$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa File: f7690f1e-c39d-30e1-9d78-56741c6780a0.roa (raw, json) Hash identifier: rFufECaYvMYhpfNiv6K5VmMzQbkVU2rljjdPHVHOR4M= Subject key identifier: 54:15:66:26:0E:3A:B9:3B:5E:14:0B:EE:32:64:E0:CF:6E:BA:9F:76 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584799467460EB41ECC47D144F00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa Signing time: Sun 20 Oct 2024 01:00:30 +0000 ROA not before: Sun 20 Oct 2024 01:00:30 +0000 ROA not after: Sat 18 Jan 2025 02:00:30 +0000 asID: 11232 IP address blocks: 209.169.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:99:46:74:60:eb:41:ec:c4:7d:14:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 20 01:00:30 2024 GMT Not After : Jan 18 02:00:30 2025 GMT Subject: CN=d76c9b34-67b3-43fd-bde8-8d5fa71d319b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:df:07:71:f9:a7:83:f3:a8:44:44:6c:71: 19:7b:91:c8:4b:46:c5:9f:83:75:10:c7:e5:5d:7a: f3:d4:1d:f3:20:70:79:2b:1b:31:b4:f7:d4:fa:4a: ca:fa:9d:72:98:c6:31:7e:1e:6e:aa:2b:6e:2a:44: 22:25:9a:d3:55:14:40:3d:b3:83:91:f3:c1:15:64: 20:9c:6c:7c:61:02:e7:b4:d8:04:da:b3:50:5b:b8: af:59:7f:aa:85:48:86:3c:f7:42:88:f3:1a:65:9d: b0:f3:72:ad:a8:5f:42:64:20:e4:ff:41:6c:c3:0b: 73:c2:aa:6a:11:2b:02:47:26:f7:51:54:b1:0c:b5: 9d:dd:8e:f8:fc:03:9e:e8:fb:4f:42:b4:44:2c:58: 80:4c:9f:2f:3e:96:b0:6d:0d:36:c8:ed:3e:4d:c9: 4d:47:b0:ed:0e:c2:af:0d:c6:49:e3:c9:25:65:19: fc:e1:aa:b4:d1:f8:85:ae:93:52:d5:41:49:b8:9d: 62:42:52:7f:f3:fe:f3:ac:9f:53:61:44:c8:75:5b: 92:a3:70:62:bb:f0:b8:04:bb:d5:d1:1b:bc:92:38: 92:34:7f:27:3c:bf:e5:f9:19:d2:31:13:45:7f:67: da:ac:b0:e9:6a:fa:85:34:c6:45:15:74:95:0a:2c: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:15:66:26:0E:3A:B9:3B:5E:14:0B:EE:32:64:E0:CF:6E:BA:9F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 209.169.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a8:85:21:26:0e:1d:d6:d6:41:cc:04:9d:f7:b0:2b:49:f4: 64:dd:28:42:c7:b7:ce:68:96:8a:ba:5e:c9:c2:04:7b:9a:72: 5c:9c:53:31:cb:42:37:cf:3b:9a:00:ed:f8:ac:fa:ff:ea:2a: dd:27:7f:a1:64:a7:bf:51:95:8f:65:74:61:09:78:0a:b4:4b: 2f:5a:f7:14:59:82:37:db:58:c7:71:67:0d:03:7e:43:90:1c: 42:09:bf:24:13:8b:1e:fd:56:cb:15:39:89:ee:9a:24:f2:0a: a9:d5:20:9c:32:25:5d:54:33:6b:bd:ff:c3:85:00:1f:2c:30: ff:6d:ce:c4:6e:f2:36:8d:90:c0:d9:8c:68:f0:0a:04:78:53: f0:17:21:b7:49:c3:b3:30:a5:1b:07:3e:94:c7:93:48:08:84: fd:61:07:be:2a:d7:4c:6e:42:e6:7f:4f:91:82:05:dc:54:65: 2a:16:d5:e9:2c:95:cf:fa:80:f0:5c:05:2e:f0:65:ef:4a:32: 1b:e7:d5:fb:38:94:d8:c2:f9:af:05:0c:fc:fe:0d:75:2e:3c: 83:17:76:75:33:10:3c:dc:e0:ab:9a:5d:69:6f:fb:8a:df:72: c6:fa:ca:4f:ed:a3:d3:06:d1:14:bb:55:19:68:ef:d1:a5:1f: b5:bd:aa:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeZRnRg60HsxH0UTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI0MTAyMDAxMDAzMFoXDTI1MDExODAyMDAzMFowLzEtMCsGA1UEAxMk ZDc2YzliMzQtNjdiMy00M2ZkLWJkZTgtOGQ1ZmE3MWQzMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYvfB3H5p4PzqEREbHEZe5HIS0bFn4N1EMfl XXrz1B3zIHB5KxsxtPfU+krK+p1ymMYxfh5uqituKkQiJZrTVRRAPbODkfPBFWQg nGx8YQLntNgE2rNQW7ivWX+qhUiGPPdCiPMaZZ2w83KtqF9CZCDk/0Fswwtzwqpq ESsCRyb3UVSxDLWd3Y74/AOe6PtPQrRELFiATJ8vPpawbQ02yO0+TclNR7DtDsKv DcZJ48klZRn84aq00fiFrpNS1UFJuJ1iQlJ/8/7zrJ9TYUTIdVuSo3Biu/C4BLvV 0Ru8kjiSNH8nPL/l+RnSMRNFf2farLDpavqFNMZFFXSVCiyoVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQVZiYOOrk7XhQL7jJk4M9uup92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjc2OTBmMWUtYzM5ZC0z MGUxLTlkNzgtNTY3NDFjNjc4MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0anQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCohSEmDh3W1kHMBJ33sCtJ9GTdKELHt85oloq6XsnCBHuaclycUzHL QjfPO5oA7fis+v/qKt0nf6Fkp79RlY9ldGEJeAq0Sy9a9xRZgjfbWMdxZw0DfkOQ HEIJvyQTix79VssVOYnumiTyCqnVIJwyJV1UM2u9/8OFAB8sMP9tzsRu8jaNkMDZ jGjwCgR4U/AXIbdJw7MwpRsHPpTHk0gIhP1hB74q10xuQuZ/T5GCBdxUZSoW1eks lc/6gPBcBS7wZe9KMhvn1fs4lNjC+a8FDPz+DXUuPIMXdnUzEDzc4KuaXWlv+4rf csb6yk/to9MG0RS7VRlo79GlH7W9qlk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:47 2024 by rpki-client on console-ams.rpki-client.org