$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa File: d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa (raw, json) Hash identifier: uQYPDZ6Is8k/ONEHGgFLigquuZ+IMBFPTmz43p2axYk= Subject key identifier: B0:75:5A:54:DA:07:3F:82:D0:61:99:3A:52:88:88:A2:14:E9:DC:3B Certificate issuer: /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Certificate serial: 010D0C9F43285847C8D9E7D2C9C35111FE2EA080 Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 22280 IP address blocks: 209.196.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e7:d2:c9:c3:51:11:fe:2e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=f002b989-a042-40ce-b695-461491d06ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:cb:df:89:6d:c4:ab:d9:30:68:6a:8e:4d: c5:c5:b1:f9:f1:af:57:61:95:4f:24:1c:63:be:33: 71:02:0f:69:c8:5e:0a:c1:da:22:23:55:6e:ea:7e: 96:5c:31:c4:15:a4:73:f8:5c:d8:c0:07:07:13:ba: 41:9b:b6:2c:dc:c8:eb:5a:ba:b8:fb:15:02:b4:5b: 30:43:53:46:79:ca:95:2d:c0:b4:74:bf:e9:fd:24: 9b:4b:41:a7:2c:d7:2f:a1:84:fe:86:81:7e:ed:66: da:10:20:01:67:21:40:6b:d1:5b:db:14:4a:5a:e4: 01:4c:83:74:dd:f7:04:b4:1e:07:ea:15:1b:2f:ab: 4b:0e:24:d3:20:46:b7:a4:d9:85:ce:d4:72:0c:53: bb:6b:12:8f:69:ab:09:21:f3:ea:27:2f:e6:1b:c7: c4:76:95:5a:e7:84:ab:cd:9e:3d:cd:85:19:52:d5: 24:d9:e9:48:a3:d9:7c:d4:43:85:70:67:99:2f:d9: 68:42:4f:f5:9f:60:82:72:82:53:88:a5:22:73:70: 15:8e:46:ec:c2:01:52:2e:d4:cc:72:4c:bd:a0:6b: 20:16:e7:ae:d2:f6:e0:75:27:93:28:2c:2e:4a:cc: 41:81:7e:8e:1e:a6:77:54:53:b0:60:80:cf:3c:68: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:75:5A:54:DA:07:3F:82:D0:61:99:3A:52:88:88:A2:14:E9:DC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl X509v3 Authority Key Identifier: keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer sbgp-ipAddrBlock: critical IPv4: 209.196.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0b:d7:73:ce:44:cb:23:ec:1a:d8:ec:53:4b:16:f2:b4:d0: 1e:d3:b8:55:8b:1e:42:24:f9:83:6d:17:7f:e7:e1:10:db:74: 76:ab:a2:90:92:57:e1:40:e9:51:c6:d6:a9:53:16:a3:42:5b: 78:6c:75:20:aa:5e:ab:63:8e:7e:c8:91:40:24:4f:50:29:96: a9:ff:34:b4:1a:6c:77:a3:73:d6:37:c4:c2:ff:cf:ac:19:62: 8d:4c:48:62:65:be:9e:b2:00:74:c2:70:2a:6d:1a:e4:3b:6d: 65:f7:62:7d:2f:e5:16:17:9f:e8:93:b0:1c:9a:6e:c6:b2:3e: 25:e5:b5:5d:c3:b1:d1:6c:56:40:69:f9:6e:d0:00:61:bd:08: dd:1b:08:10:24:f6:73:44:bd:96:5e:d8:fe:bf:c1:70:34:f7: 3a:e1:3c:db:78:73:cf:c0:db:b8:80:db:78:f8:04:63:86:49: f6:01:10:b2:a5:17:48:b6:55:25:b6:7d:9b:fd:c0:44:57:1c: 0b:81:26:7a:f1:6d:97:e7:18:80:a2:e2:d3:e4:55:89:6e:19: 51:34:8f:50:7f:ab:40:b9:17:3b:74:77:e2:3f:fb:68:5f:4a: 03:9b:a2:e6:32:53:17:63:8e:c5:12:cb:53:f5:a7:91:76:d8: e3:b9:03:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2efSycNREf4uoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2MGMwY2YtOTUzNy00YTg2LWJkNjctYTFkZmQyODky NTA3MB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk ZjAwMmI5ODktYTA0Mi00MGNlLWI2OTUtNDYxNDkxZDA2ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG7L34ltxKvZMGhqjk3FxbH58a9XYZVPJBxj vjNxAg9pyF4KwdoiI1Vu6n6WXDHEFaRz+FzYwAcHE7pBm7Ys3MjrWrq4+xUCtFsw Q1NGecqVLcC0dL/p/SSbS0GnLNcvoYT+hoF+7WbaECABZyFAa9Fb2xRKWuQBTIN0 3fcEtB4H6hUbL6tLDiTTIEa3pNmFztRyDFO7axKPaasJIfPqJy/mG8fEdpVa54Sr zZ49zYUZUtUk2elIo9l81EOFcGeZL9loQk/1n2CCcoJTiKUic3AVjkbswgFSLtTM cky9oGsgFueu0vbgdSeTKCwuSsxBgX6OHqZ3VFOwYIDPPGicfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLB1WlTaBz+C0GGZOlKIiKIU6dw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYw YzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRmZDI4OTI1MDcvZDU0YTQ4YTktZjZjOS0z NGYxLWJkNTgtNDI5MTVjY2Q0OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWY2MGMwY2YtOTUzNy00YTg2LWJk NjctYTFkZmQyODkyNTA3LzFmNjBjMGNmLTk1MzctNGE4Ni1iZDY3LWExZGZkMjg5 MjUwNy5jcmwwHwYDVR0jBBgwFoAUnbcZ+pc9T9L6QbaAkk7XGDNMTpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYwYzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRm ZDI4OTI1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0cSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0L13PORMsj7BrY7FNLFvK00B7TuFWLHkIk+YNtF3/n4RDbdHaropCS V+FA6VHG1qlTFqNCW3hsdSCqXqtjjn7IkUAkT1Aplqn/NLQabHejc9Y3xML/z6wZ Yo1MSGJlvp6yAHTCcCptGuQ7bWX3Yn0v5RYXn+iTsByabsayPiXltV3DsdFsVkBp +W7QAGG9CN0bCBAk9nNEvZZe2P6/wXA09zrhPNt4c8/A27iA23j4BGOGSfYBELKl F0i2VSW2fZv9wERXHAuBJnrxbZfnGICi4tPkVYluGVE0j1B/q0C5Fzt0d+I/+2hf SgObouYyUxdjjsUSy1P1p5F22OO5A6A= -----END CERTIFICATE-----Generated at Fri Nov 22 04:26:03 2024 by rpki-client on console-fra.rpki-client.org