$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa File: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (raw, json) Hash identifier: WaXnszn76SxzU/jOnDykT/q/ykxbO2JM7xjRB2ZpR3A= Subject key identifier: B4:8B:5C:42:97:D3:36:7C:48:C7:02:60:1D:E8:58:0F:DC:B1:CC:DE Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F432858476E0107CAB7FC292EEEFDAB40 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa Signing time: Fri 04 Oct 2024 13:00:42 +0000 ROA not before: Fri 04 Oct 2024 13:00:42 +0000 ROA not after: Thu 02 Jan 2025 14:00:42 +0000 asID: 3653 IP address blocks: 209.71.32.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:01:07:ca:b7:fc:29:2e:ee:fd:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Oct 4 13:00:42 2024 GMT Not After : Jan 2 14:00:42 2025 GMT Subject: CN=f634dd3b-ba68-4d45-b310-c63300e0f27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:42:0c:6d:59:03:4d:14:ff:8c:70:91:4b: 41:96:95:c3:69:a1:36:39:53:3a:f0:22:5d:3d:b8: 64:66:35:8e:fe:26:e9:b9:2c:43:2e:9c:1b:06:f6: b9:65:f3:6f:06:b6:bc:e3:65:cf:2e:72:e7:74:78: f1:96:26:74:e0:c2:3f:18:4b:22:a4:80:8b:44:a0: 91:35:d0:ff:ce:1a:d5:73:2e:ea:ef:9c:f3:54:4a: cc:56:0c:22:55:13:dd:2f:f8:2e:21:3d:bd:e5:5d: e1:3a:99:b6:9b:12:df:11:f9:69:78:bf:51:4f:60: 59:ed:20:13:62:66:8c:ae:33:c1:ae:95:2b:51:23: d2:51:7a:fe:17:8f:1f:9c:48:e4:ed:9b:eb:b2:22: 10:92:b4:3c:ef:2d:50:e7:bc:2e:b3:21:67:4a:8c: af:7c:32:72:d1:b9:6d:4b:ab:ad:36:c8:b0:5d:9f: 16:f4:c1:93:83:bf:1a:d2:68:b8:3c:34:38:d3:ad: b2:22:38:33:e9:ec:50:52:7f:c3:e5:a4:c5:a7:b6: 05:91:33:ba:ac:0e:ba:52:a1:87:c0:85:8a:d9:27: 61:95:a4:9e:8e:cd:ae:12:2a:8b:97:61:bb:10:4d: a7:36:e3:5e:0f:62:fd:a7:f9:e2:7a:d4:7f:ca:3e: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8B:5C:42:97:D3:36:7C:48:C7:02:60:1D:E8:58:0F:DC:B1:CC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: 209.71.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:87:3d:bf:cb:bc:cd:c6:92:9e:3f:89:ab:1d:46:ba:45:40: 87:4e:88:90:7d:26:af:b7:84:6c:b2:3e:e0:a9:dd:fb:09:8f: e2:96:fd:c7:c9:44:e7:3e:c2:2f:53:61:12:6a:09:80:bc:33: be:55:c0:a7:ea:f9:4b:36:44:3d:31:ad:6b:7a:f4:07:bd:30: 1e:74:20:c4:e7:d1:2c:28:36:fa:e8:6e:1d:7c:bc:3d:08:79: 82:ad:1b:ad:4d:88:48:6a:ec:36:c6:b9:d5:48:a0:40:f8:88: 66:56:5b:d8:93:41:c3:80:71:b2:18:6f:1c:3f:25:8f:c9:94: cf:05:58:82:b6:e3:d6:90:3d:81:c6:04:99:1a:06:e4:d5:a8: 8e:c1:99:e5:c6:5e:f4:e0:6f:42:30:47:c3:73:6b:71:72:0e: 53:a7:e9:e2:e6:ef:01:c9:8d:46:d0:81:cf:24:02:cd:34:d2: 75:3f:ad:62:13:74:75:4d:5b:80:e2:12:62:88:7a:f3:3d:33: e2:db:e6:e1:69:f9:9c:df:9e:d5:5e:ac:b1:d2:12:ab:40:3e: aa:8d:f6:5e:3e:9f:aa:4c:4a:14:25:77:74:e2:45:57:02:19: d9:0d:1e:6c:d8:12:50:3a:23:ab:24:21:e4:cb:27:62:33:1c: 27:59:f9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEduAQfKt/wpLu79q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk ZjYzNGRkM2ItYmE2OC00ZDQ1LWIzMTAtYzYzMzAwZTBmMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW5CDG1ZA00U/4xwkUtBlpXDaaE2OVM68CJd PbhkZjWO/ibpuSxDLpwbBva5ZfNvBra842XPLnLndHjxliZ04MI/GEsipICLRKCR NdD/zhrVcy7q75zzVErMVgwiVRPdL/guIT295V3hOpm2mxLfEflpeL9RT2BZ7SAT YmaMrjPBrpUrUSPSUXr+F48fnEjk7ZvrsiIQkrQ87y1Q57wusyFnSoyvfDJy0blt S6utNsiwXZ8W9MGTg78a0mi4PDQ4062yIjgz6exQUn/D5aTFp7YFkTO6rA66UqGH wIWK2SdhlaSejs2uEiqLl2G7EE2nNuNeD2L9p/nietR/yj6Y/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSLXEKX0zZ8SMcCYB3oWA/csczeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvZTg0Y2I5YWYtYjcwNi0z Y2Y0LThkZDktN2UyMzMwMTRlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0UcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2HPb/LvM3Gkp4/iasdRrpFQIdOiJB9Jq+3hGyyPuCp3fsJj+KW/cfJ ROc+wi9TYRJqCYC8M75VwKfq+Us2RD0xrWt69Ae9MB50IMTn0SwoNvrobh18vD0I eYKtG61NiEhq7DbGudVIoED4iGZWW9iTQcOAcbIYbxw/JY/JlM8FWIK249aQPYHG BJkaBuTVqI7BmeXGXvTgb0IwR8Nza3FyDlOn6eLm7wHJjUbQgc8kAs000nU/rWIT dHVNW4DiEmKIevM9M+Lb5uFp+ZzfntVerLHSEqtAPqqN9l4+n6pMShQld3TiRVcC GdkNHmzYElA6I6skIeTLJ2IzHCdZ+Wk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:24 2024 by rpki-client on console-fra.rpki-client.org