$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa File: acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa (raw, json) Hash identifier: CCi7ObaR5iAH8iIMIT3lCMgHn40zWlw8pkialRanSjs= Subject key identifier: 25:0D:06:47:0F:66:C0:1D:A1:B8:58:DB:B3:7C:8A:35:06:1E:02:F3 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584774FB90BE5829B395E373A420 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 36511 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:90:be:58:29:b3:95:e3:73:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=56a252f7-ef08-4660-b874-a1d9a0ca8d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:15:53:44:54:c2:41:7f:47:eb:d5:5b:6b: 77:a7:b6:f0:0e:15:6f:df:1f:65:8b:6e:76:2a:51: 5d:4a:30:f2:7d:d4:6d:96:fa:6d:ba:9f:22:fa:a4: 6c:b5:22:78:54:b0:e2:e5:ab:e3:eb:fe:ed:c9:ad: a0:83:16:2d:a8:b1:71:2b:8a:b7:1f:78:3b:1c:c4: 9d:d8:62:c8:47:70:b4:15:78:07:e1:84:1f:43:2a: 66:01:1f:b4:59:b8:5b:5c:b8:18:4b:82:09:9e:a9: cd:94:58:89:9f:cf:57:40:18:6e:79:17:f3:d1:61: a2:8f:3f:27:1a:e5:f4:00:32:fe:74:15:99:50:93: 1e:88:fc:51:27:aa:c4:d9:a7:f1:8f:49:27:41:84: 83:ad:41:53:f1:b3:9d:8d:34:db:ac:94:a9:f7:61: de:45:89:fe:8f:6b:66:ef:ea:d1:fd:ce:39:da:75: 97:30:6e:84:93:86:eb:18:ed:15:5e:b1:d1:94:97: 34:c5:f4:a4:64:24:5c:91:b3:7a:77:c5:b1:e8:76: c7:b8:89:1a:a6:8c:e6:2c:d3:e4:ba:3a:39:68:6c: 81:46:ad:82:3d:ee:d6:67:9a:ed:8d:db:77:c4:a1: 54:38:82:2c:08:4f:29:38:27:1c:5d:45:20:51:3f: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0D:06:47:0F:66:C0:1D:A1:B8:58:DB:B3:7C:8A:35:06:1E:02:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:fc:81:cc:e0:e6:e8:eb:80:ff:f8:cf:ec:3c:db:7a:f8:05: ea:4f:ac:11:50:65:08:d6:70:e6:08:3f:a9:b7:fd:00:61:0e: 8f:ab:0c:9a:fd:6b:42:68:df:1e:4b:b4:dc:e6:52:0c:51:71: 5d:93:69:e9:76:f4:4f:b6:6a:82:8c:fa:fe:36:16:6a:a7:5b: 8d:a3:62:be:0d:6d:b9:42:80:b4:21:23:dd:40:07:90:e7:c9: d9:ff:45:29:a9:99:c7:76:9d:a0:0b:ff:76:a0:45:41:49:68: 79:45:f8:35:44:4b:b0:66:40:40:47:12:b9:33:be:35:bb:a4: cb:8b:10:a1:00:42:cb:5e:07:21:aa:a7:d3:b8:62:f5:74:69: 5f:c9:3e:8a:f3:96:6d:f9:43:a0:61:a8:2e:50:5a:ac:af:5d: 2f:69:d3:20:68:9c:b1:8b:03:98:0e:78:15:71:65:08:18:5a: 81:1b:cf:45:c2:f6:80:09:83:d4:25:26:a4:18:1f:86:6d:06: 35:7f:41:49:dd:f4:62:c2:b7:77:a7:ae:23:2b:a0:7e:91:7c: d2:d2:a7:de:f5:8c:24:92:9b:1c:62:16:4d:56:29:2f:43:a8: d6:d6:d9:3c:f4:7e:20:bf:e7:80:40:9a:6f:44:1f:6c:05:3d: d8:a3:de:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+5C+WCmzleNzpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk NTZhMjUyZjctZWYwOC00NjYwLWI4NzQtYTFkOWEwY2E4ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CoVU0RUwkF/R+vVW2t3p7bwDhVv3x9li252 KlFdSjDyfdRtlvptup8i+qRstSJ4VLDi5avj6/7tya2ggxYtqLFxK4q3H3g7HMSd 2GLIR3C0FXgH4YQfQypmAR+0WbhbXLgYS4IJnqnNlFiJn89XQBhueRfz0WGijz8n GuX0ADL+dBWZUJMeiPxRJ6rE2afxj0knQYSDrUFT8bOdjTTbrJSp92HeRYn+j2tm 7+rR/c452nWXMG6Ek4brGO0VXrHRlJc0xfSkZCRckbN6d8Wx6HbHuIkapozmLNPk ujo5aGyBRq2CPe7WZ5rtjdt3xKFUOIIsCE8pOCccXUUgUT98CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUNBkcPZsAdobhY27N8ijUGHgLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWNkYjM5NDMtMWZlMC0z NDNmLWI1ZmYtYzc5OGU5ZmQ0MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP8gczg5ujrgP/4z+w823r4BepPrBFQZQjWcOYIP6m3/QBhDo+rDJr9 a0Jo3x5LtNzmUgxRcV2Tael29E+2aoKM+v42FmqnW42jYr4NbblCgLQhI91AB5Dn ydn/RSmpmcd2naAL/3agRUFJaHlF+DVES7BmQEBHErkzvjW7pMuLEKEAQsteByGq p9O4YvV0aV/JPorzlm35Q6BhqC5QWqyvXS9p0yBonLGLA5gOeBVxZQgYWoEbz0XC 9oAJg9QlJqQYH4ZtBjV/QUnd9GLCt3enriMroH6RfNLSp971jCSSmxxiFk1WKS9D qNbW2Tz0fiC/54BAmm9EH2wFPdij3uc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org