$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa File: 0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa (raw, json) Hash identifier: WIw/yP2ogQ6rW0KVCSaDhN+I0No66pP81+qK2whKsZ4= Subject key identifier: 97:AF:44:EE:BC:17:41:C5:C7:FF:E5:9D:0F:33:25:BD:CA:7F:1D:DD Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858478E1BBDFBB5AA07BB37A371C0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 13414 IP address blocks: 209.237.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:bd:fb:b5:aa:07:bb:37:a3:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=047af57f-8b12-4158-a69b-d201dbd31587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:9b:1b:98:20:ff:ce:60:6e:01:5a:38:e3: f2:6e:8a:9a:74:94:9b:4d:f1:a8:d1:c5:e4:f2:3a: 43:87:26:dc:e6:d4:c1:85:44:f1:9d:78:d5:ac:52: bf:53:7b:12:76:1d:f1:21:ef:0e:b5:70:83:b3:42: 57:e9:50:c6:c8:0d:4d:3d:a3:e4:db:d6:3f:a7:05: 15:6e:e6:ee:29:29:32:0a:c8:52:af:59:f6:02:46: 84:1b:0f:d5:39:9d:4b:29:56:97:c9:1f:e1:f0:3b: 39:78:fd:28:13:d5:84:ac:d9:bf:63:09:64:d0:f6: 7f:59:de:10:4d:76:72:6a:4e:b8:39:96:20:03:66: 1f:3c:70:1f:13:89:44:b6:c6:d9:db:48:1e:44:9c: 8b:ec:c1:4d:9c:83:7f:4a:33:13:1e:59:2d:a3:ef: 0a:52:38:32:b8:7e:82:25:b6:37:77:73:0f:b1:a7: 0b:81:a6:79:d3:50:32:42:ea:ad:a5:4c:19:51:9d: 8c:38:46:01:59:7f:54:2c:96:33:44:48:0d:25:05: 02:a4:bc:51:23:27:ca:25:82:2f:15:dd:62:05:aa: 12:4f:71:09:3d:a0:25:c0:9d:23:15:c3:d6:fc:ab: d2:48:e3:42:0c:2f:98:e4:56:5c:d3:42:5b:4d:80: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AF:44:EE:BC:17:41:C5:C7:FF:E5:9D:0F:33:25:BD:CA:7F:1D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0fa25648-d9a1-3c94-9e66-3b8347e9f66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c2:8f:34:12:40:5b:93:0a:8b:c5:70:a6:47:fe:5a:c7:c4: 36:cb:78:8b:3f:ab:82:cd:bc:1d:dc:6b:ae:64:89:11:7c:7f: d5:5e:45:02:77:3d:04:6b:05:63:32:8c:4b:d0:83:a0:c7:eb: 99:8d:2d:9b:f5:8d:d4:a4:7f:7a:e5:4d:ef:33:ab:8f:51:72: 5c:55:63:48:7a:d7:d5:38:64:3d:4c:e6:25:e6:dd:77:6e:ac: 0d:1c:33:2b:62:76:b9:26:c2:3f:4f:be:66:33:a3:b2:b1:52: b1:92:8d:1f:4b:02:c2:ed:e7:57:97:47:42:e8:eb:70:d6:7d: be:86:62:93:af:83:1d:e9:5d:98:bc:28:ea:4e:98:25:8c:f0: 38:7e:0b:17:c2:2c:84:d4:5c:42:78:6f:54:68:a2:ea:ba:77: 8a:f1:29:f0:83:58:36:12:27:2d:6a:a0:c9:04:06:22:50:b5: 86:42:68:b1:8b:07:42:6d:96:80:79:25:8f:6e:fb:06:a5:80: cb:15:92:de:c6:20:d8:0b:6d:d0:9c:67:e2:5d:30:49:71:b1: f3:39:0b:ab:db:25:17:8f:86:e4:d4:b9:cc:a9:17:d3:e4:b8: d9:3b:a1:10:49:40:ae:ef:f3:c6:e9:e0:8b:7e:36:ad:5a:11: 09:bf:e1:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG737taoHuzejccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk MDQ3YWY1N2YtOGIxMi00MTU4LWE2OWItZDIwMWRiZDMxNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdWbG5gg/85gbgFaOOPyboqadJSbTfGo0cXk 8jpDhybc5tTBhUTxnXjVrFK/U3sSdh3xIe8OtXCDs0JX6VDGyA1NPaPk29Y/pwUV bubuKSkyCshSr1n2AkaEGw/VOZ1LKVaXyR/h8Ds5eP0oE9WErNm/Ywlk0PZ/Wd4Q TXZyak64OZYgA2YfPHAfE4lEtsbZ20geRJyL7MFNnIN/SjMTHlkto+8KUjgyuH6C JbY3d3MPsacLgaZ501AyQuqtpUwZUZ2MOEYBWX9ULJYzREgNJQUCpLxRIyfKJYIv Fd1iBaoST3EJPaAlwJ0jFcPW/KvSSONCDC+Y5FZc00JbTYD+/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJevRO68F0HFx//lnQ8zJb3Kfx3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMGZhMjU2NDgtZDlhMS0z Yzk0LTllNjYtM2I4MzQ3ZTlmNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPCjzQSQFuTCovFcKZH/lrHxDbLeIs/q4LNvB3ca65kiRF8f9VeRQJ3 PQRrBWMyjEvQg6DH65mNLZv1jdSkf3rlTe8zq49RclxVY0h619U4ZD1M5iXm3Xdu rA0cMytidrkmwj9PvmYzo7KxUrGSjR9LAsLt51eXR0Lo63DWfb6GYpOvgx3pXZi8 KOpOmCWM8Dh+CxfCLITUXEJ4b1Roouq6d4rxKfCDWDYSJy1qoMkEBiJQtYZCaLGL B0JtloB5JY9u+walgMsVkt7GINgLbdCcZ+JdMElxsfM5C6vbJRePhuTUucypF9Pk uNk7oRBJQK7v88bp4It+Nq1aEQm/4dI= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org