$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa File: 012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json) Hash identifier: bAH+oaXhsRQfRRTldSmYjoTd3aKb3GCugEKY2c3eI+8= Subject key identifier: 5E:CD:66:9D:A1:7F:8F:1C:E6:4B:18:04:80:73:A6:39:51:37:AC:8F Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584782F0FCE34801858EA60FA100 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa Signing time: Sat 12 Oct 2024 01:00:32 +0000 ROA not before: Sat 12 Oct 2024 01:00:32 +0000 ROA not after: Fri 10 Jan 2025 02:00:32 +0000 asID: 33392 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:f0:fc:e3:48:01:85:8e:a6:0f:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Oct 12 01:00:32 2024 GMT Not After : Jan 10 02:00:32 2025 GMT Subject: CN=47cdddac-c804-4a40-b5d8-bbde24ff5ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:56:a2:d8:20:25:cd:ef:c4:01:88:9f:c3: 2a:ff:cd:14:9c:ad:52:ee:d6:ac:c3:e0:aa:75:88: 77:22:5e:d2:2a:4a:1d:76:d3:18:82:f1:9b:8a:ce: 21:ac:e2:7a:fc:41:e5:1b:ac:e1:42:81:c7:57:67: 43:83:7c:94:8b:b0:33:b8:68:6b:75:6e:84:6b:21: 3f:8f:96:69:55:bb:74:42:68:36:df:81:3b:e5:18: af:1b:e9:8f:05:4c:c7:bb:3d:7d:70:64:b0:b1:a2: b7:4d:47:3d:d8:ec:93:ef:af:3f:3f:9d:1a:05:11: de:db:e7:11:8d:78:16:83:16:77:fe:22:6e:cd:96: 28:1d:42:f8:bd:d0:cc:48:a4:bc:03:fb:a8:3f:cf: 7d:48:d2:7f:3a:39:83:0d:11:1c:7f:7c:48:66:53: 6c:1c:84:8d:3b:8b:c6:f3:89:2f:c8:e5:89:93:1f: ae:eb:ee:55:e7:d0:58:77:80:09:07:a1:4c:db:47: 63:04:70:58:85:36:89:67:cf:37:b8:39:23:63:a7: f8:0c:09:33:b3:f7:1d:aa:ea:b0:61:b3:30:c5:5b: a9:cd:93:2c:35:1a:2b:50:84:59:35:05:e3:6c:a1: e1:56:8f:da:ad:fe:9b:c4:1b:fa:cd:02:16:e7:18: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:66:9D:A1:7F:8F:1C:E6:4B:18:04:80:73:A6:39:51:37:AC:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e6:fb:b7:d5:79:f1:ac:bc:04:ad:63:6a:57:bb:78:d6:a0: 94:ed:2c:71:73:c9:82:ba:1a:ad:28:2e:ad:4d:95:4f:af:92: c3:b4:93:ea:7b:b3:9f:99:97:0e:f9:e8:79:23:86:e6:d5:66: 4f:f9:19:2c:58:85:85:e1:93:65:f5:10:ac:49:f0:20:17:8e: 59:17:92:c5:a3:fb:d6:8c:ea:cb:4a:10:15:0e:8a:da:27:4b: 4b:c3:b2:27:98:10:48:e7:34:df:75:cd:81:7a:1d:e8:67:e3: c7:c3:43:a6:81:c8:82:c8:ba:91:1f:b6:56:cb:46:5f:9e:5f: 9f:24:ea:26:b7:f6:98:22:4d:0f:4b:d3:7b:a2:b5:17:98:9d: b5:33:92:55:a4:7b:86:7d:f2:89:c8:bd:58:c3:da:81:6b:95: 02:74:84:34:da:bc:94:fa:c4:d4:cf:1b:e2:a2:4f:e7:c7:72: e8:67:14:01:7e:bc:16:73:6e:5f:e9:4f:e8:1e:d6:e0:57:a3: 81:77:3f:38:da:fe:25:78:c2:c1:44:70:37:58:ee:9f:07:e0: d8:41:9b:5f:bd:5c:63:f9:71:c5:58:d6:d1:c4:8c:b8:a5:a6: 09:4a:f9:66:75:58:6a:f5:8d:89:8c:f2:e3:8e:8b:dc:16:d6: 93:a1:2d:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeC8PzjSAGFjqYPoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTAxMjAxMDAzMloXDTI1MDExMDAyMDAzMlowLzEtMCsGA1UEAxMk NDdjZGRkYWMtYzgwNC00YTQwLWI1ZDgtYmJkZTI0ZmY1ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiVWotggJc3vxAGIn8Mq/80UnK1S7tasw+Cq dYh3Il7SKkoddtMYgvGbis4hrOJ6/EHlG6zhQoHHV2dDg3yUi7AzuGhrdW6EayE/ j5ZpVbt0Qmg234E75RivG+mPBUzHuz19cGSwsaK3TUc92OyT768/P50aBRHe2+cR jXgWgxZ3/iJuzZYoHUL4vdDMSKS8A/uoP899SNJ/OjmDDREcf3xIZlNsHISNO4vG 84kvyOWJkx+u6+5V59BYd4AJB6FM20djBHBYhTaJZ883uDkjY6f4DAkzs/cdquqw YbMwxVupzZMsNRorUIRZNQXjbKHhVo/arf6bxBv6zQIW5xjFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7NZp2hf48c5ksYBIBzpjlRN6yPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDEyZjIxYmQtOGU4ZS0z MmQ3LThhN2ItMzczOGYzOGMzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDm+7fVefGsvAStY2pXu3jWoJTtLHFzyYK6Gq0oLq1NlU+vksO0k+p7 s5+Zlw756HkjhubVZk/5GSxYhYXhk2X1EKxJ8CAXjlkXksWj+9aM6stKEBUOiton S0vDsieYEEjnNN91zYF6Hehn48fDQ6aByILIupEftlbLRl+eX58k6ia39pgiTQ9L 03uitReYnbUzklWke4Z98onIvVjD2oFrlQJ0hDTavJT6xNTPG+KiT+fHcuhnFAF+ vBZzbl/pT+ge1uBXo4F3Pzja/iV4wsFEcDdY7p8H4NhBm1+9XGP5ccVY1tHEjLil pglK+WZ1WGr1jYmM8uOOi9wW1pOhLa8= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org