$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa File: f18747e6-7bea-32fa-877d-0db804fae88a.roa (raw, json) Hash identifier: Gon+N9Cat2dTLbwyHA/wwwCohvEaFbRnb3Pos8r1+bY= Subject key identifier: D4:42:1A:23:8C:C5:A8:FC:6A:7E:A0:40:71:62:41:40:71:B2:FE:88 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285847CFD4A4F2BB3A1A8E6DDD9A00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 10397 IP address blocks: 209.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:a4:f2:bb:3a:1a:8e:6d:dd:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=3d18d234-c627-4850-904a-1731f5743942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:81:dc:b5:98:8f:dd:6f:6c:5d:8d:fc:69: 08:bf:75:1c:7b:61:d6:2f:57:32:a0:32:ec:d9:fe: f6:48:47:12:f4:9b:4d:83:1f:77:ec:02:05:eb:08: 52:7a:16:70:62:aa:44:6f:c0:32:90:f7:a2:16:8e: 24:8d:5d:a6:34:fb:c4:90:41:04:64:5e:6c:78:29: af:57:a8:22:bd:b4:af:83:4b:69:69:21:6d:59:fe: d8:9c:a4:a2:6c:72:84:33:5e:6a:24:5e:96:92:2c: ae:0c:35:9b:5a:c9:16:fe:8a:ea:db:01:e6:52:f0: f6:ec:fd:a9:a7:4e:a1:9c:83:c8:6f:4b:d1:18:d1: e7:4a:44:7c:f6:05:ab:1c:94:4f:2c:e5:05:ae:ed: 27:a0:9f:af:4f:0b:3a:40:98:bc:02:ee:14:d4:22: 9f:59:6e:c6:03:7d:f5:a3:4e:aa:0c:01:5c:49:61: b4:e5:41:5e:db:37:ac:a9:8a:44:e7:73:8c:27:41: 53:02:0f:7a:72:48:98:cf:4c:a0:ce:cf:fa:14:23: 77:5f:e9:8e:54:e1:8c:d0:ec:64:78:1d:89:f7:62: a2:c5:5c:f3:02:80:2b:28:03:94:41:27:63:f1:6d: af:69:b4:6d:96:1c:d1:89:4d:4d:a7:02:28:f3:cf: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:1A:23:8C:C5:A8:FC:6A:7E:A0:40:71:62:41:40:71:B2:FE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d0:45:4a:3d:04:07:19:58:38:f8:de:6b:84:0c:f6:62:0c: 91:ad:1c:b9:a0:c2:a0:c3:95:f7:0d:fa:38:98:11:55:b4:51: d6:ea:b2:4e:0f:27:43:39:ac:5f:23:9f:dc:df:34:65:ac:c3: af:c9:56:14:62:60:86:2f:79:dc:f7:13:bc:7c:82:2d:18:f5: d9:41:a3:07:b8:91:99:7c:48:1a:47:02:5e:a4:e3:be:ff:e8: 02:9a:02:3a:06:ee:19:b2:2b:d3:91:8e:65:48:01:3a:e1:a9: d9:44:f4:84:cd:8c:52:6a:1e:aa:79:5c:ba:10:db:3b:6a:ff: bb:69:19:1b:84:5d:50:5e:66:69:23:ee:58:f9:35:34:64:c8: 75:09:23:00:ce:72:b4:4c:89:20:ec:b2:f3:09:f0:67:cc:3e: 69:2b:4c:59:5c:36:61:06:60:e4:75:60:8d:77:42:f6:d1:48: e7:62:a6:a8:12:cd:4f:fe:6f:40:48:0d:19:29:7f:85:94:a5: 63:a7:9a:5a:05:ac:6b:92:43:16:5e:84:9d:73:c3:18:96:fb: b5:38:fb:5d:4f:c8:62:cb:6a:0f:3e:ae:77:62:df:c5:b6:9b: 91:44:a4:d4:a5:e5:99:df:ec:ee:af:08:d9:a2:fd:f2:24:5f: 05:a6:64:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1KTyuzoajm3dmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk M2QxOGQyMzQtYzYyNy00ODUwLTkwNGEtMTczMWY1NzQzOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0aB3LWYj91vbF2N/GkIv3Uce2HWL1cyoDLs 2f72SEcS9JtNgx937AIF6whSehZwYqpEb8AykPeiFo4kjV2mNPvEkEEEZF5seCmv V6givbSvg0tpaSFtWf7YnKSibHKEM15qJF6WkiyuDDWbWskW/orq2wHmUvD27P2p p06hnIPIb0vRGNHnSkR89gWrHJRPLOUFru0noJ+vTws6QJi8Au4U1CKfWW7GA331 o06qDAFcSWG05UFe2zesqYpE53OMJ0FTAg96ckiYz0ygzs/6FCN3X+mOVOGM0Oxk eB2J92KixVzzAoArKAOUQSdj8W2vabRtlhzRiU1NpwIo889h1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRCGiOMxaj8an6gQHFiQUBxsv6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjE4NzQ3ZTYtN2JlYS0z MmZhLTg3N2QtMGRiODA0ZmFlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPQRUo9BAcZWDj43muEDPZiDJGtHLmgwqDDlfcN+jiYEVW0Udbqsk4P J0M5rF8jn9zfNGWsw6/JVhRiYIYvedz3E7x8gi0Y9dlBowe4kZl8SBpHAl6k477/ 6AKaAjoG7hmyK9ORjmVIATrhqdlE9ITNjFJqHqp5XLoQ2ztq/7tpGRuEXVBeZmkj 7lj5NTRkyHUJIwDOcrRMiSDssvMJ8GfMPmkrTFlcNmEGYOR1YI13QvbRSOdipqgS zU/+b0BIDRkpf4WUpWOnmloFrGuSQxZehJ1zwxiW+7U4+11PyGLLag8+rndi38W2 m5FEpNSl5Znf7O6vCNmi/fIkXwWmZHw= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org