$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa File: dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa (raw, json) Hash identifier: 2p+llc917zfPtLsuhY/O3o5+pKN6sNiG5PBOSpxjX5o= Subject key identifier: 3B:0F:1C:7E:30:3C:63:6C:78:B3:12:D5:E3:5C:0B:7D:F4:45:4F:EE Certificate issuer: /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Certificate serial: 010D0C9F432858474F4B70AE42D840AD9EBFE3B0 Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 11023 IP address blocks: 209.251.32.0/20 maxlen: 20 209.251.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:70:ae:42:d8:40:ad:9e:bf:e3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=aa95a3ba-9a76-4dab-93a4-20cb1f7e904c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:39:35:b7:b8:a9:dc:5c:12:5f:1e:f0:f1: a6:68:ba:93:a5:d8:25:af:b4:9a:c2:25:91:a6:87: 1a:e1:49:a9:4e:f0:ab:7b:31:ea:4b:1e:21:af:f6: af:37:1b:c7:d5:39:a1:c7:44:5a:60:68:0f:13:58: 7d:cc:47:0f:8c:4c:14:ea:f2:59:cb:6f:59:0d:9a: fb:84:6d:37:76:39:d5:57:d2:18:0b:06:18:55:1a: 24:b4:64:eb:84:80:b3:5b:52:80:a9:72:62:56:27: fb:cb:a8:cc:84:b1:28:8a:f9:fa:4e:2e:ed:00:d9: 91:b3:c6:f6:14:c0:5d:da:a8:71:d2:b5:de:70:1f: d9:06:17:b2:90:d2:4f:97:37:d0:01:44:b3:3e:7d: c5:a9:d1:72:27:b4:42:8f:95:5d:1a:83:60:55:be: af:e6:ff:4a:37:e3:73:5d:b0:80:21:3a:e3:ac:05: 01:23:f6:fd:62:af:fc:7a:a6:71:a2:37:9b:54:0a: c0:a4:b5:ca:6e:95:6f:d2:88:98:e4:04:51:30:2e: 27:0e:d8:92:46:43:b8:eb:4f:86:be:82:b8:25:28: 9b:3f:3d:cc:0c:1e:08:2f:2b:df:77:db:9b:e9:9f: e9:bc:47:8d:f9:68:29:7e:f6:71:4a:38:be:f2:fb: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:1C:7E:30:3C:63:6C:78:B3:12:D5:E3:5C:0B:7D:F4:45:4F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl X509v3 Authority Key Identifier: keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer sbgp-ipAddrBlock: critical IPv4: 209.251.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:58:68:07:ef:0e:40:e0:1a:5b:d3:6a:bf:2e:79:4a:e3:cb: e0:a8:d1:0e:d3:b3:1b:5f:df:47:38:a5:60:18:38:96:ea:43: f8:cd:97:62:7c:dc:f1:c0:53:8f:48:39:a9:34:74:e4:a8:2a: 85:ab:f5:25:f4:4c:40:d6:ff:fe:22:37:6a:69:a8:9e:1c:fa: aa:fd:cc:a4:39:22:c0:88:70:5c:47:23:d2:94:e9:67:b0:4c: ab:89:f1:f2:41:79:1c:de:e2:dc:1b:1c:d2:a1:4c:08:1f:a6: 63:41:3f:0e:a1:34:45:38:44:f5:88:4e:51:49:7c:b9:4f:07: 49:1c:d1:4f:c4:45:d3:ef:99:46:10:9e:d6:17:ca:3a:1a:62: 97:10:10:d8:90:63:2a:96:58:08:0c:cc:c1:2c:76:f4:32:f5: a3:c5:86:a6:f0:72:95:15:e3:ef:4d:a3:22:96:86:34:10:95: 88:41:af:02:19:6f:d4:bb:87:60:a3:58:c8:fa:f1:82:f9:b8: 83:35:d7:b2:11:ae:02:f1:c6:5d:0c:93:7f:bf:83:61:75:be: 61:25:c4:14:83:5f:75:d5:72:f9:2e:96:19:2d:c0:23:f0:af: fd:b3:cc:e5:b1:ca:ad:9f:63:28:00:2e:19:cb:bb:c4:d4:e5: 5c:4f:c8:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS3CuQthArZ6/47AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1MjJiOTUtMTQ0Zi00ODNmLWJiZmItYmVjMDYwNWVi ZjhjMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YWE5NWEzYmEtOWE3Ni00ZGFiLTkzYTQtMjBjYjFmN2U5MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWM5Nbe4qdxcEl8e8PGmaLqTpdglr7SawiWR poca4UmpTvCrezHqSx4hr/avNxvH1Tmhx0RaYGgPE1h9zEcPjEwU6vJZy29ZDZr7 hG03djnVV9IYCwYYVRoktGTrhICzW1KAqXJiVif7y6jMhLEoivn6Ti7tANmRs8b2 FMBd2qhx0rXecB/ZBheykNJPlzfQAUSzPn3FqdFyJ7RCj5VdGoNgVb6v5v9KN+Nz XbCAITrjrAUBI/b9Yq/8eqZxojebVArApLXKbpVv0oiY5ARRMC4nDtiSRkO460+G voK4JSibPz3MDB4ILyvfd9ub6Z/pvEeN+WgpfvZxSji+8vv/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsPHH4wPGNseLMS1eNcC330RU/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lODUy MmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1ZWJmOGMvZGJiZDc3ODItOWViMC0z NGUxLWJlMjEtYThiMmY0NDIzNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTg1MjJiOTUtMTQ0Zi00ODNmLWJi ZmItYmVjMDYwNWViZjhjL2U4NTIyYjk1LTE0NGYtNDgzZi1iYmZiLWJlYzA2MDVl YmY4Yy5jcmwwHwYDVR0jBBgwFoAUAR18+sVY6EiJayDd19XPFdMOIFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMw NjA1ZWJmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0fsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhYaAfvDkDgGlvTar8ueUrjy+Co0Q7Tsxtf30c4pWAYOJbqQ/jNl2J8 3PHAU49IOak0dOSoKoWr9SX0TEDW//4iN2ppqJ4c+qr9zKQ5IsCIcFxHI9KU6Wew TKuJ8fJBeRze4twbHNKhTAgfpmNBPw6hNEU4RPWITlFJfLlPB0kc0U/ERdPvmUYQ ntYXyjoaYpcQENiQYyqWWAgMzMEsdvQy9aPFhqbwcpUV4+9NoyKWhjQQlYhBrwIZ b9S7h2CjWMj68YL5uIM117IRrgLxxl0Mk3+/g2F1vmElxBSDX3XVcvkulhktwCPw r/2zzOWxyq2fYygALhnLu8TU5VxPyJI= -----END CERTIFICATE-----Generated at Mon Nov 25 13:47:41 2024 by rpki-client on console-ams.rpki-client.org