$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24ce06b-685a-3a98-b9de-505b47c68363.roa File: a24ce06b-685a-3a98-b9de-505b47c68363.roa (raw, json) Hash identifier: sPabmi4k9O9LRB+OStOwZ2jmQYShiPmz3wKcildhQMU= Subject key identifier: 41:67:D5:8C:0A:DE:25:B9:3C:F0:BE:2D:24:30:CB:49:1D:B6:26:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584754E0F5566700F953D2C2BB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24ce06b-685a-3a98-b9de-505b47c68363.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 7342 IP address blocks: 209.131.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:f5:56:67:00:f9:53:d2:c2:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=dde2b710-df6c-4ade-af76-c85b1e347f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:82:23:9c:8a:b9:e3:8f:93:83:f0:49:ec:56: c2:ce:87:7a:a4:37:49:49:57:11:0e:ae:7e:a9:fc: 61:62:7b:0c:36:52:96:6a:6d:40:a8:05:4c:4e:b1: c2:e7:7a:cb:a9:97:48:a3:16:fa:b6:c8:0a:c5:33: 30:ac:aa:1e:89:8b:71:9e:3d:86:0b:0a:cd:84:b3: a0:44:41:d0:de:85:1e:7d:08:37:11:0f:53:e9:89: 57:ef:f9:aa:d6:aa:ba:4e:ee:23:34:7d:64:06:93: e6:a0:32:56:96:41:50:53:40:46:48:68:12:b6:07: b4:25:11:e9:18:ef:f6:99:1e:b5:bc:e2:c0:f0:9d: 45:9b:db:81:3f:98:7a:67:dd:6a:ad:82:82:9a:86: 78:72:c7:66:ec:7a:39:d9:fb:af:f6:f0:69:21:17: 47:a8:72:da:7e:d1:0e:c8:89:0a:75:f0:6a:1f:38: fb:68:2b:84:61:c0:31:7e:e3:21:e2:ff:c7:5b:66: a3:40:ef:19:27:f3:09:e3:50:9e:6d:5c:ed:a6:9f: 89:6b:c5:9a:67:29:0f:e0:af:73:06:ec:ca:46:df: b2:76:73:d1:72:e7:a9:bb:3f:c0:15:59:78:48:f7: 90:7d:4e:7e:a1:cf:08:f8:6f:19:eb:25:98:00:9c: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:67:D5:8C:0A:DE:25:B9:3C:F0:BE:2D:24:30:CB:49:1D:B6:26:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24ce06b-685a-3a98-b9de-505b47c68363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:54:0c:16:bf:00:1e:1e:29:eb:91:aa:19:4d:d4:7a:dd:ae: 23:eb:d7:f0:57:bd:ca:b2:a3:a0:30:1b:16:ff:48:db:8e:27: 15:88:ee:d0:05:cb:4c:50:d8:87:1c:54:ca:10:3c:43:8b:48: e3:d7:13:63:4f:ec:35:ce:8d:ed:7a:85:c2:86:0a:2e:7c:f4: aa:dd:4d:d6:9d:6f:64:3d:13:1a:1a:a5:22:25:60:af:24:ec: 3a:1c:af:41:0b:92:c0:db:2d:ca:f3:ce:35:b1:59:87:9e:97: 47:d3:37:93:6d:7c:3b:4b:80:c3:09:2e:65:80:2a:09:e2:ef: 75:ff:f6:30:2a:57:5b:91:ce:ab:1e:75:d9:94:ee:ac:a9:e6: 63:e7:38:43:d9:bb:8c:69:68:56:ac:45:ed:42:03:db:fc:7d: 1f:b1:85:20:29:cb:40:41:ab:71:fd:53:86:27:22:d7:5e:07: f3:0c:f8:91:c2:06:be:f2:82:81:b0:2b:8a:b0:dd:0d:dc:04: bf:0a:78:2e:bc:95:ee:98:36:95:e4:e6:60:ae:40:84:e9:96: 37:cb:30:56:2e:9c:05:4d:45:08:dd:8c:ed:64:f0:51:27:3a: 1c:bb:f7:6b:70:5a:63:54:d1:cc:ed:25:5c:81:95:01:37:91: 7f:62:96:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4PVWZwD5U9LCuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGRlMmI3MTAtZGY2Yy00YWRlLWFmNzYtYzg1YjFlMzQ3ZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oIjnIq544+Tg/BJ7FbCzod6pDdJSVcRDq5+ qfxhYnsMNlKWam1AqAVMTrHC53rLqZdIoxb6tsgKxTMwrKoeiYtxnj2GCwrNhLOg REHQ3oUefQg3EQ9T6YlX7/mq1qq6Tu4jNH1kBpPmoDJWlkFQU0BGSGgStge0JRHp GO/2mR61vOLA8J1Fm9uBP5h6Z91qrYKCmoZ4csdm7Ho52fuv9vBpIRdHqHLaftEO yIkKdfBqHzj7aCuEYcAxfuMh4v/HW2ajQO8ZJ/MJ41CebVztpp+Ja8WaZykP4K9z BuzKRt+ydnPRcuepuz/AFVl4SPeQfU5+oc8I+G8Z6yWYAJzRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFn1YwK3iW5PPC+LSQwy0kdtiaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI0Y2UwNmItNjg1YS0z YTk4LWI5ZGUtNTA1YjQ3YzY4MzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtUDBa/AB4eKeuRqhlN1HrdriPr1/BXvcqyo6AwGxb/SNuOJxWI7tAF y0xQ2IccVMoQPEOLSOPXE2NP7DXOje16hcKGCi589KrdTdadb2Q9ExoapSIlYK8k 7Docr0ELksDbLcrzzjWxWYeel0fTN5NtfDtLgMMJLmWAKgni73X/9jAqV1uRzqse ddmU7qyp5mPnOEPZu4xpaFasRe1CA9v8fR+xhSApy0BBq3H9U4YnItdeB/MM+JHC Br7ygoGwK4qw3Q3cBL8KeC68le6YNpXk5mCuQITpljfLMFYunAVNRQjdjO1k8FEn Ohy792twWmNU0cztJVyBlQE3kX9iliQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:11 2024 by rpki-client on console-ams.rpki-client.org