$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a97005e9-e003-39a1-ac11-057c0532cc43.roa File: a97005e9-e003-39a1-ac11-057c0532cc43.roa (raw, json) Hash identifier: RSv5lAsB8j6DhRA5FNrsX3QUkBhXvXt5JMDx0l9ys/U= Subject key identifier: 50:7C:90:F0:CD:C8:D9:96:67:32:B5:EE:5B:8A:39:F1:E0:A0:68:BD Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285847C8D9EBA7737214825E729780 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a97005e9-e003-39a1-ac11-057c0532cc43.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 18889 IP address blocks: 209.211.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:eb:a7:73:72:14:82:5e:72:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=d16bb778-f179-4a97-a1ab-7e7add333f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:a2:64:d2:3f:f5:67:7f:6e:f5:ee:fb:e3: c1:ce:65:6c:b5:b5:c2:96:76:37:7a:a8:62:99:9f: f5:3c:a8:91:84:c4:ee:c7:77:02:94:94:ff:f4:7b: 79:f2:bc:19:22:cd:70:d9:bb:d6:3d:f9:38:43:ab: 1b:4e:4e:23:76:f9:5c:37:49:53:08:91:cf:3d:db: 4d:17:75:d5:ce:00:dd:e9:6e:dd:34:19:b2:cc:78: 67:71:76:ea:0c:c8:f5:a5:2e:3c:94:e2:84:10:a0: bc:15:ca:d3:9a:d3:fe:5e:91:e6:dd:06:77:ef:41: 2d:ff:3e:ad:e8:22:6c:ca:7f:55:f4:b2:92:05:53: 82:14:38:25:b9:22:6a:c0:9b:a7:84:d5:54:2c:bf: 61:b2:c1:da:71:03:cf:2d:bc:7c:7a:b9:b0:e9:ff: 0a:28:b0:90:0a:ed:ef:8a:6d:46:c1:70:22:31:ba: d3:d2:52:f8:36:f1:09:e8:12:b6:b3:a8:e2:45:18: ae:6e:1f:b1:02:b8:7a:ce:85:fa:b1:f9:13:71:6e: f5:47:b7:dd:40:cc:44:06:21:c7:49:f4:6e:65:44: 2f:a7:86:17:3d:ae:90:17:ed:5f:1c:c7:5d:05:19: 5d:c1:a1:e2:0d:e1:22:04:fd:ab:a3:a7:91:57:a0: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7C:90:F0:CD:C8:D9:96:67:32:B5:EE:5B:8A:39:F1:E0:A0:68:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a97005e9-e003-39a1-ac11-057c0532cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bb:f3:2c:ef:38:5c:23:80:d0:bd:ed:07:57:9f:01:e2:69: 79:d6:9e:83:78:f6:71:fb:0d:0b:89:52:8e:76:01:c6:26:13: 39:9e:13:8b:0a:d6:82:62:65:c0:6f:17:3a:b5:32:42:6c:34: 32:27:28:ba:8b:c0:ed:9b:c7:5d:0f:5a:53:0a:e5:83:f9:e6: bf:de:4c:dc:86:16:1d:e0:9a:ec:37:6a:21:b9:a9:3e:63:2d: de:f6:1c:64:49:2e:7b:1a:e5:3d:c6:cd:ae:65:e2:fe:0e:84: 61:94:8b:4c:4b:0f:0a:e7:46:f4:71:6a:fe:d8:01:e3:cf:94: aa:b1:c3:de:2a:f1:42:21:86:ed:8e:78:63:ad:e4:92:e3:8d: e2:8d:da:d2:6c:f6:4b:e4:77:38:5d:c8:fd:dc:9e:db:5d:af: 42:e6:bc:8a:9c:a2:84:c1:75:22:50:58:27:a6:5a:a5:42:2f: 2a:b7:30:d4:0b:b9:01:90:83:88:05:be:10:27:85:1e:aa:b5: d2:5e:79:09:90:ca:7c:cf:3c:8c:dc:92:a0:a6:ae:fb:4d:11: e8:6b:21:e5:89:cf:a7:e8:1c:fe:72:5b:b7:4d:91:15:d7:4a: 2a:70:0d:53:16:6e:aa:92:71:10:ca:8c:3b:5e:ca:57:11:34: 56:f5:bd:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2eunc3IUgl5yl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk ZDE2YmI3NzgtZjE3OS00YTk3LWExYWItN2U3YWRkMzMzZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz2iZNI/9Wd/bvXu++PBzmVstbXClnY3eqhi mZ/1PKiRhMTux3cClJT/9Ht58rwZIs1w2bvWPfk4Q6sbTk4jdvlcN0lTCJHPPdtN F3XVzgDd6W7dNBmyzHhncXbqDMj1pS48lOKEEKC8FcrTmtP+XpHm3QZ370Et/z6t 6CJsyn9V9LKSBVOCFDgluSJqwJunhNVULL9hssHacQPPLbx8ermw6f8KKLCQCu3v im1GwXAiMbrT0lL4NvEJ6BK2s6jiRRiubh+xArh6zoX6sfkTcW71R7fdQMxEBiHH SfRuZUQvp4YXPa6QF+1fHMddBRldwaHiDeEiBP2ro6eRV6Dm3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB8kPDNyNmWZzK17luKOfHgoGi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYTk3MDA1ZTktZTAwMy0z OWExLWFjMTEtMDU3YzA1MzJjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy78yzvOFwjgNC97QdXnwHiaXnWnoN49nH7DQuJUo52AcYmEzmeE4sK 1oJiZcBvFzq1MkJsNDInKLqLwO2bx10PWlMK5YP55r/eTNyGFh3gmuw3aiG5qT5j Ld72HGRJLnsa5T3Gza5l4v4OhGGUi0xLDwrnRvRxav7YAePPlKqxw94q8UIhhu2O eGOt5JLjjeKN2tJs9kvkdzhdyP3cnttdr0LmvIqcooTBdSJQWCemWqVCLyq3MNQL uQGQg4gFvhAnhR6qtdJeeQmQynzPPIzckqCmrvtNEehrIeWJz6foHP5yW7dNkRXX SipwDVMWbqqScRDKjDteylcRNFb1vS4= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org