$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa File: af04d1ea-2b61-30e8-9a48-0300a4f75436.roa (raw, json) Hash identifier: 0dTsd35ZiBRLPaEWx5dpAZF+1ktpplacL/WSk1294KE= Subject key identifier: F5:04:53:F2:E3:E9:23:87:F8:12:6B:35:50:26:6D:1B:C3:D9:3B:75 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285847C8D9FFF044B6DF8EE2611680 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 10753 IP address blocks: 209.211.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:ff:f0:44:b6:df:8e:e2:61:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=eb33e940-e6f4-4042-b524-5b91dbaf8285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:c9:70:77:b3:32:47:74:ad:1d:33:6e:b3: 3e:f5:9d:51:2f:ea:ee:8a:5e:4a:e3:e9:15:3f:82: 28:f9:c9:df:08:9c:2c:61:24:c5:af:39:72:d5:8b: 35:a6:5d:6e:dd:9c:60:ba:f5:f6:d1:d7:f2:75:17: 20:74:ea:48:3d:47:09:80:3d:b4:b0:9b:04:67:40: 2d:5e:b7:47:c3:ad:fa:aa:90:d0:df:8e:ef:b5:37: da:a9:e4:ee:38:fb:9e:54:f2:51:f8:0e:c2:c4:a7: b8:38:8b:4c:9b:68:5f:e2:fd:10:1c:6a:45:61:e4: 1d:23:48:70:4a:6c:d0:26:a7:06:a4:0f:85:d3:79: 2f:4f:a4:b7:b6:55:0c:81:a0:af:e4:b7:ad:0e:16: 9c:36:4e:a7:2a:3d:dc:e8:85:ef:74:58:5e:c0:58: 4d:27:e0:96:93:68:06:82:cd:73:20:d9:13:fb:2a: 94:8b:66:0d:1a:05:d4:14:4f:51:63:1f:59:e3:1f: bc:84:44:ca:aa:b2:be:54:37:28:c2:88:29:b6:c2: ef:ac:88:ef:53:39:d4:d3:60:cc:13:44:23:1f:03: a2:ef:8a:8b:a6:3f:74:0d:40:5b:04:92:58:9e:c0: 18:55:12:f8:b6:34:ed:a2:db:d3:74:43:20:63:39: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:04:53:F2:E3:E9:23:87:F8:12:6B:35:50:26:6D:1B:C3:D9:3B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b0:ed:e4:4a:e9:d6:b7:a8:eb:b2:09:51:b5:2e:b2:6a:f1: dd:e6:d4:55:5a:03:67:67:c5:ff:9d:dc:de:89:59:0a:e5:95: 4f:c7:4e:2b:da:57:08:2f:08:e5:98:4c:ae:f1:46:16:21:43: 69:8b:3b:7c:1d:45:f9:01:55:01:4b:09:c2:09:f7:4a:7c:9f: 83:c4:5b:28:f2:e2:bb:64:90:d9:f4:70:4a:93:6e:4c:49:7a: 32:b8:85:87:46:95:de:e4:00:83:95:34:78:4a:80:0e:bf:70: 55:01:20:18:d5:e4:69:8e:8a:91:1d:0a:be:3d:0e:f7:32:75: 28:f9:ba:f8:9a:ef:19:ef:9f:0b:c6:13:90:38:b6:a7:cb:cb: 95:84:5e:92:c8:e3:71:e2:a7:6a:99:93:3f:6c:3b:79:32:d3: eb:11:04:f2:bc:21:f2:df:74:a7:17:25:16:20:8e:8d:b2:ed: e2:6c:56:d9:e4:0f:03:2b:a1:38:3e:39:cc:b9:82:32:03:ab: b2:24:43:8e:af:5a:9a:3b:16:a2:51:09:3d:1d:84:8a:81:8c: 28:5d:a6:87:a5:76:be:16:e5:f8:10:8d:33:ad:57:75:07:ea: 4a:3d:5c:01:cc:01:d6:b7:c7:f6:82:0e:c9:42:ce:c2:98:18: e8:d3:45:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2f/wRLbfjuJhFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk ZWIzM2U5NDAtZTZmNC00MDQyLWI1MjQtNWI5MWRiYWY4Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPzJcHezMkd0rR0zbrM+9Z1RL+ruil5K4+kV P4Io+cnfCJwsYSTFrzly1Ys1pl1u3ZxguvX20dfydRcgdOpIPUcJgD20sJsEZ0At XrdHw636qpDQ347vtTfaqeTuOPueVPJR+A7CxKe4OItMm2hf4v0QHGpFYeQdI0hw SmzQJqcGpA+F03kvT6S3tlUMgaCv5LetDhacNk6nKj3c6IXvdFhewFhNJ+CWk2gG gs1zINkT+yqUi2YNGgXUFE9RYx9Z4x+8hETKqrK+VDcowogptsLvrIjvUznU02DM E0QjHwOi74qLpj90DUBbBJJYnsAYVRL4tjTtotvTdEMgYzmLyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUEU/Lj6SOH+BJrNVAmbRvD2Tt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYwNGQxZWEtMmI2MS0z MGU4LTlhNDgtMDMwMGE0Zjc1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSw7eRK6da3qOuyCVG1LrJq8d3m1FVaA2dnxf+d3N6JWQrllU/HTiva VwgvCOWYTK7xRhYhQ2mLO3wdRfkBVQFLCcIJ90p8n4PEWyjy4rtkkNn0cEqTbkxJ ejK4hYdGld7kAIOVNHhKgA6/cFUBIBjV5GmOipEdCr49DvcydSj5uvia7xnvnwvG E5A4tqfLy5WEXpLI43Hip2qZkz9sO3ky0+sRBPK8IfLfdKcXJRYgjo2y7eJsVtnk DwMroTg+Ocy5gjIDq7IkQ46vWpo7FqJRCT0dhIqBjChdpoeldr4W5fgQjTOtV3UH 6ko9XAHMAda3x/aCDslCzsKYGOjTRQ4= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org