$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa File: 275dad88-147b-3524-8dd1-125da05ff542.roa (raw, json) Hash identifier: I2Z0M7/9/o/tSPhdUgJfs0YvXbV2853p6OvaEHzfhoI= Subject key identifier: 3D:79:CC:7A:93:81:89:1C:B2:1A:EB:12:E6:B0:F2:BB:50:50:39:84 Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584793B11870D9E95868CC423C80 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 400519 IP address blocks: 209.25.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:18:70:d9:e9:58:68:cc:42:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=0d84a4b9-5e65-4c98-bbf0-d37f8c2f7f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:4e:cf:81:4f:58:53:32:aa:c4:8c:e9:35: 97:62:26:aa:85:a8:09:f5:03:6e:67:5d:32:cb:98: 53:29:e8:92:96:3b:bf:dc:fb:1f:89:90:fb:7e:8f: 01:38:c7:5e:ff:8a:aa:e0:b5:75:50:b8:97:a3:f3: 60:2e:d8:90:c1:55:da:c9:9d:7d:be:c6:7f:8c:30: 9c:46:a2:99:ff:c7:95:14:9a:d4:c6:89:34:68:43: 83:03:84:77:ac:1b:89:b0:04:54:b3:4e:b3:0f:60: 98:23:fe:7a:02:40:55:19:1a:ee:a6:f3:2d:74:f7: bc:ea:38:a5:32:25:bb:5d:33:b8:8d:28:a1:05:18: 54:d8:5c:67:b5:20:09:f9:f3:b3:84:93:cc:bc:03: 2e:1b:bc:17:8f:3b:06:7d:fd:a7:4a:ff:6a:32:2c: 62:54:56:b5:04:c2:a9:e9:67:e6:90:bf:e2:75:55: bf:01:8c:c7:89:01:ae:93:5c:f9:8b:81:ee:70:e6: e4:c1:47:44:e8:2b:2a:3b:ae:2b:63:6c:83:e9:04: 37:c2:bc:27:7b:50:c4:d1:02:92:0d:5d:b4:e5:77: bd:3f:a4:cc:fa:2c:2f:35:9f:4e:f6:ab:c4:cd:8b: 48:26:de:1c:86:12:3c:e4:91:e7:d4:43:1f:20:a7: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:79:CC:7A:93:81:89:1C:B2:1A:EB:12:E6:B0:F2:BB:50:50:39:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/275dad88-147b-3524-8dd1-125da05ff542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 209.25.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e9:53:b7:22:bf:8c:27:ee:5c:c9:0e:da:cc:4b:ea:cd:c7: c5:2e:37:d0:84:47:69:4c:5d:35:8f:d4:68:81:c9:04:30:97: 1a:0d:69:37:b8:a7:32:48:a3:95:1c:38:57:d0:24:0d:ee:e9: 48:76:01:8e:af:8f:f8:5a:af:77:0a:fa:8a:4c:d1:de:7e:07: ca:ae:fe:d7:6d:e6:ac:c1:f4:b1:bb:41:13:ff:33:06:1e:47: 93:4a:ef:3f:65:d3:bb:12:a7:1a:dc:fd:ce:f5:ae:84:59:e7: da:77:cf:99:ed:94:94:5b:b7:52:9c:d8:d7:38:b3:b8:47:15: 9e:0e:6d:6a:d7:e3:cf:a4:0a:3c:17:da:4f:f5:00:5b:56:65: cc:88:30:49:2f:65:d7:23:75:ba:b3:e5:90:97:b5:ed:00:03: 9b:c4:4e:2f:2b:61:60:5e:35:1c:f9:37:3e:a5:f8:10:ee:5a: df:d6:4c:24:18:0f:3c:4f:0d:a9:00:b9:24:80:64:ac:94:65: 37:2d:f9:5e:66:03:bb:10:3d:39:a8:e7:bf:b8:71:e7:56:28: 48:6e:c5:80:c4:06:5f:f1:54:11:7c:55:ca:ef:ee:80:10:9f: 2f:5e:80:b0:81:a8:4b:fd:a5:7d:9a:d6:9e:90:a9:e2:73:48: 39:ae:3d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsRhw2elYaMxCPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk MGQ4NGE0YjktNWU2NS00Yzk4LWJiZjAtZDM3ZjhjMmY3ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhlOz4FPWFMyqsSM6TWXYiaqhagJ9QNuZ10y y5hTKeiSlju/3PsfiZD7fo8BOMde/4qq4LV1ULiXo/NgLtiQwVXayZ19vsZ/jDCc RqKZ/8eVFJrUxok0aEODA4R3rBuJsARUs06zD2CYI/56AkBVGRrupvMtdPe86jil MiW7XTO4jSihBRhU2FxntSAJ+fOzhJPMvAMuG7wXjzsGff2nSv9qMixiVFa1BMKp 6WfmkL/idVW/AYzHiQGuk1z5i4HucObkwUdE6CsqO64rY2yD6QQ3wrwne1DE0QKS DV205Xe9P6TM+iwvNZ9O9qvEzYtIJt4chhI85JHn1EMfIKc66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD15zHqTgYkcshrrEuaw8rtQUDmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvMjc1ZGFkODgtMTQ3Yi0z NTI0LThkZDEtMTI1ZGEwNWZmNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXpU7civ4wn7lzJDtrMS+rNx8UuN9CER2lMXTWP1GiByQQwlxoNaTe4 pzJIo5UcOFfQJA3u6Uh2AY6vj/har3cK+opM0d5+B8qu/tdt5qzB9LG7QRP/MwYe R5NK7z9l07sSpxrc/c71roRZ59p3z5ntlJRbt1Kc2Nc4s7hHFZ4ObWrX48+kCjwX 2k/1AFtWZcyIMEkvZdcjdbqz5ZCXte0AA5vETi8rYWBeNRz5Nz6l+BDuWt/WTCQY DzxPDakAuSSAZKyUZTct+V5mA7sQPTmo57+4cedWKEhuxYDEBl/xVBF8Vcrv7oAQ ny9egLCBqEv9pX2a1p6QqeJzSDmuPbE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:20 2024 by rpki-client on console-ams.rpki-client.org