$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa File: 4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa (raw, json) Hash identifier: kYDPAkhIs/AZATIRGvJBYVbz7+u5tQHTeljRHVekmAY= Subject key identifier: E7:16:9F:D0:0A:7A:1A:21:9E:D6:7E:51:6F:98:7C:23:F6:42:0C:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858478E1BC93B57978CCE6A262E20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 0 IP address blocks: 209.112.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:c9:3b:57:97:8c:ce:6a:26:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=4ee9c295-f920-4135-92a8-fa235a4becaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:20:48:2e:5c:9e:c1:7a:48:13:57:d5:2d: 1a:df:7c:a5:ee:1f:f5:d4:85:a2:c4:3d:43:57:67: 57:6e:46:d6:ac:3f:cd:3a:47:89:c9:6b:52:ba:2b: b6:da:e2:ce:e1:ad:69:84:f9:af:50:8d:4f:b6:b7: b8:9c:10:cb:e8:75:da:62:34:85:0d:1d:73:d4:c4: 4d:da:9b:90:c9:0f:45:80:b6:95:9c:34:59:e8:4c: 7d:8d:21:f4:50:72:38:49:d1:54:54:91:8e:0b:62: 9d:c8:f8:ed:dc:d9:ee:18:b1:c5:57:8a:00:b7:2e: 25:1a:91:7b:45:18:87:72:51:8b:e3:77:ca:58:95: ae:c3:0a:e4:f7:bb:b6:2d:23:84:85:14:dc:32:cc: d1:ab:b8:12:bd:88:90:03:bc:19:f0:4f:e2:89:b8: 65:d9:4f:b6:76:a7:27:6b:43:37:d0:12:2e:b1:b8: 71:e3:2a:82:ef:d9:92:35:6f:9c:56:ff:90:6b:93: d6:2b:05:07:c4:32:be:45:6b:17:65:f8:2a:56:fa: 41:d8:96:97:50:bd:f7:d2:66:84:0c:54:ac:9a:b0: 7c:79:c5:1c:2d:05:05:b4:2a:35:f4:ce:7e:23:55: 97:01:34:16:74:f4:55:3d:6b:f8:00:e6:3c:4b:fe: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:16:9F:D0:0A:7A:1A:21:9E:D6:7E:51:6F:98:7C:23:F6:42:0C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:93:15:63:7a:b7:fe:48:e1:eb:6d:00:ab:b0:0b:52:d6:5d: 2e:1d:0f:64:a4:da:47:30:9f:d1:8c:98:bd:04:2e:83:73:32: 3b:21:57:a6:18:72:5c:d4:81:d7:1d:13:9d:6f:d3:c6:bb:29: e8:fe:fb:f8:b8:c2:81:c4:2d:00:8d:32:f8:25:79:c1:93:ff: f5:63:5d:a5:5a:75:5e:dc:64:61:d8:39:69:25:88:3f:9e:11: 32:4a:75:36:4c:da:83:3e:d4:3f:8f:4e:a9:2a:2a:dd:86:4b: 0e:91:05:52:59:15:8f:b9:22:c3:d3:9f:28:92:d0:b7:09:d5: c0:d2:08:c4:ac:b4:2f:a9:c9:48:9e:a9:27:fe:e3:0b:c7:4c: 0b:fa:6d:f4:61:b4:8b:4c:47:34:68:27:62:dd:11:03:9a:c0: c1:c2:1b:b9:a0:1b:e0:c2:50:9a:06:b0:df:1c:1f:d8:bb:1a: 91:65:35:02:17:91:0d:61:17:8d:54:ff:37:30:08:b7:ba:a3: bf:02:5f:c8:c5:38:af:33:d2:48:3e:45:a1:36:1c:3f:32:4c: 17:0f:29:c3:85:91:5f:97:a4:0c:61:eb:c2:81:a7:40:0d:f6: 09:d8:b5:0c:4d:eb:f8:3e:01:40:94:1e:52:da:2c:40:2c:b9: 7e:ea:50:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG8k7V5eMzmomLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk NGVlOWMyOTUtZjkyMC00MTM1LTkyYTgtZmEyMzVhNGJlY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogwgSC5cnsF6SBNX1S0a33yl7h/11IWixD1D V2dXbkbWrD/NOkeJyWtSuiu22uLO4a1phPmvUI1Ptre4nBDL6HXaYjSFDR1z1MRN 2puQyQ9FgLaVnDRZ6Ex9jSH0UHI4SdFUVJGOC2KdyPjt3NnuGLHFV4oAty4lGpF7 RRiHclGL43fKWJWuwwrk97u2LSOEhRTcMszRq7gSvYiQA7wZ8E/iibhl2U+2dqcn a0M30BIusbhx4yqC79mSNW+cVv+Qa5PWKwUHxDK+RWsXZfgqVvpB2JaXUL330maE DFSsmrB8ecUcLQUFtCo19M5+I1WXATQWdPRVPWv4AOY8S/5jNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcWn9AKehohntZ+UW+YfCP2QgwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGJhYzllNzctYmUyOS0z YjYyLWFlMDQtNGMwYzVhYWU0Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWTFWN6t/5I4ettAKuwC1LWXS4dD2Sk2kcwn9GMmL0ELoNzMjshV6YY clzUgdcdE51v08a7Kej++/i4woHELQCNMvglecGT//VjXaVadV7cZGHYOWkliD+e ETJKdTZM2oM+1D+PTqkqKt2GSw6RBVJZFY+5IsPTnyiS0LcJ1cDSCMSstC+pyUie qSf+4wvHTAv6bfRhtItMRzRoJ2LdEQOawMHCG7mgG+DCUJoGsN8cH9i7GpFlNQIX kQ1hF41U/zcwCLe6o78CX8jFOK8z0kg+RaE2HD8yTBcPKcOFkV+XpAxh68KBp0AN 9gnYtQxN6/g+AUCUHlLaLEAsuX7qUK0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:33 2024 by rpki-client on console-fra.rpki-client.org