$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: RuHefaRQVHH4enGg+Z6UI+tdI06rLedH5d2SuF8MYHs= Subject key identifier: 9B:41:EF:26:EE:0C:2B:92:F8:0D:E3:45:32:41:27:CB:1B:98:5F:63 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584774FB90CEA4A95DA400312280 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:90:ce:a4:a9:5d:a4:00:31:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=3f42e2c7-a216-43c4-9324-0f9be7a61bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:d0:00:f9:e4:48:3d:ac:e0:6e:c1:dc:fd: 6f:c8:62:0e:68:31:aa:8f:39:ed:87:12:f0:fc:e4: 58:57:4e:f4:9c:4e:95:ab:44:da:21:e1:a3:4f:83: 54:30:47:1c:65:23:82:8f:f6:dc:fd:a8:a7:fb:e5: ef:b4:75:75:02:ac:d4:f1:97:01:56:a1:58:b8:bd: 82:4c:9a:e3:18:50:e3:4e:b4:54:d9:09:3c:11:32: eb:e3:5e:c4:1b:15:95:32:68:5a:3a:03:0e:3b:e2: 31:e8:4e:37:a7:61:21:0f:5c:94:8c:85:48:8e:df: b3:26:8f:44:28:5f:36:de:dc:89:fd:8d:a6:5d:65: 11:3e:a8:53:05:f2:5b:2b:98:68:c8:02:ad:29:43: 45:f9:65:cd:70:9d:1a:d4:cd:33:e0:11:24:f4:7b: ff:55:b2:66:00:fa:27:38:01:e0:12:74:d3:b6:e7: 70:d6:24:7b:d1:a4:1d:1f:f6:c9:b7:c2:fc:43:24: 39:05:6d:56:9a:7b:e9:85:d5:6c:c6:45:4c:90:1a: a0:22:2c:b3:15:38:5b:6d:8c:80:d9:fe:1a:d7:f5: 18:40:ae:5f:34:6b:59:7f:b0:e8:59:dd:78:9a:98: fe:2f:53:68:07:f3:ac:21:c6:97:52:db:c8:ef:b9: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:EF:26:EE:0C:2B:92:F8:0D:E3:45:32:41:27:CB:1B:98:5F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f0:04:68:13:66:4b:72:b2:af:75:7c:12:17:99:c3:81:86: 94:24:d6:01:b6:aa:82:a7:64:6f:09:25:77:c4:0c:9f:92:0b: 64:f3:0f:61:e6:ec:32:cf:88:50:81:33:28:a5:82:9a:c7:3e: 4e:36:f7:cb:5a:7f:6b:02:aa:5e:2b:89:45:c6:8e:39:c6:30: b7:b6:30:87:1f:01:ac:55:bf:91:33:8d:24:99:c8:bf:49:ff: 96:87:1d:71:83:8b:f7:9f:d3:12:a9:f4:52:d2:b4:4a:da:e7: b8:3a:21:01:db:d1:6e:5b:4f:ea:6d:9e:de:87:86:39:e3:85: 4e:c1:0c:da:22:67:c0:0f:4d:d1:b6:44:31:59:bd:9f:56:ad: bc:aa:bd:b4:06:6e:bf:5f:c0:f3:73:46:21:c1:e7:2e:01:97: e3:9a:5f:c3:25:7f:db:56:90:00:28:dd:30:3b:e3:aa:72:d5: a5:f6:b9:57:d3:45:03:54:3c:cf:13:88:db:34:b9:13:48:8d: d9:ae:51:95:12:64:c9:bb:43:ef:ac:df:8b:89:48:90:46:6c: 89:36:39:4a:c3:b7:5f:be:db:cc:4f:c8:90:9e:96:1c:f5:6c: a5:c4:31:bf:cf:ca:69:99:7c:4a:1f:7d:c0:e3:38:55:30:07: fb:82:1a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+5DOpKldpAAxIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk M2Y0MmUyYzctYTIxNi00M2M0LTkzMjQtMGY5YmU3YTYxYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiLQAPnkSD2s4G7B3P1vyGIOaDGqjznthxLw /ORYV070nE6Vq0TaIeGjT4NUMEccZSOCj/bc/ain++XvtHV1AqzU8ZcBVqFYuL2C TJrjGFDjTrRU2Qk8ETLr417EGxWVMmhaOgMOO+Ix6E43p2EhD1yUjIVIjt+zJo9E KF823tyJ/Y2mXWURPqhTBfJbK5hoyAKtKUNF+WXNcJ0a1M0z4BEk9Hv/VbJmAPon OAHgEnTTtudw1iR70aQdH/bJt8L8QyQ5BW1WmnvphdVsxkVMkBqgIiyzFThbbYyA 2f4a1/UYQK5fNGtZf7DoWd14mpj+L1NoB/OsIcaXUtvI77k7XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtB7ybuDCuS+A3jRTJBJ8sbmF9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/wBGgTZktysq91fBIXmcOBhpQk1gG2qoKnZG8JJXfEDJ+SC2TzD2Hm 7DLPiFCBMyilgprHPk4298taf2sCql4riUXGjjnGMLe2MIcfAaxVv5EzjSSZyL9J /5aHHXGDi/ef0xKp9FLStEra57g6IQHb0W5bT+ptnt6HhjnjhU7BDNoiZ8APTdG2 RDFZvZ9WrbyqvbQGbr9fwPNzRiHB5y4Bl+OaX8Mlf9tWkAAo3TA746py1aX2uVfT RQNUPM8TiNs0uRNIjdmuUZUSZMm7Q++s34uJSJBGbIk2OUrDt1++28xPyJCelhz1 bKXEMb/PymmZfEoffcDjOFUwB/uCGu0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org