$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa File: 4bf76b6d-5970-3d19-8ade-5717d3645acf.roa (raw, json) Hash identifier: ZPJzUkkeBFioykhx4ivYG0pyUeO+4w5b2DLLZNW8kIU= Subject key identifier: 67:5B:69:FF:21:C0:3E:85:7E:54:E9:9F:35:38:BD:B6:DC:0E:80:ED Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F43285847994675D6691542B8B3FAC1C0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa Signing time: Sun 20 Oct 2024 01:00:30 +0000 ROA not before: Sun 20 Oct 2024 01:00:30 +0000 ROA not after: Sat 18 Jan 2025 02:00:30 +0000 asID: 11232 IP address blocks: 209.169.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:99:46:75:d6:69:15:42:b8:b3:fa:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 20 01:00:30 2024 GMT Not After : Jan 18 02:00:30 2025 GMT Subject: CN=6e2d11f6-0125-43ae-8b5b-1eebdd3d0e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:03:00:9b:3a:6f:5d:cb:f3:40:fb:de:2b: e2:7a:a7:1c:6c:20:13:8c:fc:31:79:0e:e2:32:0c: 2b:50:48:78:a6:41:8d:67:c6:93:d8:b1:34:19:f7: fd:0b:e8:e2:3b:bd:53:2f:8c:e1:35:ba:3d:72:f1: 4e:ca:ed:99:79:8e:72:18:cb:d2:07:0b:e5:4e:33: a7:93:52:7c:81:81:4a:2f:92:a0:3d:46:dd:59:c9: f6:52:0a:2b:1a:7d:c2:5b:0d:6c:3c:0b:a6:74:e7: ef:5c:d3:0f:8a:dd:c1:23:ad:b8:dd:52:ba:42:c6: 47:12:49:33:51:03:b6:1c:c2:3c:8b:66:41:05:aa: 03:1c:bc:f3:74:78:85:00:d6:57:4c:09:6d:f3:d8: 7b:45:7e:4c:17:12:7d:7c:36:6f:f3:a0:72:5d:53: 9e:42:f9:ff:b9:c2:45:55:a0:49:e6:40:99:54:be: 20:39:2d:18:83:4b:07:bc:fc:9b:9c:ff:ae:ec:2a: 8d:74:77:34:f4:b5:93:f7:65:b1:55:84:7b:a1:72: 42:da:bf:ff:80:57:4a:bc:87:bc:14:3a:01:df:8a: e5:3b:43:a3:e3:b7:c1:88:8d:5c:c2:c6:09:00:c7: fc:cc:38:85:bf:9c:2f:b8:d8:0a:47:8c:62:00:55: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5B:69:FF:21:C0:3E:85:7E:54:E9:9F:35:38:BD:B6:DC:0E:80:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 209.169.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:2c:61:31:26:35:02:cc:97:af:a7:f7:f4:ea:c1:d7:16:0e: 04:c8:e8:01:5e:75:9d:bb:64:3c:b1:8a:51:6c:e1:5c:a0:92: f3:c8:68:7d:f6:f8:0d:19:f5:0d:5e:f8:56:78:36:1f:a0:14: 92:40:fb:63:a6:87:84:fb:92:ad:4a:bf:69:36:b2:a8:b6:af: 19:fd:3c:01:97:be:e2:e3:ea:bc:1c:49:cb:f5:56:4e:c3:7d: 25:da:59:63:1e:a1:26:c6:45:be:d6:48:54:ce:0c:6a:6a:6d: 64:88:c7:e7:68:97:05:f4:65:7b:71:17:4c:11:3b:40:81:ae: 69:54:2c:87:7b:74:0f:e9:a1:0c:f5:c6:a9:4c:87:13:e0:61: 00:dd:c0:53:55:40:4e:fa:47:a9:7b:f1:6b:12:f2:dc:15:35: 0c:90:30:ee:44:4f:b2:06:b6:51:d3:0e:29:1e:c8:68:a4:25: 9e:88:39:3f:6e:06:2d:bc:18:c9:2a:55:e5:a0:03:1d:6f:fd: 2e:1c:34:f0:0f:d1:ba:7b:2a:54:99:8c:2c:09:41:f0:b8:70: bf:3f:79:7a:1a:23:82:e6:47:65:eb:35:00:9d:14:6c:6b:75: 0f:4d:13:40:60:e0:2a:48:0f:99:e8:f3:21:d2:8c:6e:c9:3d: d1:ab:22:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeZRnXWaRVCuLP6wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MTAyMDAxMDAzMFoXDTI1MDExODAyMDAzMFowLzEtMCsGA1UEAxMk NmUyZDExZjYtMDEyNS00M2FlLThiNWItMWVlYmRkM2QwZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVUDAJs6b13L80D73ivieqccbCATjPwxeQ7i MgwrUEh4pkGNZ8aT2LE0Gff9C+jiO71TL4zhNbo9cvFOyu2ZeY5yGMvSBwvlTjOn k1J8gYFKL5KgPUbdWcn2UgorGn3CWw1sPAumdOfvXNMPit3BI6243VK6QsZHEkkz UQO2HMI8i2ZBBaoDHLzzdHiFANZXTAlt89h7RX5MFxJ9fDZv86ByXVOeQvn/ucJF VaBJ5kCZVL4gOS0Yg0sHvPybnP+u7CqNdHc09LWT92WxVYR7oXJC2r//gFdKvIe8 FDoB34rlO0Oj47fBiI1cwsYJAMf8zDiFv5wvuNgKR4xiAFXPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdbaf8hwD6FflTpnzU4vbbcDoDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNGJmNzZiNmQtNTk3MC0z ZDE5LThhZGUtNTcxN2QzNjQ1YWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0anaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEsYTEmNQLMl6+n9/TqwdcWDgTI6AFedZ27ZDyxilFs4VygkvPIaH32 +A0Z9Q1e+FZ4Nh+gFJJA+2Omh4T7kq1Kv2k2sqi2rxn9PAGXvuLj6rwcScv1Vk7D fSXaWWMeoSbGRb7WSFTODGpqbWSIx+dolwX0ZXtxF0wRO0CBrmlULId7dA/poQz1 xqlMhxPgYQDdwFNVQE76R6l78WsS8twVNQyQMO5ET7IGtlHTDikeyGikJZ6IOT9u Bi28GMkqVeWgAx1v/S4cNPAP0bp7KlSZjCwJQfC4cL8/eXoaI4LmR2XrNQCdFGxr dQ9NE0Bg4CpID5no8yHSjG7JPdGrInI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:45 2024 by rpki-client on console-ams.rpki-client.org