$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa File: de5b00f2-cadd-3f54-97b7-032b7ca57259.roa (raw, json) Hash identifier: rQi/f6Piq8M8JgP4iSkNLpupvEi4zgvANjNKZ5rKI6c= Subject key identifier: 12:E8:1D:A2:13:7F:7B:A6:22:AE:0C:88:C3:0C:18:B9:9B:A4:E6:D5 Certificate issuer: /CN=237e8029-86f4-41b0-ab75-535531b02fb3 Certificate serial: 010D0C9F43285847D8F7919B97060F7B813DFD40 Authority key identifier: F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa Signing time: Mon 11 Nov 2024 20:33:22 +0000 ROA not before: Mon 11 Nov 2024 20:33:22 +0000 ROA not after: Sun 09 Feb 2025 20:33:22 +0000 asID: 30713 IP address blocks: 209.221.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d8:f7:91:9b:97:06:0f:7b:81:3d:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237e8029-86f4-41b0-ab75-535531b02fb3 Validity Not Before: Nov 11 20:33:22 2024 GMT Not After : Feb 9 20:33:22 2025 GMT Subject: CN=c2a4f741-c311-447e-9f5f-3ab911880040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:f7:90:86:58:b8:0a:66:16:76:3e:5e:e6: 63:e7:26:7f:0b:00:f0:31:96:2d:95:60:94:62:0f: cf:22:4a:af:8b:cd:14:b8:f4:90:08:14:a8:a3:86: 6b:24:0d:12:39:ab:71:6a:e8:46:d5:67:43:ed:8c: 1b:5c:03:ce:99:76:84:1f:c9:f6:9a:e6:d1:f6:4d: 2a:37:80:6d:84:a4:75:04:a2:95:90:e0:6d:41:c5: 80:30:fd:49:a8:b6:30:55:93:fd:6e:95:e4:d3:97: d0:df:6e:99:26:b8:44:a3:67:d0:2c:a2:53:02:8e: c7:1f:f1:7e:c9:0b:aa:9f:7e:d4:79:84:1a:ab:0e: 05:30:44:3f:17:19:97:f4:21:52:1d:af:a7:4d:91: 34:d2:c5:43:17:bc:eb:76:5d:13:a1:e0:f9:50:96: 11:50:ba:d0:1c:dd:b0:04:6c:da:7a:8d:6d:a7:6f: 4f:31:7c:90:d2:28:bd:10:4f:8c:fd:07:90:26:63: c0:14:97:18:79:a5:d3:0f:bd:66:d4:9d:70:70:e3: e0:02:1c:f6:e6:a1:78:71:07:f5:77:69:94:c2:55: 81:0f:98:d5:68:aa:3a:1f:60:5f:e7:b0:66:4c:24: e7:52:1b:44:56:97:82:88:61:fc:55:5d:7b:ff:a9: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E8:1D:A2:13:7F:7B:A6:22:AE:0C:88:C3:0C:18:B9:9B:A4:E6:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl X509v3 Authority Key Identifier: keyid:F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer sbgp-ipAddrBlock: critical IPv4: 209.221.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:82:2d:fb:cb:39:91:6d:76:4f:16:8a:ff:d5:23:d9:46:dd: 05:52:37:6f:a8:a2:71:4f:11:b1:61:49:4f:19:9a:49:db:8e: 6b:42:45:3a:a4:9f:8f:21:30:9a:ea:c8:0a:f7:24:a2:63:16: 32:7e:12:68:88:80:d2:81:72:17:a2:7b:29:82:74:a0:8e:70: 7e:a3:a2:4e:a9:ea:27:dc:6e:87:9b:1c:c9:16:8b:58:dd:dd: 36:a3:ac:2b:76:b3:c6:03:e3:44:0e:ea:80:f3:98:68:15:53: 4d:a9:4a:06:82:1f:3e:00:2e:eb:d5:f2:e9:e1:b3:7e:e1:7b: 39:39:e2:21:24:b0:e2:3e:ae:ae:84:cb:94:ce:7f:08:17:36: 63:2f:a0:2f:fe:ac:89:d8:16:15:19:88:cd:67:66:ba:ab:d1: e2:c2:aa:4e:f1:72:8f:36:0d:8b:fe:58:a3:c4:b4:21:77:e3: 2a:97:b3:22:d4:c9:7d:a5:a4:7b:14:ee:a6:fc:f0:e6:43:89: fa:b7:30:71:86:19:f7:76:61:4d:a3:8b:8e:00:a6:77:ca:b1: 8a:20:4b:24:6a:6e:99:4c:71:78:12:d1:67:bd:a1:55:08:1a: 9c:e5:ee:2a:06:18:39:06:49:32:7f:9c:8c:76:d3:74:51:29: bd:db:a4:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfY95GblwYPe4E9/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM3ZTgwMjktODZmNC00MWIwLWFiNzUtNTM1NTMxYjAy ZmIzMB4XDTI0MTExMTIwMzMyMloXDTI1MDIwOTIwMzMyMlowLzEtMCsGA1UEAxMk YzJhNGY3NDEtYzMxMS00NDdlLTlmNWYtM2FiOTExODgwMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZT3kIZYuApmFnY+XuZj5yZ/CwDwMZYtlWCU Yg/PIkqvi80UuPSQCBSoo4ZrJA0SOatxauhG1WdD7YwbXAPOmXaEH8n2mubR9k0q N4BthKR1BKKVkOBtQcWAMP1JqLYwVZP9bpXk05fQ326ZJrhEo2fQLKJTAo7HH/F+ yQuqn37UeYQaqw4FMEQ/FxmX9CFSHa+nTZE00sVDF7zrdl0ToeD5UJYRULrQHN2w BGzaeo1tp29PMXyQ0ii9EE+M/QeQJmPAFJcYeaXTD71m1J1wcOPgAhz25qF4cQf1 d2mUwlWBD5jVaKo6H2Bf57BmTCTnUhtEVpeCiGH8VV17/6kLowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLoHaITf3umIq4MiMMMGLmbpObVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdl ODAyOS04NmY0LTQxYjAtYWI3NS01MzU1MzFiMDJmYjMvZGU1YjAwZjItY2FkZC0z ZjU0LTk3YjctMDMyYjdjYTU3MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjM3ZTgwMjktODZmNC00MWIwLWFi NzUtNTM1NTMxYjAyZmIzLzIzN2U4MDI5LTg2ZjQtNDFiMC1hYjc1LTUzNTUzMWIw MmZiMy5jcmwwHwYDVR0jBBgwFoAU+DIqtLA1wtaj1Oyjs3YcFK6ra3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdlODAyOS04NmY0LTQxYjAtYWI3NS01MzU1 MzFiMDJmYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0d1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGCLfvLOZFtdk8Wiv/VI9lG3QVSN2+oonFPEbFhSU8ZmknbjmtCRTqk n48hMJrqyAr3JKJjFjJ+EmiIgNKBcheieymCdKCOcH6jok6p6ifcboebHMkWi1jd 3TajrCt2s8YD40QO6oDzmGgVU02pSgaCHz4ALuvV8unhs37hezk54iEksOI+rq6E y5TOfwgXNmMvoC/+rInYFhUZiM1nZrqr0eLCqk7xco82DYv+WKPEtCF34yqXsyLU yX2lpHsU7qb88OZDifq3MHGGGfd2YU2ji44ApnfKsYogSyRqbplMcXgS0We9oVUI Gpzl7ioGGDkGSTJ/nIx203RRKb3bpCw= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:27 2024 by rpki-client on console-fra.rpki-client.org