$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/931969d2-ed44-3385-9e13-afff2818f089.roa File: 931969d2-ed44-3385-9e13-afff2818f089.roa (raw, json) Hash identifier: 4/dxJuStG9ukA3IC8S5g0BBvyI1hGgqKhiW5R6/eoK0= Subject key identifier: 9D:03:D5:1E:4C:3D:61:53:50:A6:84:C9:86:A7:81:5D:30:F1:D4:25 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285847BAC6AAFC24A7BF1D1DF01D00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/931969d2-ed44-3385-9e13-afff2818f089.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 13536 IP address blocks: 209.198.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:aa:fc:24:a7:bf:1d:1d:f0:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=9eea78e2-9e0b-4420-b8d1-37462ceacbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:d9:c7:b9:e8:8f:c5:aa:8c:a6:5d:0e:51: 21:3f:3f:9e:2b:47:28:46:c6:80:cd:c2:07:fe:fe: 39:21:13:8f:46:2b:23:48:6e:7b:50:6c:bc:00:82: 88:67:5d:b7:70:63:26:50:ec:1f:de:8c:c8:b3:71: 8c:91:07:d2:94:b3:f9:e9:9e:7e:21:c3:65:d7:72: dd:db:1c:d2:46:5c:1e:c0:56:14:c1:39:f5:ad:4d: 3c:3a:1f:d8:81:d4:d7:49:79:f6:02:17:f9:5e:72: e5:5e:74:0c:66:0c:5d:fd:3f:cb:39:5c:8a:65:ca: e6:2a:32:26:d9:71:02:86:4e:48:ff:71:16:de:42: 33:d6:49:07:6e:89:bf:e4:08:dd:43:3b:2f:f6:0f: 39:9f:73:90:e0:f6:81:29:73:b0:80:b0:46:63:36: d6:0e:2e:a5:63:d0:9a:21:d5:94:86:3e:b9:8e:cc: 6d:12:59:f5:07:b8:98:8d:6b:b0:84:8c:0d:bb:35: 33:5e:b7:9e:a7:ed:a6:58:5e:f1:19:46:8e:c9:f8: a3:88:ee:2c:00:b0:c3:94:a5:39:87:ed:f6:17:72: d7:8b:57:06:64:ba:20:23:95:3e:cf:51:c9:15:ca: 84:85:65:60:66:50:21:5d:9c:10:6a:86:85:3f:f1: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:03:D5:1E:4C:3D:61:53:50:A6:84:C9:86:A7:81:5D:30:F1:D4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/931969d2-ed44-3385-9e13-afff2818f089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cb:2d:38:f7:09:e6:e9:8a:42:42:9c:7c:42:f2:1a:db:9a: 0b:b7:ac:18:b8:b4:26:27:01:31:61:46:c8:cf:d3:87:0a:f3: 93:c2:5f:75:5f:d8:fa:2a:27:f5:e8:c0:a2:29:02:c3:a6:f0: 8f:72:49:32:b8:eb:dd:ed:c4:53:fe:bf:fe:41:ea:13:30:8a: 51:ec:e2:ad:b8:23:8d:18:f4:22:4e:93:71:a2:65:30:0f:8f: 0a:f4:3a:11:a6:f5:6b:b6:65:c7:5b:91:a9:e9:1e:e4:24:8b: 45:93:3d:d6:4e:c1:31:22:41:c1:a9:5b:07:ba:ab:ff:9c:68: 6d:f8:39:0b:22:3f:86:17:88:ea:b4:b7:6e:c9:43:f5:81:5c: d8:f5:86:14:ce:34:a3:fe:d3:b4:45:0d:ec:c8:a0:cd:98:14: 90:bb:10:4a:80:7b:84:af:a9:9c:e9:86:e3:64:a9:1b:2a:2c: 2f:54:35:b8:bf:60:49:eb:1e:93:2a:d3:d1:89:b7:5b:9e:2c: b1:e1:0c:9c:20:5e:64:84:56:ef:0c:3e:2c:ee:d9:ba:2c:e4: b9:52:ce:6e:9b:16:23:50:d3:12:53:6b:af:08:cd:a9:4d:7e: 9d:21:4d:d3:26:5c:6f:52:d9:2a:a2:6b:20:e8:f6:7f:30:25: a0:c2:08:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqr8JKe/HR3wHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OWVlYTc4ZTItOWUwYi00NDIwLWI4ZDEtMzc0NjJjZWFjYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUvZx7noj8WqjKZdDlEhPz+eK0coRsaAzcIH /v45IROPRisjSG57UGy8AIKIZ123cGMmUOwf3ozIs3GMkQfSlLP56Z5+IcNl13Ld 2xzSRlwewFYUwTn1rU08Oh/YgdTXSXn2Ahf5XnLlXnQMZgxd/T/LOVyKZcrmKjIm 2XEChk5I/3EW3kIz1kkHbom/5AjdQzsv9g85n3OQ4PaBKXOwgLBGYzbWDi6lY9Ca IdWUhj65jsxtEln1B7iYjWuwhIwNuzUzXreep+2mWF7xGUaOyfijiO4sALDDlKU5 h+32F3LXi1cGZLogI5U+z1HJFcqEhWVgZlAhXZwQaoaFP/FeZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0D1R5MPWFTUKaEyYangV0w8dQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOTMxOTY5ZDItZWQ0NC0z Mzg1LTllMTMtYWZmZjI4MThmMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzLLTj3CebpikJCnHxC8hrbmgu3rBi4tCYnATFhRsjP04cK85PCX3Vf 2PoqJ/XowKIpAsOm8I9ySTK4693txFP+v/5B6hMwilHs4q24I40Y9CJOk3GiZTAP jwr0OhGm9Wu2ZcdbkanpHuQki0WTPdZOwTEiQcGpWwe6q/+caG34OQsiP4YXiOq0 t27JQ/WBXNj1hhTONKP+07RFDezIoM2YFJC7EEqAe4SvqZzphuNkqRsqLC9UNbi/ YEnrHpMq09GJt1ueLLHhDJwgXmSEVu8MPizu2bos5LlSzm6bFiNQ0xJTa68IzalN fp0hTdMmXG9S2SqiayDo9n8wJaDCCH8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:23 2024 by rpki-client on console-fra.rpki-client.org