$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa File: 40314b4d-9789-377e-9741-c7a9e2e27829.roa (raw, json) Hash identifier: 55DNKWXWhK8WjOoNCv2CLsDLt5L9jiX2ewL0Y1AlpzY= Subject key identifier: A0:52:93:11:9F:B6:1E:4C:95:C4:55:E7:09:0C:C6:5F:17:37:05:6E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847686B9798E4EFAE17729530E8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa Signing time: Wed 02 Oct 2024 13:00:42 +0000 ROA not before: Wed 02 Oct 2024 13:00:42 +0000 ROA not after: Tue 31 Dec 2024 14:00:42 +0000 asID: 7342 IP address blocks: 209.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:68:6b:97:98:e4:ef:ae:17:72:95:30:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 2 13:00:42 2024 GMT Not After : Dec 31 14:00:42 2024 GMT Subject: CN=aee6170c-3a0a-4607-968e-831fc57eca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:6e:b6:0e:6e:9e:15:0b:85:13:23:0b:dc: 66:7c:4a:37:df:58:9b:af:15:4b:50:87:f2:91:cf: 3d:66:1c:c9:ba:6d:e0:7e:e6:49:10:b4:22:a1:fa: 86:9a:5e:7c:08:84:b0:a8:14:3a:c6:59:23:8c:63: d8:b3:fc:e2:59:00:d9:1f:56:40:2b:0c:98:d8:46: df:6d:94:6b:d3:9d:31:18:aa:48:b0:9c:e0:e1:4e: f0:f1:ed:eb:8e:97:71:17:1f:87:37:a3:f1:9d:96: 0f:e7:ae:0a:c3:df:d6:16:c6:ae:9a:ea:5b:c7:50: 10:ed:cf:7a:b1:69:ce:ec:b7:de:ab:df:19:42:8a: c9:7d:2b:95:8d:24:38:f8:db:19:ce:5e:7b:3a:d7: fa:82:b8:1c:2d:31:71:3b:64:81:4f:83:62:2b:e0: d9:ae:a2:4e:e0:b7:a8:50:66:00:6e:5e:5d:aa:c7: f2:a6:d3:c0:d6:a5:55:84:00:52:7f:42:28:55:e0: 6b:8c:4d:81:88:f4:4a:a0:e2:aa:0e:82:67:9f:67: a1:ae:16:f8:17:57:c9:d0:dc:ce:77:2d:eb:d0:b9: 81:0a:08:ea:55:8b:e1:fd:ac:03:b0:62:a8:9b:d0: 66:ee:71:67:7d:ed:c7:6a:7c:93:73:f0:e0:fc:59: 86:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:52:93:11:9F:B6:1E:4C:95:C4:55:E7:09:0C:C6:5F:17:37:05:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6e:f8:1f:96:68:46:f9:6d:41:6c:9c:c9:fc:44:0c:90:2a: 72:e4:a0:35:8d:f9:14:8e:b1:a3:c2:fe:dc:58:48:47:d4:2e: 7c:f7:e4:d8:ad:cf:6d:e8:44:2d:be:59:04:dc:d8:7e:de:fe: ba:61:cb:e2:a9:ae:e0:98:cd:c4:96:fd:d6:bf:16:4f:6a:7b: 05:5e:89:07:2a:90:63:a8:76:61:f9:c7:51:3c:0c:8a:ec:f8: 23:4d:c0:fd:ca:9f:e2:7a:57:b3:87:60:88:41:6d:21:23:f4: 7f:4f:ba:33:7a:d3:cc:aa:f6:f5:4c:17:25:14:cd:af:01:43: 3b:66:0c:f0:54:db:3b:00:46:79:ca:14:30:c2:a4:15:38:65: ed:3e:c9:91:0d:f4:64:0a:0b:94:95:e8:e8:0c:6a:fe:0e:8f: 0d:de:16:86:9f:85:f0:41:47:0d:03:62:8a:ec:b4:26:ad:eb: d3:8a:0d:3f:b6:cf:28:29:0d:01:89:50:11:3d:31:10:44:6c: db:5a:16:d4:08:66:e5:05:17:22:e9:38:68:4b:7e:7b:06:50: e9:0d:97:d4:65:a5:36:93:37:1e:33:84:04:28:ee:88:d3:a6: d2:4f:fc:0c:96:80:cf:ea:91:51:71:ad:06:f0:31:be:a0:3f: ee:eb:16:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdoa5eY5O+uF3KVMOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTAwMjEzMDA0MloXDTI0MTIzMTE0MDA0MlowLzEtMCsGA1UEAxMk YWVlNjE3MGMtM2EwYS00NjA3LTk2OGUtODMxZmM1N2VjYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Vutg5unhULhRMjC9xmfEo331ibrxVLUIfy kc89ZhzJum3gfuZJELQiofqGml58CISwqBQ6xlkjjGPYs/ziWQDZH1ZAKwyY2Ebf bZRr050xGKpIsJzg4U7w8e3rjpdxFx+HN6PxnZYP564Kw9/WFsaumupbx1AQ7c96 sWnO7Lfeq98ZQorJfSuVjSQ4+NsZzl57Otf6grgcLTFxO2SBT4NiK+DZrqJO4Leo UGYAbl5dqsfyptPA1qVVhABSf0IoVeBrjE2BiPRKoOKqDoJnn2ehrhb4F1fJ0NzO dy3r0LmBCgjqVYvh/awDsGKom9Bm7nFnfe3HanyTc/Dg/FmGaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBSkxGfth5MlcRV5wkMxl8XNwVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAzMTRiNGQtOTc4OS0z NzdlLTk3NDEtYzdhOWUyZTI3ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlu+B+WaEb5bUFsnMn8RAyQKnLkoDWN+RSOsaPC/txYSEfULnz35Nit z23oRC2+WQTc2H7e/rphy+KpruCYzcSW/da/Fk9qewVeiQcqkGOodmH5x1E8DIrs +CNNwP3Kn+J6V7OHYIhBbSEj9H9PujN608yq9vVMFyUUza8BQztmDPBU2zsARnnK FDDCpBU4Ze0+yZEN9GQKC5SV6OgMav4Ojw3eFoafhfBBRw0DYorstCat69OKDT+2 zygpDQGJUBE9MRBEbNtaFtQIZuUFFyLpOGhLfnsGUOkNl9RlpTaTNx4zhAQo7ojT ptJP/AyWgM/qkVFxrQbwMb6gP+7rFrc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:02 2024 by rpki-client on console-ams.rpki-client.org