$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa File: 0def88de-7904-3498-ae64-f09bd667030d.roa (raw, json) Hash identifier: YwV/QZ2WUx949cca32UfWNhfpJSVKuBmlcYBEuYM39M= Subject key identifier: 4D:AB:CA:E3:0E:0C:41:08:2F:18:03:F7:38:10:46:D4:A0:A9:52:E6 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285847BAC6AAEC6DCB97BF44C9BE80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 13536 IP address blocks: 209.198.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:aa:ec:6d:cb:97:bf:44:c9:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=77c06d91-30d4-41fd-bbbc-a21cb75729b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:82:67:7c:04:dc:01:85:64:55:df:95:2e: 1f:be:ce:d1:e8:55:fd:8c:d9:1f:2b:4d:93:df:12: 83:b7:50:ba:e3:d0:2e:63:0f:4f:23:08:6e:56:6a: ca:7a:ce:0f:99:9a:04:cb:37:58:39:a3:d4:64:c0: 1c:3d:28:97:22:a8:19:f8:50:c7:22:a7:74:27:83: 93:bb:92:24:a4:33:00:a3:de:6f:45:7d:10:55:1c: 02:d4:d5:32:e2:68:4f:f2:01:3b:97:53:af:cf:a3: 93:7f:42:cc:90:f2:13:41:3b:03:2f:5e:5c:10:e9: 86:16:fe:57:54:81:86:e5:ce:3b:37:ff:13:d4:26: 4c:ab:1b:45:ef:e4:55:d2:32:fc:43:26:5d:71:41: 16:cc:9d:48:54:11:9d:95:ed:8c:a5:d9:c9:83:88: 25:af:06:2f:94:88:9f:ce:d9:de:fe:92:a9:61:db: 98:39:10:24:c0:ec:98:b7:79:6a:a2:05:87:2c:7f: a8:2d:91:18:a2:63:94:b2:50:90:d4:76:00:47:a7: 55:22:db:cf:c1:02:5b:87:2e:09:98:f8:8b:27:e5: 1a:27:91:bb:f7:c0:29:0d:d1:9a:46:3a:3f:bc:85: b3:03:05:64:8a:75:a2:77:16:12:b1:c0:d0:0e:ac: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:CA:E3:0E:0C:41:08:2F:18:03:F7:38:10:46:D4:A0:A9:52:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5e:5c:d8:80:d3:75:85:07:f4:82:af:45:71:7d:04:9b:a3: ea:b1:1e:e6:e7:49:7b:24:ee:80:fe:dd:b8:8b:8d:c6:e1:fc: 44:c1:7d:82:0d:87:8f:be:20:fd:9c:c3:a9:63:2e:40:c7:77: 79:c6:d2:3b:7f:41:e1:a5:85:8d:c1:26:93:40:cc:7b:f6:21: c7:54:14:80:cf:77:dc:25:4e:58:81:74:2b:6c:9f:4a:cf:46: 73:c7:1d:fb:9b:b5:14:6b:9f:fc:90:d1:ef:4a:1e:9b:04:b9: 85:87:26:44:2f:ee:4f:e5:ff:45:fc:b5:e3:6e:02:a3:17:63: 11:85:2d:1f:b6:61:6b:cb:ef:ab:b2:c7:02:4e:c7:5a:23:31: 35:39:d1:8b:48:d6:c8:36:b8:c7:d3:91:e4:95:86:77:bf:7f: 8a:ae:9e:8d:d6:d7:bc:53:91:49:4b:be:5d:f4:91:c1:74:6e: 46:eb:40:3b:8f:c1:9e:bd:40:44:4a:c2:dc:9b:af:e0:c9:61: 0a:c0:8a:df:60:fc:bb:ba:01:8c:a7:d0:fc:e2:0c:2d:b6:da: 18:5d:89:d7:4a:0c:9c:44:ac:46:09:ad:5e:99:fd:82:77:ee: 2a:2d:60:9f:a0:d2:51:9e:dd:7c:cb:b1:e6:f0:e3:83:23:9f: 5e:ec:79:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqrsbcuXv0TJvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NzdjMDZkOTEtMzBkNC00MWZkLWJiYmMtYTIxY2I3NTcyOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuCCZ3wE3AGFZFXflS4fvs7R6FX9jNkfK02T 3xKDt1C649AuYw9PIwhuVmrKes4PmZoEyzdYOaPUZMAcPSiXIqgZ+FDHIqd0J4OT u5IkpDMAo95vRX0QVRwC1NUy4mhP8gE7l1Ovz6OTf0LMkPITQTsDL15cEOmGFv5X VIGG5c47N/8T1CZMqxtF7+RV0jL8QyZdcUEWzJ1IVBGdle2MpdnJg4glrwYvlIif ztne/pKpYduYORAkwOyYt3lqogWHLH+oLZEYomOUslCQ1HYAR6dVItvPwQJbhy4J mPiLJ+UaJ5G798ApDdGaRjo/vIWzAwVkinWidxYSscDQDqy0RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2ryuMODEEILxgD9zgQRtSgqVLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRlZjg4ZGUtNzkwNC0z NDk4LWFlNjQtZjA5YmQ2NjcwMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpeXNiA03WFB/SCr0VxfQSbo+qxHubnSXsk7oD+3biLjcbh/ETBfYIN h4++IP2cw6ljLkDHd3nG0jt/QeGlhY3BJpNAzHv2IcdUFIDPd9wlTliBdCtsn0rP RnPHHfubtRRrn/yQ0e9KHpsEuYWHJkQv7k/l/0X8teNuAqMXYxGFLR+2YWvL76uy xwJOx1ojMTU50YtI1sg2uMfTkeSVhne/f4quno3W17xTkUlLvl30kcF0bkbrQDuP wZ69QERKwtybr+DJYQrAit9g/Lu6AYyn0PziDC222hhdiddKDJxErEYJrV6Z/YJ3 7iotYJ+g0lGe3XzLsebw44Mjn17seYc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:17 2024 by rpki-client on console-ams.rpki-client.org