$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa File: 19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa (raw, json) Hash identifier: oRqQbmayS4uYmaAX4w8QxKdBHLIKqCus6YbMFXPIsG8= Subject key identifier: 62:20:45:3B:CA:CF:8F:E7:62:BC:AE:CD:32:3D:24:A4:4D:A0:BD:3D Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285847D999EC8D9D2F55EDD0973A80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 10397 IP address blocks: 209.209.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:ec:8d:9d:2f:55:ed:d0:97:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=d232420c-2e87-4f97-b544-d2e126c47c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8c:0e:83:60:37:0b:62:ba:f6:0c:d3:ad:ef: f7:5d:7e:b0:8c:35:67:2c:8f:a7:cd:be:fc:9c:9e: 6c:79:65:03:04:2d:e9:af:a3:16:76:e2:db:c2:95: c1:9d:14:59:11:de:c5:a9:78:cd:5b:9a:ec:55:b9: c4:2e:da:fa:5b:e8:bc:34:15:01:3f:11:3e:ec:ca: 86:76:f3:c1:a6:84:18:72:f2:5b:2d:fc:48:c8:73: 2a:01:14:52:b4:14:58:7b:f1:86:be:d5:87:81:02: ea:14:53:b1:08:3c:7d:6c:10:70:39:30:ed:8d:82: 22:4a:53:d3:2d:c9:f5:99:3f:dc:dd:0e:88:ab:6e: cf:f9:fd:ea:46:99:58:27:58:48:82:76:0a:6f:1e: 09:dc:80:07:88:ee:b0:06:f0:fe:9b:52:8c:26:90: b2:f3:c9:7a:48:bb:81:11:b4:e8:6b:d2:9c:58:b1: 51:1c:3a:51:93:7e:0e:b8:08:e0:a4:be:67:6f:78: 4c:59:24:a0:64:ac:0a:29:c9:58:8d:b1:69:87:cf: 95:ba:83:b8:52:80:7b:e3:38:77:bd:d7:cc:a3:b3: ae:97:2a:ff:d4:b0:56:94:12:cf:f8:73:96:20:5f: 48:6d:0b:ae:a1:fa:89:7f:6d:e5:e5:3c:bf:d1:0a: 8a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:20:45:3B:CA:CF:8F:E7:62:BC:AE:CD:32:3D:24:A4:4D:A0:BD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/19b4e8e2-6d34-3ea5-91b5-8fb3918a6abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6d:d4:c8:bd:1b:bb:f9:0f:d5:8b:1d:8e:b7:12:a6:8d:75: 64:e4:73:8a:bc:e1:bc:7e:14:fb:f3:31:3d:5e:20:76:e8:ee: ee:c6:5b:32:79:cc:18:cd:40:a6:ca:9d:85:89:41:36:e0:2c: dd:57:f1:81:af:87:e4:0a:1e:ff:b6:ce:f7:36:45:13:11:b1: 6c:5e:94:01:f1:d2:05:c8:3a:95:c2:16:db:c7:be:8e:0a:96: af:9a:86:89:5a:31:50:dd:30:81:b6:30:f7:ea:f0:48:e9:f4: 78:3a:0e:2f:c5:78:b5:8c:e4:2b:2b:75:6a:04:02:f1:c5:f5: 01:ee:29:cc:0e:2a:f4:bd:47:d8:4d:f9:c1:68:4f:e8:24:6c: 02:8d:75:10:94:70:cf:f3:e4:c5:38:2e:c5:f4:76:4f:e7:a3: d7:34:79:37:2c:13:91:03:15:fb:5f:55:42:3c:6c:e2:cc:72: b0:fd:dd:1f:2e:19:1e:63:b2:8e:04:20:d3:af:17:e8:7a:cb: f1:93:fc:d8:97:2a:11:d9:f8:31:48:0f:bd:46:77:8f:70:31: 46:89:c8:57:1c:6f:e7:b3:6b:ac:1a:28:4e:b8:1c:ff:c2:63: 08:9f:23:2a:fd:02:fd:ff:47:e4:f0:8f:a1:c5:1a:46:3a:d7: 8d:0a:70:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmeyNnS9V7dCXOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk ZDIzMjQyMGMtMmU4Ny00Zjk3LWI1NDQtZDJlMTI2YzQ3YzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmowOg2A3C2K69gzTre/3XX6wjDVnLI+nzb78 nJ5seWUDBC3pr6MWduLbwpXBnRRZEd7FqXjNW5rsVbnELtr6W+i8NBUBPxE+7MqG dvPBpoQYcvJbLfxIyHMqARRStBRYe/GGvtWHgQLqFFOxCDx9bBBwOTDtjYIiSlPT Lcn1mT/c3Q6Iq27P+f3qRplYJ1hIgnYKbx4J3IAHiO6wBvD+m1KMJpCy88l6SLuB EbToa9KcWLFRHDpRk34OuAjgpL5nb3hMWSSgZKwKKclYjbFph8+VuoO4UoB74zh3 vdfMo7Oulyr/1LBWlBLP+HOWIF9IbQuuofqJf23l5Ty/0QqK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIgRTvKz4/nYryuzTI9JKRNoL09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTliNGU4ZTItNmQzNC0z ZWE1LTkxYjUtOGZiMzkxOGE2YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBt1Mi9G7v5D9WLHY63EqaNdWTkc4q84bx+FPvzMT1eIHbo7u7GWzJ5 zBjNQKbKnYWJQTbgLN1X8YGvh+QKHv+2zvc2RRMRsWxelAHx0gXIOpXCFtvHvo4K lq+aholaMVDdMIG2MPfq8Ejp9Hg6Di/FeLWM5CsrdWoEAvHF9QHuKcwOKvS9R9hN +cFoT+gkbAKNdRCUcM/z5MU4LsX0dk/no9c0eTcsE5EDFftfVUI8bOLMcrD93R8u GR5jso4EINOvF+h6y/GT/NiXKhHZ+DFID71Gd49wMUaJyFccb+eza6waKE64HP/C YwifIyr9Av3/R+Twj6HFGkY6140KcAQ= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org