$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa File: a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa (raw, json) Hash identifier: aAfqXQy6ciiWDbn2CPWqRQnD3Tw3BvujdoiGtv8L3PE= Subject key identifier: 33:04:C2:40:9D:E3:99:60:0D:3F:B8:03:43:D0:29:9C:0B:6E:53:62 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F432858478CB685273D533899650B5A80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 13414 IP address blocks: 209.237.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:85:27:3d:53:38:99:65:0b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=2f3ab81e-0716-4235-a7c3-c0b6ac239f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:ec:e3:db:e8:b8:42:c6:d6:27:b1:4d:cb: 55:41:99:9e:3d:85:b9:39:44:18:ee:08:af:29:ee: 1c:71:71:a0:6a:c9:7d:a1:f3:d5:33:28:de:b9:d9: 26:37:10:7c:91:cc:9c:11:4f:27:7a:76:a2:ec:e0: ea:b6:0f:e5:88:63:de:93:d4:65:aa:68:b4:7b:32: 4b:dd:10:c4:80:25:2b:19:1f:46:6f:19:c6:46:b0: 8d:e3:39:b3:bb:5f:71:5c:3d:b8:5d:48:8f:1f:1a: 23:fe:f4:36:cd:2b:a0:02:5b:85:87:5c:3c:86:e2: fd:c2:e3:14:54:32:61:8a:05:6a:23:49:50:c5:76: a4:c7:77:1c:53:91:e7:e1:45:36:6a:83:55:7e:b3: 4f:17:81:e3:1a:af:43:72:69:d9:30:e6:3d:78:6b: ad:90:b9:60:ed:7e:7f:eb:1d:02:4c:03:19:56:10: dd:69:7a:56:fa:ff:6c:3f:1e:42:9a:12:89:24:50: 91:4a:46:af:72:23:e8:93:a5:01:8c:55:23:02:b8: 05:b3:c6:25:ee:27:38:cb:ee:46:0e:51:21:f8:a9: 3e:5f:15:31:c3:be:52:e1:39:e0:d8:fb:18:8e:83: 73:8d:33:00:86:cf:22:47:d3:15:01:1f:68:55:bf: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:C2:40:9D:E3:99:60:0D:3F:B8:03:43:D0:29:9C:0B:6E:53:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a8c470dd-40a2-3faa-87d8-a951faf3d8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4f:cd:01:7e:17:5a:0f:74:23:b8:4c:68:ad:2b:d0:da:86: 80:72:68:1b:95:8a:fb:8a:47:69:6c:fa:19:1f:3f:2e:87:98: 18:7a:f7:05:d0:7b:82:2f:d4:66:98:ee:8c:ec:4e:33:67:73: d2:80:1e:26:1f:04:03:08:8b:6d:bd:9a:2c:b7:49:a8:4d:26: bb:39:87:8d:96:42:3b:66:d1:67:5d:d4:f0:85:61:09:09:d4: 99:53:10:6c:be:10:ef:d4:ec:50:3d:f7:d0:de:6c:28:dc:b0: 96:48:ab:36:6b:90:5d:93:f2:fb:57:61:4a:d8:31:cd:01:f2: 02:a4:20:a8:25:20:46:52:39:d3:4c:4d:8c:9c:1e:0a:12:1b: 6f:a0:42:8c:2a:78:be:54:a4:ef:0c:8e:62:21:da:10:07:44: 26:38:bb:a9:39:04:9a:1e:0e:44:e2:6d:d3:d7:21:c0:e2:8b: dc:58:c2:ab:84:a2:1f:cb:d6:93:48:bf:83:ca:a7:3d:b6:d2: 8d:a5:32:c2:8f:e7:6d:58:30:cd:2f:8e:ea:c2:71:6e:9e:ed: 56:f3:16:1e:b9:7d:53:00:74:f3:19:5c:94:89:f8:f7:f6:92: 30:2a:5c:7d:3f:ce:3e:eb:a3:65:1c:d6:e9:5c:82:b0:e9:a4: f9:7c:c1:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtoUnPVM4mWULWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk MmYzYWI4MWUtMDcxNi00MjM1LWE3YzMtYzBiNmFjMjM5ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh7s49vouELG1iexTctVQZmePYW5OUQY7giv Ke4ccXGgasl9ofPVMyjeudkmNxB8kcycEU8nenai7ODqtg/liGPek9Rlqmi0ezJL 3RDEgCUrGR9GbxnGRrCN4zmzu19xXD24XUiPHxoj/vQ2zSugAluFh1w8huL9wuMU VDJhigVqI0lQxXakx3ccU5Hn4UU2aoNVfrNPF4HjGq9DcmnZMOY9eGutkLlg7X5/ 6x0CTAMZVhDdaXpW+v9sPx5CmhKJJFCRSkavciPok6UBjFUjArgFs8Yl7ic4y+5G DlEh+Kk+XxUxw75S4Tng2PsYjoNzjTMAhs8iR9MVAR9oVb/SpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMEwkCd45lgDT+4A0PQKZwLblNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYThjNDcwZGQtNDBhMi0z ZmFhLTg3ZDgtYTk1MWZhZjNkOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5PzQF+F1oPdCO4TGitK9DahoByaBuVivuKR2ls+hkfPy6HmBh69wXQ e4Iv1GaY7ozsTjNnc9KAHiYfBAMIi229miy3SahNJrs5h42WQjtm0Wdd1PCFYQkJ 1JlTEGy+EO/U7FA999DebCjcsJZIqzZrkF2T8vtXYUrYMc0B8gKkIKglIEZSOdNM TYycHgoSG2+gQowqeL5UpO8MjmIh2hAHRCY4u6k5BJoeDkTibdPXIcDii9xYwquE oh/L1pNIv4PKpz220o2lMsKP521YMM0vjurCcW6e7VbzFh65fVMAdPMZXJSJ+Pf2 kjAqXH0/zj7ro2Uc1ulcgrDppPl8wTA= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org