS3Tn6ftSlZjDtJ/woB87LL0MU0zcpw6YzsgqhAa41UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr9DmO+PtimLxX2IU2VBwShsLn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYTI4ODcwMDItOGM4ZS0z NDFlLWE5ZmItNjliMDMyZmZkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN+VBnfDxAk5zKPwqcQozvN1APARoKAuShhACV3pVvdRvkMPxTbCphZ 1hpAAm1wlci+AbcttHGnLwyFK8QHLpZNA7S/OipZuN274qONBQy6VcfMwDyhaJSk EbbmO95PuBxPWyUTnkNzUB/Ww6O18kjFcT9XpFL55n96uLlCltryYdfBzJQkioHT ey21ReEKpM3aE7Sc+R9CghJBz7d68MPLlpq//hbQ2YHm7plTDkdHOrhenYkdp8q3 FEpv2jfsP4ddMEWOEBB13dw3rA9are806fVI5MWX206+PSB8qyACJfBLIMM7zPVA 8eNDoIOksiT0NZftKrCPG58qcbTfqEM= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org