$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa File: b5f5f32e-5188-314d-a26e-19c0504c484c.roa (raw, json) Hash identifier: CKro4y6JiOFG2+ngjx8FGnG1XKnGIjViL0zxZ9U05oc= Subject key identifier: 91:31:FE:F4:B6:D7:89:F9:86:76:8A:7A:02:79:D4:57:E8:E9:A5:B4 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F43285847924BDE264889CB1BABD6FED0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa Signing time: Thu 17 Oct 2024 13:00:42 +0000 ROA not before: Thu 17 Oct 2024 13:00:42 +0000 ROA not after: Wed 15 Jan 2025 14:00:42 +0000 asID: 11290 IP address blocks: 209.54.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:92:4b:de:26:48:89:cb:1b:ab:d6:fe:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Oct 17 13:00:42 2024 GMT Not After : Jan 15 14:00:42 2025 GMT Subject: CN=0b001608-ea6d-4b96-926b-c0eb2b7cd1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:d1:b6:73:cc:4b:1e:83:da:c8:fa:43:cc: 5b:06:da:e9:00:db:84:e8:de:61:b8:cd:cc:f3:6b: 66:83:93:e0:f6:87:79:63:dc:98:9c:af:a7:60:b2: 59:b9:37:77:ed:54:e4:ec:ea:31:e6:88:97:35:75: 68:3d:a9:f5:40:8b:95:1c:b3:43:5b:75:98:87:b6: 39:d5:7c:3a:8a:17:3b:b8:aa:72:f6:cb:16:41:12: 7f:44:16:fe:9b:56:bd:d8:7c:e2:10:a5:b9:5a:24: 34:43:fa:6a:45:85:6b:2d:6a:29:6f:66:26:fd:9e: aa:f4:bb:a7:d0:40:15:83:ea:da:e4:c8:a8:61:8f: 7a:71:35:41:91:73:bb:2f:cd:58:13:dc:2a:3a:9b: 12:82:a8:e3:ac:56:05:c1:e5:e5:08:5e:7b:99:74: 23:c8:1b:f1:f4:f4:3e:70:88:2c:29:9c:8a:2f:69: 23:a5:61:e1:c0:33:26:be:92:40:99:08:3c:68:ae: 1f:38:8a:c6:b6:ba:93:c3:82:04:0c:dd:c9:52:94: 40:fb:2d:57:f1:b9:4c:26:f7:2e:61:29:55:42:22: 81:2e:c4:29:f5:63:e5:1d:2d:00:da:f6:89:0b:e4: c3:b0:24:40:60:fd:6e:58:7a:78:3c:23:32:8c:54: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:31:FE:F4:B6:D7:89:F9:86:76:8A:7A:02:79:D4:57:E8:E9:A5:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.54.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d9:f7:96:d8:d0:1b:7a:c9:5d:d6:a2:4b:c0:d8:4c:ed:bb: 5b:99:07:a5:4d:3f:56:d6:43:7e:d5:92:67:9a:fd:b6:d7:b4: 42:e8:f3:9e:cf:8f:88:a9:b2:5e:01:63:b4:39:fe:e0:2c:df: c5:ab:fe:5c:3c:c8:c8:57:70:f2:33:0c:d9:98:76:25:0e:e8: b0:89:8f:b1:59:45:6a:e0:05:42:73:d1:ab:bd:3e:74:7c:4d: d8:d9:df:a5:cd:2e:88:94:08:2f:f7:b4:68:c3:29:0b:14:4a: a7:47:84:d1:3c:2e:b1:0b:0d:e0:17:92:d8:69:fd:4a:96:05: f6:39:68:0d:35:8c:8a:4b:54:ba:ea:cb:03:3d:4b:52:61:18: 35:5f:e1:37:20:41:eb:39:5b:0d:c9:2e:e7:af:0b:22:d7:64: 0a:38:7e:61:ef:1a:5d:9f:aa:df:0a:4d:f9:ef:24:ae:f6:ac: bf:2d:a0:89:c3:d2:56:2c:5b:bd:df:82:e6:15:46:03:88:d2: e3:16:f4:df:87:aa:76:6d:7a:64:bf:ed:4c:29:31:e7:ce:54: a1:a3:32:07:75:b1:24:ed:f1:e2:ec:0f:28:59:16:5e:b8:d5: 56:1e:e4:b9:64:2a:c3:57:89:6d:df:84:42:22:4b:d5:25:5a: 82:77:dc:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS94mSInLG6vW/tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk MGIwMDE2MDgtZWE2ZC00Yjk2LTkyNmItYzBlYjJiN2NkMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBrRtnPMSx6D2sj6Q8xbBtrpANuE6N5huM3M 82tmg5Pg9od5Y9yYnK+nYLJZuTd37VTk7Oox5oiXNXVoPan1QIuVHLNDW3WYh7Y5 1Xw6ihc7uKpy9ssWQRJ/RBb+m1a92HziEKW5WiQ0Q/pqRYVrLWopb2Ym/Z6q9Lun 0EAVg+ra5MioYY96cTVBkXO7L81YE9wqOpsSgqjjrFYFweXlCF57mXQjyBvx9PQ+ cIgsKZyKL2kjpWHhwDMmvpJAmQg8aK4fOIrGtrqTw4IEDN3JUpRA+y1X8blMJvcu YSlVQiKBLsQp9WPlHS0A2vaJC+TDsCRAYP1uWHp4PCMyjFSY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEx/vS214n5hnaKegJ51Ffo6aW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjVmNWYzMmUtNTE4OC0z MTRkLWEyNmUtMTljMDUwNGM0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETZ95bY0Bt6yV3WokvA2Eztu1uZB6VNP1bWQ37Vkmea/bbXtELo857P j4ipsl4BY7Q5/uAs38Wr/lw8yMhXcPIzDNmYdiUO6LCJj7FZRWrgBUJz0au9PnR8 TdjZ36XNLoiUCC/3tGjDKQsUSqdHhNE8LrELDeAXkthp/UqWBfY5aA01jIpLVLrq ywM9S1JhGDVf4TcgQes5Ww3JLuevCyLXZAo4fmHvGl2fqt8KTfnvJK72rL8toInD 0lYsW73fguYVRgOI0uMW9N+HqnZtemS/7UwpMefOVKGjMgd1sSTt8eLsDyhZFl64 1VYe5LlkKsNXiW3fhEIiS9UlWoJ33HM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:23 2024 by rpki-client on console-fra.rpki-client.org