$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa File: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json) Hash identifier: Bu2veV6m/MoBKozwslZ3vvviDcIgptJ2OvYX3H1XHE0= Subject key identifier: 53:53:DB:BD:73:94:F5:FD:3A:38:B7:68:51:C9:25:3C:AA:06:AB:D5 Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F43285847AB6C0EA08AC25A8330F68D00 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 3925 IP address blocks: 209.165.201.0/24 maxlen: 24 209.165.202.0/24 maxlen: 24 209.165.209.0/24 maxlen: 24 209.165.211.0/24 maxlen: 24 209.165.212.0/24 maxlen: 24 209.165.213.0/24 maxlen: 24 209.165.214.0/24 maxlen: 24 209.165.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:0e:a0:8a:c2:5a:83:30:f6:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=9a66d2d6-c8b8-4534-86c7-ff49d5360375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:c4:2f:1e:1a:55:cb:ae:b6:63:f2:18:f1: 13:3a:51:1b:5b:85:fa:16:4d:42:f4:38:cb:e7:6c: f9:c4:81:39:a9:38:d2:ea:b3:df:84:6b:28:55:66: e0:10:d4:44:a3:ae:a4:73:0a:59:9e:d5:f0:96:d0: 8b:44:ee:9d:d1:94:e2:5b:f6:50:f7:8e:04:15:1b: f0:56:f9:62:9e:89:a2:87:0d:2a:e8:b6:ba:7d:f6: fa:ed:2d:d5:bb:60:25:cb:90:f2:e5:0b:cd:0c:d2: 9d:ef:f4:b8:6a:ec:0f:18:c4:bb:59:68:a2:9a:7f: 5e:20:0b:88:b8:d4:06:93:3b:c3:a9:be:cb:af:05: 8e:46:1d:fe:3e:d1:e2:2f:87:89:7c:90:0a:95:33: f3:77:18:db:f4:86:a7:86:d4:80:22:d3:28:17:cf: f8:13:cc:79:6f:d2:e2:8a:2c:f6:96:9a:a4:41:b8: b8:f5:04:80:09:14:75:eb:62:55:69:62:0a:1c:dd: 30:6f:f0:3f:b3:bf:56:ba:e6:eb:ce:99:0d:a1:38: 4f:b0:7c:cf:48:95:0a:6a:ec:d3:71:fc:05:d2:47: eb:42:b9:08:fe:aa:46:78:1b:63:00:40:39:99:a9: 8a:30:81:23:a8:87:4a:b9:53:11:32:50:e4:73:cf: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:DB:BD:73:94:F5:FD:3A:38:B7:68:51:C9:25:3C:AA:06:AB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.201.0-209.165.202.255 209.165.209.0/24 209.165.211.0-209.165.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:10:04:b1:83:92:9d:0b:45:9d:a7:03:3c:e7:2e:7f:ac:16: 73:07:f7:db:4d:47:d0:3f:7a:04:0d:ca:c5:e1:2e:a0:59:d6: 4c:cc:58:26:03:c7:ea:9e:74:4a:b8:ca:ee:05:c4:2c:05:4c: 9e:6f:5f:ae:79:4c:e1:88:d4:cb:3e:71:9c:ae:7c:00:44:bd: 40:43:28:54:d9:89:49:a3:65:0d:40:de:44:ce:26:26:09:a3: 3d:49:95:7f:47:36:19:a6:10:7e:1f:bb:68:2d:fc:54:62:6f: a8:4b:06:fa:62:53:6e:70:91:ca:6d:cf:ce:3a:b1:28:0e:c7: e7:c8:f8:a5:77:a2:0f:31:72:74:66:2b:d1:2b:37:72:f2:45: 27:38:2b:26:d6:54:93:60:f2:f1:da:85:3c:e5:3d:e9:7e:3e: 59:28:71:4d:32:d8:a3:5e:8b:a8:65:4c:cc:90:77:d4:72:d8: 3a:ed:59:1e:c8:57:c3:6b:7e:28:14:ef:52:bb:21:af:b8:bb: 93:c6:c0:0c:68:40:c4:b2:a6:aa:1a:da:96:00:84:cc:4a:63: ac:8e:25:f2:79:8f:b8:28:d7:17:6f:cc:b6:78:b8:c6:2f:71: 74:68:87:90:c3:ff:c8:d7:52:b0:4b:b7:8f:4a:13:5d:fb:a1: 4f:81:1d:16 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEerbA6gisJagzD2jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk OWE2NmQyZDYtYzhiOC00NTM0LTg2YzctZmY0OWQ1MzYwMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD7ELx4aVcuutmPyGPETOlEbW4X6Fk1C9DjL 52z5xIE5qTjS6rPfhGsoVWbgENREo66kcwpZntXwltCLRO6d0ZTiW/ZQ944EFRvw Vvlinomihw0q6La6ffb67S3Vu2Aly5Dy5QvNDNKd7/S4auwPGMS7WWiimn9eIAuI uNQGkzvDqb7LrwWORh3+PtHiL4eJfJAKlTPzdxjb9IanhtSAItMoF8/4E8x5b9Li iiz2lpqkQbi49QSACRR162JVaWIKHN0wb/A/s79WuubrzpkNoThPsHzPSJUKauzT cfwF0kfrQrkI/qpGeBtjAEA5mamKMIEjqIdKuVMRMlDkc88fUQIDAQABo4IDcTCC A20wHQYDVR0OBBYEFFNT271zlPX9Oji3aFHJJTyqBqvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvMTBhNTk4NTYtZjcxYS0z NWZhLWFhMGQtM2MyOTNmYWE4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBADRpckD BADRpcoDBADRpdEwDAMEANGl0wMEA9Gl0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCREASxg5KdC0WdpwM8 5y5/rBZzB/fbTUfQP3oEDcrF4S6gWdZMzFgmA8fqnnRKuMruBcQsBUyeb1+ueUzh iNTLPnGcrnwARL1AQyhU2YlJo2UNQN5EziYmCaM9SZV/RzYZphB+H7toLfxUYm+o Swb6YlNucJHKbc/OOrEoDsfnyPild6IPMXJ0ZivRKzdy8kUnOCsm1lSTYPLx2oU8 5T3pfj5ZKHFNMtijXouoZUzMkHfUctg67VkeyFfDa34oFO9SuyGvuLuTxsAMaEDE sqaqGtqWAITMSmOsjiXyeY+4KNcXb8y2eLjGL3F0aIeQw//I11KwS7ePShNd+6FP gR0W -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org