$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: JWfCcInIx/qM8gROCcILZd8bAF6MVUYREmucAY0PXK8= Subject key identifier: 82:D9:21:55:49:F2:8F:BD:34:8A:B3:97:89:21:62:E3:13:81:62:46 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584777C642AC19E3D3D706549480 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Tue 08 Oct 2024 01:00:31 +0000 ROA not before: Tue 08 Oct 2024 01:00:31 +0000 ROA not after: Mon 06 Jan 2025 02:00:31 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:c6:42:ac:19:e3:d3:d7:06:54:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Oct 8 01:00:31 2024 GMT Not After : Jan 6 02:00:31 2025 GMT Subject: CN=3b699abd-8c6e-4a62-8f66-e3aef71463bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:ef:26:bf:83:ad:fd:f8:4e:73:86:de:b6: 1a:bf:a5:99:eb:3e:c8:9f:47:d7:5d:d7:3e:6f:de: 63:81:eb:f0:1f:b0:ca:ce:e3:fc:e3:7a:ca:df:8f: 08:e5:84:7e:a1:cd:93:3f:bc:09:e0:71:d2:f0:fd: 48:a9:df:a9:81:46:ed:b2:ff:de:1c:82:62:30:7c: ff:2a:f0:f1:f4:a1:db:cc:dc:2c:47:f9:58:f6:36: 51:08:ad:5b:ee:55:2b:4e:75:00:50:bb:e1:b3:fe: 55:6b:3c:97:fb:8e:f3:45:2b:93:03:36:b9:c8:5c: 19:57:3f:f7:4e:f9:58:83:d8:8d:18:a4:a1:42:34: 47:64:6b:fb:dd:23:92:62:c3:5e:11:2b:ba:cf:22: 9d:b6:6b:0a:06:ef:ed:b5:69:c6:b6:37:6e:4c:8f: f0:8a:16:8b:e7:7e:1a:84:4b:2e:95:dd:7f:ad:ff: da:96:6d:98:95:04:62:dc:bd:8c:0b:a8:9e:39:c4: be:8d:8d:0b:ee:30:9a:11:93:24:a5:de:5d:6e:46: da:25:73:dc:bc:16:54:20:4c:db:c4:c2:de:cf:5c: 63:2a:ed:29:12:fa:81:54:b7:69:a7:b4:11:5e:94: a0:61:23:3c:55:9d:ac:e7:00:19:5c:4a:27:1e:e2: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D9:21:55:49:F2:8F:BD:34:8A:B3:97:89:21:62:E3:13:81:62:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:70:f2:fb:ee:9d:b7:fc:b6:d8:73:85:90:3d:e8:35:37:1b: a4:f3:65:b2:31:40:de:42:a3:d1:3c:4a:13:15:89:55:87:bb: 91:77:a0:ba:c5:c9:b5:d7:84:99:37:28:fe:b2:10:6c:cb:bc: 33:88:a7:53:a8:55:60:92:ba:96:fd:f9:aa:f1:f9:fe:94:3d: cf:70:b0:63:96:f1:52:83:de:c5:3f:75:54:94:44:0a:d3:a4: 4b:ff:ae:02:d5:c5:af:fe:15:5e:86:cb:d1:f7:22:75:3d:77: 29:11:4f:bc:92:5b:d7:9a:e5:25:38:75:f7:50:b1:1c:6b:64: 99:24:43:c1:50:81:84:9e:20:37:87:ec:f1:58:6c:49:35:ed: ac:98:6e:7f:f9:61:d6:88:2c:4a:82:15:61:c3:9c:5d:7e:ae: 4d:d6:5a:bd:d1:97:22:fe:2b:ba:4a:23:b2:fd:41:32:68:4e: c1:b4:5b:c4:27:0a:00:6c:e1:16:e5:f5:bc:a6:5c:a3:f9:7f: 73:28:e0:57:19:20:a9:08:ad:23:c7:f0:a8:81:3f:44:9b:2e: d9:0e:8e:47:9b:57:72:18:2a:d5:e1:17:35:0b:19:36:6a:c4: 5a:e2:8b:4b:79:23:2a:86:1b:bc:b0:08:f4:86:0b:e0:ad:16: c9:0d:cc:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xkKsGePT1wZUlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk M2I2OTlhYmQtOGM2ZS00YTYyLThmNjYtZTNhZWY3MTQ2M2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9fvJr+Drf34TnOG3rYav6WZ6z7In0fXXdc+ b95jgevwH7DKzuP843rK348I5YR+oc2TP7wJ4HHS8P1Iqd+pgUbtsv/eHIJiMHz/ KvDx9KHbzNwsR/lY9jZRCK1b7lUrTnUAULvhs/5VazyX+47zRSuTAza5yFwZVz/3 TvlYg9iNGKShQjRHZGv73SOSYsNeESu6zyKdtmsKBu/ttWnGtjduTI/wihaL534a hEsuld1/rf/alm2YlQRi3L2MC6ieOcS+jY0L7jCaEZMkpd5dbkbaJXPcvBZUIEzb xMLez1xjKu0pEvqBVLdpp7QRXpSgYSM8VZ2s5wAZXEonHuIM8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILZIVVJ8o+9NIqzl4khYuMTgWJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpw8vvunbf8tthzhZA96DU3G6TzZbIxQN5Co9E8ShMViVWHu5F3oLrF ybXXhJk3KP6yEGzLvDOIp1OoVWCSupb9+arx+f6UPc9wsGOW8VKD3sU/dVSURArT pEv/rgLVxa/+FV6Gy9H3InU9dykRT7ySW9ea5SU4dfdQsRxrZJkkQ8FQgYSeIDeH 7PFYbEk17ayYbn/5YdaILEqCFWHDnF1+rk3WWr3RlyL+K7pKI7L9QTJoTsG0W8Qn CgBs4Rbl9bymXKP5f3Mo4FcZIKkIrSPH8KiBP0SbLtkOjkebV3IYKtXhFzULGTZq xFrii0t5IyqGG7ywCPSGC+CtFskNzB8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org