$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa File: 24cd566e-cce5-31a0-9029-1e2d74307ceb.roa (raw, json) Hash identifier: hF5/ksQ+yPRZ71eqXOTcvfYXEivW6KrvwpvDhwrJG5k= Subject key identifier: 9B:68:F5:36:EF:E0:26:8C:BD:10:56:F0:74:B3:51:E2:BB:D0:47:45 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858478E1BBD74337C81012D991C80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 13414 IP address blocks: 209.237.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:bd:74:33:7c:81:01:2d:99:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=eff2103c-3e7d-4d47-9d28-e7b7e1a08107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:7c:50:49:e2:f9:1b:16:99:4d:4a:c4:37: c1:0b:b8:93:3a:da:27:76:74:34:7c:0c:7c:97:ef: d0:ff:ec:72:77:d9:72:e4:43:7e:81:d9:21:e8:7b: 87:19:6b:c1:ff:68:f6:a0:07:1b:73:f6:fe:87:73: a3:fd:fb:ae:09:bc:84:b5:72:59:a6:5b:1e:78:e2: f4:3f:f9:9b:05:0b:25:d0:cf:fb:a6:61:18:ef:7d: ca:f3:08:07:c4:06:06:f5:51:c9:00:65:1b:64:a0: 27:80:9e:77:0b:53:49:4a:6a:b8:84:6d:61:0a:7a: a5:64:09:b1:0b:ac:06:80:21:dc:4d:2d:67:b5:e5: 58:d3:26:65:6d:2e:1d:55:95:73:d5:5c:90:97:27: 02:00:ba:ae:8f:17:ba:f2:51:11:5f:88:d1:36:01: 47:0c:16:c6:17:27:5e:ad:fd:13:d4:54:04:aa:30: 4b:fc:2d:82:25:e4:39:a1:bc:a7:8c:0d:29:34:9c: 66:ef:be:9b:b8:2a:93:ec:f6:11:90:30:b3:ea:94: dc:67:32:e8:a1:0a:9a:6e:b3:be:1c:60:fb:f1:a9: 0f:d6:ae:26:50:dc:3e:b1:16:56:55:05:5d:9e:72: fb:cc:e7:18:6b:da:97:b7:4a:5d:56:cc:82:c7:a3: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:68:F5:36:EF:E0:26:8C:BD:10:56:F0:74:B3:51:E2:BB:D0:47:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:79:0a:ae:35:c0:70:fd:00:bf:09:30:0b:06:28:2d:1c:8b: 57:f1:84:bf:3c:9c:54:8e:5d:55:5d:30:16:6d:dc:a7:2b:3c: 80:2d:1f:57:e3:45:85:65:d0:43:d7:6f:6a:21:63:a2:07:8b: 6d:d2:e8:b2:69:34:26:4c:a5:ca:e8:e1:c6:3d:e3:51:f6:dd: 9a:d5:ac:d9:80:3b:21:d0:d6:89:66:f3:df:f2:cb:b8:68:c9: 25:25:20:b2:54:d1:08:60:93:bd:44:95:67:f1:7d:1a:1e:b5: a4:b1:5c:74:dd:b2:61:90:a4:ef:0f:3d:27:40:44:26:90:8c: f0:bf:40:66:59:04:ac:16:57:2c:2d:e7:69:cb:5f:26:9b:af: 64:1b:fd:1a:8c:f3:be:10:a8:b2:16:1d:24:88:ee:ab:57:80: f6:5a:1e:63:fd:56:81:27:48:8f:b9:e6:a0:a7:ce:98:de:36: 7a:0b:5c:f0:38:03:eb:df:0b:6b:c9:da:15:cf:92:ff:e5:86: b2:d4:9f:ad:9b:01:19:c3:e2:99:a8:a1:41:5c:4d:1d:f8:8d: ac:92:b9:e9:cf:32:43:1a:6c:72:60:89:5a:96:e8:cf:ff:00: 2b:ae:f8:ea:30:b9:a5:ff:e6:26:d8:7e:7d:4d:e0:f6:64:ae: b4:7e:32:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG710M3yBAS2ZHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk ZWZmMjEwM2MtM2U3ZC00ZDQ3LTlkMjgtZTdiN2UxYTA4MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbB8UEni+RsWmU1KxDfBC7iTOtondnQ0fAx8 l+/Q/+xyd9ly5EN+gdkh6HuHGWvB/2j2oAcbc/b+h3Oj/fuuCbyEtXJZplseeOL0 P/mbBQsl0M/7pmEY733K8wgHxAYG9VHJAGUbZKAngJ53C1NJSmq4hG1hCnqlZAmx C6wGgCHcTS1nteVY0yZlbS4dVZVz1VyQlycCALqujxe68lERX4jRNgFHDBbGFyde rf0T1FQEqjBL/C2CJeQ5obynjA0pNJxm776buCqT7PYRkDCz6pTcZzLooQqabrO+ HGD78akP1q4mUNw+sRZWVQVdnnL7zOcYa9qXt0pdVsyCx6MRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJto9Tbv4CaMvRBW8HSzUeK70EdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMjRjZDU2NmUtY2NlNS0z MWEwLTkwMjktMWUyZDc0MzA3Y2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt5Cq41wHD9AL8JMAsGKC0ci1fxhL88nFSOXVVdMBZt3KcrPIAtH1fj RYVl0EPXb2ohY6IHi23S6LJpNCZMpcro4cY941H23ZrVrNmAOyHQ1olm89/yy7ho ySUlILJU0Qhgk71ElWfxfRoetaSxXHTdsmGQpO8PPSdARCaQjPC/QGZZBKwWVywt 52nLXyabr2Qb/RqM874QqLIWHSSI7qtXgPZaHmP9VoEnSI+55qCnzpjeNnoLXPA4 A+vfC2vJ2hXPkv/lhrLUn62bARnD4pmooUFcTR34jaySuenPMkMabHJgiVqW6M// ACuu+OowuaX/5ibYfn1N4PZkrrR+Mvc= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org