$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa File: 6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa (raw, json) Hash identifier: dJe04RpolmYHvWA8ead+8stJEiXdBdJ1MX1K4v8fimI= Subject key identifier: 44:08:4D:F8:A9:2F:46:9D:66:44:CF:E5:62:A9:E0:A2:5E:34:35:DE Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858476C9DB5ED6E9C7E575F73C400 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 21949 IP address blocks: 209.195.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b5:ed:6e:9c:7e:57:5f:73:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=6693fcf9-f0ea-46b1-abc0-bd584399fb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:90:68:2c:45:56:68:3d:b5:7f:3b:d4:0d: e6:d4:92:94:bf:9f:35:66:b5:c7:30:ff:7c:57:12: 33:79:80:b8:97:45:a8:a4:03:de:9f:62:45:8a:c3: 8d:31:60:f0:d0:35:f4:24:65:85:59:c7:79:77:5a: 37:27:40:48:ca:21:27:ae:71:43:2f:d1:cc:1b:b2: ab:bf:0a:71:fe:49:56:29:90:cc:1f:15:27:14:cf: 07:4d:e7:ec:54:7b:09:60:40:2c:f9:9d:7c:2d:ed: ee:d0:b1:ec:86:40:51:b0:23:a9:e1:3b:99:2b:41: c0:63:a6:06:1f:30:22:32:9b:f9:34:51:12:67:0f: d8:44:b6:04:31:1c:db:c3:aa:ce:f7:f1:cb:e9:30: 48:6a:66:6f:2e:1d:f9:20:28:8c:9b:ea:75:19:33: 5b:e0:63:e0:b0:91:bb:b5:83:a1:58:7f:78:64:d3: 36:7c:7d:3a:42:6a:bc:2c:3d:11:38:f9:0e:c8:71: a5:9a:11:bc:96:09:62:bd:4e:e1:4a:0d:c2:18:02: a6:2a:2e:15:0c:0f:d4:68:88:ab:66:7b:18:cc:e4: b6:e8:e8:e9:b7:2e:a1:93:71:df:a6:47:04:9f:0d: fe:d5:f0:21:6c:4d:95:dd:93:2e:0b:5e:d6:91:0f: 7a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:4D:F8:A9:2F:46:9D:66:44:CF:E5:62:A9:E0:A2:5E:34:35:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 209.195.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:86:2e:66:f5:d3:3a:63:a0:9b:0c:53:9c:8a:e7:fb:6f:cf: c4:d2:09:41:f2:d3:74:d3:9c:b3:b9:6b:2d:8a:57:07:0f:b5: f5:70:fb:a1:24:09:3b:a8:ca:55:52:9f:74:cf:45:bb:f5:fa: 99:ff:11:8f:33:f8:74:51:2b:89:41:3d:e4:ff:83:1f:91:a7: a9:37:86:4c:b3:75:32:20:46:eb:0b:ce:a1:ac:56:54:be:d8: b2:6d:f3:f4:ca:86:09:ef:05:d8:93:fe:64:71:db:07:11:1c: 85:98:30:c5:e5:09:65:f4:02:35:dd:d8:c3:21:ad:7f:37:89: c6:9e:9d:64:7a:81:ae:63:da:b2:ab:36:e3:c6:45:5e:c8:84: 1a:d5:2f:a4:ab:ca:ad:a9:ce:3b:04:94:5e:48:56:2b:64:04: ff:c6:74:2f:7a:17:cc:88:cf:89:35:e1:f5:6e:12:2c:cd:48: 85:e0:e5:36:30:42:7e:05:eb:1c:94:cb:19:e4:db:4b:9b:f3: ce:80:74:8c:24:b4:37:05:6b:f8:f0:48:89:31:99:de:db:29: 80:89:c2:ca:a5:fa:2d:03:b7:c2:a3:20:ca:d3:12:29:c5:4a: 83:a9:ad:05:81:68:f7:76:f1:1d:e8:41:aa:cb:c5:e0:f8:ec: 23:7d:85:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbXtbpx+V19zxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk NjY5M2ZjZjktZjBlYS00NmIxLWFiYzAtYmQ1ODQzOTlmYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywKQaCxFVmg9tX871A3m1JKUv581ZrXHMP98 VxIzeYC4l0WopAPen2JFisONMWDw0DX0JGWFWcd5d1o3J0BIyiEnrnFDL9HMG7Kr vwpx/klWKZDMHxUnFM8HTefsVHsJYEAs+Z18Le3u0LHshkBRsCOp4TuZK0HAY6YG HzAiMpv5NFESZw/YRLYEMRzbw6rO9/HL6TBIamZvLh35ICiMm+p1GTNb4GPgsJG7 tYOhWH94ZNM2fH06Qmq8LD0ROPkOyHGlmhG8lglivU7hSg3CGAKmKi4VDA/UaIir ZnsYzOS26Ojpty6hk3HfpkcEnw3+1fAhbE2V3ZMuC17WkQ964wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQITfipL0adZkTP5WKp4KJeNDXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNmVmOTFjNjQtNWEyYS0z MWMxLTgwNTAtYjcyYWUyZGNkNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGGLmb10zpjoJsMU5yK5/tvz8TSCUHy03TTnLO5ay2KVwcPtfVw+6Ek CTuoylVSn3TPRbv1+pn/EY8z+HRRK4lBPeT/gx+Rp6k3hkyzdTIgRusLzqGsVlS+ 2LJt8/TKhgnvBdiT/mRx2wcRHIWYMMXlCWX0AjXd2MMhrX83icaenWR6ga5j2rKr NuPGRV7IhBrVL6Sryq2pzjsElF5IVitkBP/GdC96F8yIz4k14fVuEizNSIXg5TYw Qn4F6xyUyxnk20ub886AdIwktDcFa/jwSIkxmd7bKYCJwsql+i0Dt8KjIMrTEinF SoOprQWBaPd28R3oQarLxeD47CN9hRo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org