$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa File: a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa (raw, json) Hash identifier: LzUzHoaJAOFhYwWqY2eEr6wQStRigsXufjQTNRZSq3A= Subject key identifier: 07:E9:74:29:40:0E:F7:09:98:04:4B:05:75:BD:95:2D:6B:3A:57:0A Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584766401DC663D2A3ABA0129800 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa Signing time: Tue 01 Oct 2024 18:21:35 +0000 ROA not before: Tue 01 Oct 2024 18:21:35 +0000 ROA not after: Mon 30 Dec 2024 19:21:35 +0000 asID: 15164 IP address blocks: 209.71.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:66:40:1d:c6:63:d2:a3:ab:a0:12:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Oct 1 18:21:35 2024 GMT Not After : Dec 30 19:21:35 2024 GMT Subject: CN=bc5a0794-3b1e-4b8b-9d42-3a69a78e2ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:7b:b6:1b:5b:1b:3d:85:fe:36:62:69:1b: 1c:25:fd:6b:57:82:04:87:8d:74:50:54:ce:70:a0: 76:a1:76:07:13:1f:e1:99:ec:33:98:fe:1a:12:96: a3:85:9d:0f:83:ae:29:ee:18:ee:e0:09:e9:f2:92: 2e:80:0b:20:f1:be:7a:a6:e1:9d:41:35:48:a4:ae: 8a:51:c0:08:8b:6e:1e:07:98:8a:2d:0f:a4:bd:20: 6f:9d:6b:79:91:ac:0d:56:1a:4a:9f:44:59:9c:9a: cf:bf:b5:10:62:73:9d:11:a1:49:96:5a:74:f0:de: 42:89:10:d3:13:3d:9e:03:cd:b4:c8:36:c1:6a:7b: 72:5d:78:29:0d:33:17:73:9f:91:0d:5e:49:a3:37: 34:e0:ec:e4:82:fa:8f:a9:20:4d:34:e6:cb:6a:1c: a6:6e:2f:3f:3a:a2:6d:27:10:17:7d:8b:b0:32:05: aa:89:4e:d4:62:58:ba:25:fb:eb:4e:15:9f:0e:e6: 26:21:dd:c9:14:b4:f6:56:d8:2e:0a:06:20:c0:b5: 09:c2:00:c9:67:97:33:f4:c7:83:89:a8:d3:7c:79: 3c:b6:47:eb:56:5a:12:82:48:8d:b1:c5:94:8b:17: 47:6e:1e:f8:b8:d6:1d:4a:8d:0b:d9:3c:02:d2:57: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E9:74:29:40:0E:F7:09:98:04:4B:05:75:BD:95:2D:6B:3A:57:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:39:43:c9:dd:46:a3:ec:c3:d7:88:66:1b:40:47:7e:9c:ef: f1:73:5c:09:7a:70:76:46:ee:a8:76:0c:b4:b5:6f:4b:a5:ea: 4a:ee:17:7e:48:55:ca:4a:91:86:ff:ac:3d:ec:8f:89:24:87: 4a:f8:44:c2:37:4d:dd:2d:40:b8:c8:73:7f:21:db:41:5c:1f: b3:05:42:9e:40:de:01:fc:bd:4e:36:e7:e8:51:5b:d5:64:48: b7:e9:94:cf:e7:32:d5:8a:df:38:73:d5:99:41:35:cf:9d:e1: 6d:fa:0e:5d:1d:d8:2d:21:e4:80:af:c8:98:9c:b0:80:f7:b5: 6e:bc:f6:c5:2f:9b:ff:25:5e:35:4d:65:4e:7d:f6:bb:3b:c7: 6e:c7:d1:73:83:b2:09:1b:20:73:bc:d0:6e:a4:08:ad:25:c6: 67:df:64:eb:60:de:d0:ee:92:4d:d3:42:8f:f5:72:64:31:0b: 97:65:fc:d6:99:26:fc:5a:13:9b:66:42:35:2c:34:0b:f6:29: 0b:c2:22:f4:ea:4b:6d:4a:45:ed:64:7f:b9:e7:9e:b5:08:1b: 43:d3:d2:d9:70:45:ad:12:93:3a:dd:1f:c2:6e:a2:d9:46:4e: e2:d1:48:ce:b2:ef:80:57:46:9a:dd:3a:1a:70:62:e3:f0:ba: d4:29:d7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmQB3GY9Kjq6ASmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI0MTAwMTE4MjEzNVoXDTI0MTIzMDE5MjEzNVowLzEtMCsGA1UEAxMk YmM1YTA3OTQtM2IxZS00YjhiLTlkNDItM2E2OWE3OGUyYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMJ7thtbGz2F/jZiaRscJf1rV4IEh410UFTO cKB2oXYHEx/hmewzmP4aEpajhZ0Pg64p7hju4Anp8pIugAsg8b56puGdQTVIpK6K UcAIi24eB5iKLQ+kvSBvnWt5kawNVhpKn0RZnJrPv7UQYnOdEaFJllp08N5CiRDT Ez2eA820yDbBantyXXgpDTMXc5+RDV5Jozc04OzkgvqPqSBNNObLahymbi8/OqJt JxAXfYuwMgWqiU7UYli6JfvrThWfDuYmId3JFLT2VtguCgYgwLUJwgDJZ5cz9MeD iajTfHk8tkfrVloSgkiNscWUixdHbh74uNYdSo0L2TwC0lcKrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfpdClADvcJmARLBXW9lS1rOlcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTcwNGMzYTAtNWQ2My0z MGJkLWFlYjktYTgyZmE1MTc4YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs5Q8ndRqPsw9eIZhtAR36c7/FzXAl6cHZG7qh2DLS1b0ul6kruF35I VcpKkYb/rD3sj4kkh0r4RMI3Td0tQLjIc38h20FcH7MFQp5A3gH8vU425+hRW9Vk SLfplM/nMtWK3zhz1ZlBNc+d4W36Dl0d2C0h5ICvyJicsID3tW689sUvm/8lXjVN ZU599rs7x27H0XODsgkbIHO80G6kCK0lxmffZOtg3tDukk3TQo/1cmQxC5dl/NaZ JvxaE5tmQjUsNAv2KQvCIvTqS21KRe1kf7nnnrUIG0PT0tlwRa0SkzrdH8JuotlG TuLRSM6y74BXRprdOhpwYuPwutQp15U= -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org