$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa File: 3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa (raw, json) Hash identifier: XTb8hbmcrEXWuVNUYNic0X6fwthN7EkJj/BYwxQs4WU= Subject key identifier: 6E:04:95:C8:D4:49:E7:1B:31:AD:16:96:BA:4E:A0:65:42:AB:E1:5A Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858478CB68A482DCF92AC94A49740 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 13414 IP address blocks: 209.237.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:8a:48:2d:cf:92:ac:94:a4:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=3945192a-bbb5-47dd-b167-9abd05c9e8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:22:86:81:0d:e2:4c:dc:c0:ed:e2:53:10:33: 59:37:86:2f:82:ac:2c:f2:b5:18:21:b1:23:88:3c: af:c0:ca:d0:a2:69:a5:dd:37:4d:a2:c9:d6:b3:29: a8:db:2c:8f:ed:ce:b0:45:bf:c6:a2:3b:5b:f5:f1: 4b:01:c2:49:aa:98:55:7b:3d:4d:0d:6b:81:70:2d: 75:63:93:94:aa:c2:32:d8:38:aa:42:06:c3:93:65: 15:43:16:a4:50:1d:a1:d8:42:e7:6d:fd:8d:4e:84: e0:a9:de:1c:ba:87:00:2e:a9:66:97:b5:35:f3:67: 4a:f1:3b:60:3a:a2:37:f6:ab:7b:6f:6e:be:9a:cd: 2b:5e:66:be:7e:d1:b8:6b:76:e9:c0:fd:49:70:5c: 76:14:a8:c9:10:33:52:1f:52:4d:6d:a7:95:03:97: 38:21:d1:02:6c:8e:b0:fa:97:d3:74:cc:92:7d:b2: ce:c7:b5:0b:4e:b5:4b:4d:5f:cf:17:10:4c:ca:e3: e8:9e:a5:95:31:9a:e4:d9:38:f5:a9:07:9d:90:4c: d3:09:51:d0:52:df:f5:18:97:52:cf:2b:91:6b:2c: da:9f:78:45:b4:dd:c4:ae:be:3b:58:d0:f7:4f:aa: 32:1a:17:28:c3:18:32:33:45:01:f8:da:da:68:4a: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:04:95:C8:D4:49:E7:1B:31:AD:16:96:BA:4E:A0:65:42:AB:E1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:99:32:e2:f1:86:4f:49:ef:69:21:4c:f4:00:64:b0:2e:95: b8:02:d8:70:5e:bb:f9:b5:a9:1b:6e:db:0e:c4:d4:1f:54:63: e4:ee:9f:aa:cf:44:ce:81:1f:57:11:cd:22:76:7d:1c:b3:47: c3:37:10:dc:2c:e7:ff:7e:1e:71:37:d5:8b:96:30:7f:08:7b: c5:f0:cc:1b:22:9e:fa:ea:f0:be:38:42:0f:a5:cd:33:34:96: 6d:2d:34:1e:7c:55:6b:06:2c:44:52:68:3c:4a:79:26:df:16: 48:29:3f:9e:d2:25:e2:af:df:31:7c:ad:e1:e8:42:eb:29:bf: f8:ff:61:18:bd:7e:39:e8:ec:60:d2:cc:9e:27:6f:09:f7:00: 1d:df:5c:63:7a:7d:06:98:66:81:fd:0e:1b:f2:f8:d6:7c:b5: f1:6a:99:70:38:be:77:8a:f9:da:ac:6e:b1:cd:8a:11:ee:62: 6b:7e:49:d7:1b:43:2a:57:48:91:1c:fe:53:14:ae:e9:80:ff: 8c:53:2d:ca:b7:33:c4:49:e9:05:00:64:31:b7:44:5f:9f:1a: f3:e0:fb:5e:2a:8a:78:51:a2:15:d1:2a:1d:09:3b:30:53:4c: e4:1c:87:41:c0:33:fe:b4:a4:66:89:53:15:d1:db:92:ad:62: 92:8a:ef:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtopILc+SrJSkl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk Mzk0NTE5MmEtYmJiNS00N2RkLWIxNjctOWFiZDA1YzllOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCKGgQ3iTNzA7eJTEDNZN4Yvgqws8rUYIbEj iDyvwMrQomml3TdNosnWsymo2yyP7c6wRb/Gojtb9fFLAcJJqphVez1NDWuBcC11 Y5OUqsIy2DiqQgbDk2UVQxakUB2h2ELnbf2NToTgqd4cuocALqlml7U182dK8Ttg OqI39qt7b26+ms0rXma+ftG4a3bpwP1JcFx2FKjJEDNSH1JNbaeVA5c4IdECbI6w +pfTdMySfbLOx7ULTrVLTV/PFxBMyuPonqWVMZrk2Tj1qQedkEzTCVHQUt/1GJdS zyuRayzan3hFtN3Err47WND3T6oyGhcowxgyM0UB+NraaEprFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4ElcjUSecbMa0WlrpOoGVCq+FaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvM2IwNjA4MmQtNDYwOS0z OGU0LWE3ZDYtYjM3MzNkYzc2YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaZMuLxhk9J72khTPQAZLAulbgC2HBeu/m1qRtu2w7E1B9UY+Tun6rP RM6BH1cRzSJ2fRyzR8M3ENws5/9+HnE31YuWMH8Ie8XwzBsinvrq8L44Qg+lzTM0 lm0tNB58VWsGLERSaDxKeSbfFkgpP57SJeKv3zF8reHoQuspv/j/YRi9fjno7GDS zJ4nbwn3AB3fXGN6fQaYZoH9Dhvy+NZ8tfFqmXA4vneK+dqsbrHNihHuYmt+Sdcb QypXSJEc/lMUrumA/4xTLcq3M8RJ6QUAZDG3RF+fGvPg+14qinhRohXRKh0JOzBT TOQch0HAM/60pGaJUxXR25KtYpKK78s= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org