$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa File: 1c405104-ce81-34dd-86ff-db540904d806.roa (raw, json) Hash identifier: D2Zb8KVSgz40BkPsvmIqGmWEVtHekRVR75I0ldy03UU= Subject key identifier: 82:14:2E:94:93:8B:E1:75:5E:12:FB:18:DB:99:F7:4C:F3:8B:C3:5B Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285847EFEF7F402E879BB3583F8C00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 10397 IP address blocks: 209.209.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:7f:40:2e:87:9b:b3:58:3f:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=edb61ce1-fc95-40bf-82fa-6c2da2d6df11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:ed:bd:6f:70:d1:28:9b:bd:a1:2d:a3:70: 0f:e6:3e:34:2c:18:db:63:a6:27:93:c8:ac:b7:0f: bf:f9:de:d6:bb:c1:9c:71:d8:20:08:61:56:a9:0c: 5e:89:f0:53:d8:41:93:5a:a8:80:3e:7d:a4:55:0c: 12:63:85:c7:69:21:26:28:21:99:18:be:a9:02:d4: de:3f:29:e0:97:8e:99:07:df:06:1e:86:ab:d2:18: 8f:01:bb:de:be:0f:d8:9a:f8:40:f1:c0:27:77:ab: 04:d5:52:87:9d:35:09:cd:4e:df:b6:ca:df:2a:d3: de:27:10:fe:4e:56:1e:11:47:a1:7f:df:3c:d3:3e: 5a:fc:0d:bf:16:86:92:26:56:05:3b:4b:7a:b2:86: 94:b8:7a:e7:76:53:7f:de:6b:3e:00:5f:ef:fb:53: a8:a3:59:77:f5:46:f3:32:d0:59:f4:38:f9:1d:fd: 5c:9a:26:9b:20:b8:52:e3:8d:85:eb:15:81:1b:d6: df:fc:c4:04:5e:1e:3b:78:b8:fa:7a:f8:71:5d:66: 97:5b:6e:ac:96:52:41:39:c3:d8:79:1c:ce:6d:5b: c7:f7:8b:81:c1:97:cf:80:22:c6:81:07:1d:33:42: fe:2c:79:ca:7d:75:ec:2c:dd:38:dc:bd:6b:8f:3a: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:14:2E:94:93:8B:E1:75:5E:12:FB:18:DB:99:F7:4C:F3:8B:C3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4d:0d:53:6f:8f:3f:49:10:63:f5:6f:5d:e0:db:36:ce:c5: 4f:20:28:10:5b:7e:6f:89:ee:f9:b2:6f:f9:0e:49:a5:62:d5: 49:9d:2c:14:00:2c:40:5c:37:1d:f0:c8:32:0d:d8:ec:cd:c1: 74:26:22:59:58:42:d9:a7:c7:4b:9a:10:1c:54:8f:c8:dc:89: a5:9a:7d:ed:28:2f:4b:02:b9:6f:92:9a:09:9b:a7:81:29:e0: cb:3b:55:4e:3a:1d:7d:ff:fa:93:f7:d0:ba:4d:e7:d1:65:74: 7c:21:1d:c6:2e:b4:d3:24:48:94:9a:a3:1c:d0:08:c3:24:24: ca:34:08:ad:c0:a6:37:48:53:f0:3a:43:23:66:17:4b:eb:72: 16:04:c3:8c:2e:eb:e9:b0:57:40:ff:8c:ec:7c:e8:56:40:cd: 2a:54:43:d9:bc:76:c1:17:f0:4f:60:df:d7:9a:69:5a:50:11: 30:0f:c8:04:77:5a:82:2f:8f:4f:b5:80:6d:93:03:f4:22:59: 35:a6:76:25:fd:0b:f3:49:c9:b0:ec:86:29:5e:9e:2c:14:ae: 5b:47:84:08:18:ae:c8:fe:a8:ce:93:cc:12:6a:10:d9:13:e2: 23:19:7f:39:a4:99:3e:9b:4e:a8:5c:48:13:8f:ed:96:a2:1e: 7c:a9:b7:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv739ALoebs1g/jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk ZWRiNjFjZTEtZmM5NS00MGJmLTgyZmEtNmMyZGEyZDZkZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07ftvW9w0SibvaEto3AP5j40LBjbY6Ynk8is tw+/+d7Wu8GccdggCGFWqQxeifBT2EGTWqiAPn2kVQwSY4XHaSEmKCGZGL6pAtTe Pyngl46ZB98GHoar0hiPAbvevg/YmvhA8cAnd6sE1VKHnTUJzU7ftsrfKtPeJxD+ TlYeEUehf9880z5a/A2/FoaSJlYFO0t6soaUuHrndlN/3ms+AF/v+1Ooo1l39Ubz MtBZ9Dj5Hf1cmiabILhS442F6xWBG9bf/MQEXh47eLj6evhxXWaXW26sllJBOcPY eRzObVvH94uBwZfPgCLGgQcdM0L+LHnKfXXsLN043L1rjzrBnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIULpSTi+F1XhL7GNuZ90zzi8NbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMWM0MDUxMDQtY2U4MS0z NGRkLTg2ZmYtZGI1NDA5MDRkODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJNDVNvjz9JEGP1b13g2zbOxU8gKBBbfm+J7vmyb/kOSaVi1UmdLBQA LEBcNx3wyDIN2OzNwXQmIllYQtmnx0uaEBxUj8jciaWafe0oL0sCuW+Smgmbp4Ep 4Ms7VU46HX3/+pP30LpN59FldHwhHcYutNMkSJSaoxzQCMMkJMo0CK3ApjdIU/A6 QyNmF0vrchYEw4wu6+mwV0D/jOx86FZAzSpUQ9m8dsEX8E9g39eaaVpQETAPyAR3 WoIvj0+1gG2TA/QiWTWmdiX9C/NJybDshileniwUrltHhAgYrsj+qM6TzBJqENkT 4iMZfzmkmT6bTqhcSBOP7ZaiHnypt24= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org