$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa File: 5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa (raw, json) Hash identifier: uIFBiLLhbJLWwi3TL65aTK9BqWD8jlC82w9d/K8yjTA= Subject key identifier: C8:FD:C6:CE:80:76:00:79:48:09:C7:FE:14:1D:9E:E6:53:08:87:30 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F432858477BF65C9D809815F8B1589180 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 62856 IP address blocks: 209.112.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:5c:9d:80:98:15:f8:b1:58:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=40a392fd-a1bd-4a16-9fb7-49fe5c8028f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:5a:8d:87:62:a6:5c:77:4f:76:09:9c:96: f2:50:76:7d:46:d9:e8:c7:d7:1e:5a:f3:1e:5a:32: b2:eb:f0:41:05:84:9b:f5:e9:90:10:f2:99:b7:3e: db:e1:82:c0:71:5c:6c:21:78:21:01:74:37:52:b8: b1:1e:43:43:f5:da:1f:a8:91:0b:91:f2:50:1e:db: 04:db:f0:5c:c1:20:1b:b8:be:14:cc:64:22:3f:8b: 08:2d:7f:8b:fa:34:b9:15:6a:13:31:50:73:23:20: 2d:f3:c1:e6:35:c8:0c:0b:a5:5e:d3:66:32:a9:ff: f8:0f:73:f8:ac:79:ee:44:a2:a1:16:76:cc:17:bb: f2:71:f0:55:4b:60:87:a7:2c:b1:41:ef:89:95:4d: ff:60:ee:d0:1d:4a:40:72:0d:d4:16:d0:25:b2:05: 3a:92:56:63:ab:90:7b:75:a8:5f:a5:b5:72:82:52: e1:c7:6c:47:fb:90:7e:89:0e:05:fc:42:4f:5f:6f: a3:03:ee:6f:73:39:76:2b:58:d0:a5:fc:36:b1:51: fe:e9:b8:a4:6e:6c:2c:48:ca:a6:3d:9b:ca:e7:91: fb:15:76:74:dd:fc:38:48:5a:a2:36:8c:21:02:19: 00:81:50:5b:31:a2:32:fa:75:c2:3e:87:2b:e4:2f: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FD:C6:CE:80:76:00:79:48:09:C7:FE:14:1D:9E:E6:53:08:87:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 209.112.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:23:34:90:70:4f:65:6c:69:14:fc:3e:b2:05:43:8e:a8:d9: 01:1e:de:20:9b:d0:d2:a0:07:1e:93:e3:de:46:af:05:23:5e: f1:37:be:6e:b7:b2:05:59:2d:56:93:df:a1:c7:40:61:04:f2: bf:44:bc:57:91:64:d5:92:c4:b6:87:86:d0:29:74:b5:1a:7a: 66:f6:77:f2:98:89:61:de:24:bc:4d:64:22:37:1c:67:ce:21: 3f:e3:7b:17:26:a9:00:23:dd:23:2b:83:a0:c6:61:07:76:07: d1:9d:46:ea:2c:d6:04:dd:d0:d4:14:23:92:e2:50:a9:c1:a4: 22:1d:36:4a:8a:43:9d:55:5e:9c:37:c1:56:c9:90:c0:b2:e1: b2:93:fb:93:e3:fa:8d:0c:4c:f5:44:9e:22:af:89:42:89:20: 5d:47:69:b2:47:d6:ab:9a:2e:5a:4d:a7:66:2a:22:31:58:10: 97:82:82:f4:b6:9b:28:c9:e2:06:92:bf:a7:a0:94:b5:57:66: 81:fc:ca:ef:28:ca:73:8d:22:29:fb:ae:81:4b:58:95:22:17: 9e:4f:78:01:d2:08:e3:82:57:29:79:d6:f0:aa:35:9a:3a:49: 96:65:da:5e:71:1e:fd:00:ec:f7:14:b9:c2:fd:f0:2e:bb:63: 7c:5b:74:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79lydgJgV+LFYkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk NDBhMzkyZmQtYTFiZC00YTE2LTlmYjctNDlmZTVjODAyOGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFdajYdiplx3T3YJnJbyUHZ9Rtnox9ceWvMe WjKy6/BBBYSb9emQEPKZtz7b4YLAcVxsIXghAXQ3UrixHkND9dofqJELkfJQHtsE 2/BcwSAbuL4UzGQiP4sILX+L+jS5FWoTMVBzIyAt88HmNcgMC6Ve02Yyqf/4D3P4 rHnuRKKhFnbMF7vycfBVS2CHpyyxQe+JlU3/YO7QHUpAcg3UFtAlsgU6klZjq5B7 dahfpbVyglLhx2xH+5B+iQ4F/EJPX2+jA+5vczl2K1jQpfw2sVH+6bikbmwsSMqm PZvK55H7FXZ03fw4SFqiNowhAhkAgVBbMaIy+nXCPocr5C+JRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj9xs6AdgB5SAnH/hQdnuZTCIcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNWZjMWY1NDMtNWM2Yi0z MWQ5LWI0ZWMtYjA3NmVmZDUxOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XBqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMjNJBwT2VsaRT8PrIFQ46o2QEe3iCb0NKgBx6T495GrwUjXvE3vm63 sgVZLVaT36HHQGEE8r9EvFeRZNWSxLaHhtApdLUaemb2d/KYiWHeJLxNZCI3HGfO IT/jexcmqQAj3SMrg6DGYQd2B9GdRuos1gTd0NQUI5LiUKnBpCIdNkqKQ51VXpw3 wVbJkMCy4bKT+5Pj+o0MTPVEniKviUKJIF1HabJH1quaLlpNp2YqIjFYEJeCgvS2 myjJ4gaSv6eglLVXZoH8yu8oynONIin7roFLWJUiF55PeAHSCOOCVyl51vCqNZo6 SZZl2l5xHv0A7PcUucL98C67Y3xbdHs= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org