$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/77026aec-a6c7-3339-9364-ade3cc39f353.roa File: 77026aec-a6c7-3339-9364-ade3cc39f353.roa (raw, json) Hash identifier: 2/7yI2MrgcNngbyucAUDXoouQ9qpf5A+lYVL/WgLvJg= Subject key identifier: CB:D2:20:8A:77:C1:9B:2C:CE:E2:9E:2E:F7:01:42:6C:D9:A8:EB:19 Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F432858477BF66C1FD801B046C19B7800 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/77026aec-a6c7-3339-9364-ade3cc39f353.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 5670 IP address blocks: 209.165.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:6c:1f:d8:01:b0:46:c1:9b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=0f4a3205-8f9c-427a-b3ec-ef3976120eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:33:c7:06:c0:fd:ad:ec:90:49:07:4d:ea: 20:56:65:7a:56:38:e2:4f:d9:6e:76:ca:8d:6f:6d: 67:62:c4:60:0d:21:47:29:71:69:b6:a6:09:c2:e0: 2d:86:5c:c6:5f:1a:d8:ef:6a:fe:c1:3f:b5:12:b9: a1:75:3c:22:fc:e2:b7:c4:c3:2f:ec:24:a0:2d:90: 59:dc:b3:22:f3:51:d3:bd:b4:39:ad:ce:7f:5c:73: 40:2b:69:d7:a9:8a:dd:90:31:32:93:5c:8c:4e:44: 7f:e9:b0:cb:c6:b0:11:c3:7d:58:5c:eb:5e:4c:8c: 80:84:40:6a:99:53:aa:65:8f:83:18:f2:5b:ed:7c: 5d:57:e4:d4:bb:c9:53:fa:8d:55:a7:7b:c6:08:c0: 27:02:e5:e2:21:f4:24:82:80:3f:0b:df:71:cf:b0: e1:12:b1:69:f9:2f:e4:c2:c6:a6:cf:ea:8d:7c:1c: 24:75:45:16:4c:da:ca:d9:1a:9c:34:73:a7:ef:41: f2:46:b7:b5:03:45:83:65:c7:9f:f5:a8:61:45:e8: 78:6e:1a:5d:50:be:6c:78:40:36:ca:12:ad:36:e2: 73:d5:89:ba:3d:c3:c9:a9:19:c0:ba:46:9b:7f:8e: ca:26:e9:95:b7:7d:37:8f:fe:15:e4:6b:7c:b1:ab: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D2:20:8A:77:C1:9B:2C:CE:E2:9E:2E:F7:01:42:6C:D9:A8:EB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/77026aec-a6c7-3339-9364-ade3cc39f353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4c:7a:94:e0:92:62:74:a5:95:a7:ff:4f:4b:36:93:b5:e6: 5a:5b:b1:80:90:8e:00:bd:cd:2a:4d:42:a6:60:84:29:b6:05: 46:89:2d:ea:1e:67:31:d0:67:05:e3:92:58:40:1c:a9:a8:e7: 9c:75:d7:7b:5b:f3:17:73:42:72:2a:a1:1b:30:7b:50:9f:18: 75:d2:a8:36:3e:e3:8e:95:b9:c0:28:0f:d0:73:bc:8b:05:c6: 21:bd:b5:66:67:7d:88:ee:04:db:09:08:6f:61:d5:4e:ac:36: 1d:65:62:1d:d8:66:19:1c:87:ee:a1:61:1d:7b:9a:5f:23:f6: 74:65:3c:6d:e7:38:e1:2a:4e:9a:11:3c:a7:df:93:76:60:a3: ae:9c:19:58:25:25:fe:05:15:2a:2f:2e:ea:56:92:94:ee:dd: a0:33:4c:f1:0b:53:85:2b:37:8a:8f:a0:6d:89:a2:4f:fe:9d: 0f:35:cb:4c:26:9b:94:ef:ce:e7:dd:e1:05:f9:51:a5:94:4c: 7e:65:ec:d3:ca:38:1f:7e:f9:8d:e6:af:9d:4b:d3:e4:33:b0: 5a:b6:ec:db:90:c3:8b:55:40:f6:fb:ae:24:c9:63:d3:03:ce: ab:43:f1:a5:cb:d8:97:91:62:cd:e6:89:70:c9:c2:af:8a:2c: 21:84:8d:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79mwf2AGwRsGbeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk MGY0YTMyMDUtOGY5Yy00MjdhLWIzZWMtZWYzOTc2MTIwZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC0zxwbA/a3skEkHTeogVmV6VjjiT9ludsqN b21nYsRgDSFHKXFptqYJwuAthlzGXxrY72r+wT+1ErmhdTwi/OK3xMMv7CSgLZBZ 3LMi81HTvbQ5rc5/XHNAK2nXqYrdkDEyk1yMTkR/6bDLxrARw31YXOteTIyAhEBq mVOqZY+DGPJb7XxdV+TUu8lT+o1Vp3vGCMAnAuXiIfQkgoA/C99xz7DhErFp+S/k wsamz+qNfBwkdUUWTNrK2RqcNHOn70HyRre1A0WDZcef9ahhReh4bhpdUL5seEA2 yhKtNuJz1Ym6PcPJqRnAukabf47KJumVt303j/4V5Gt8sas6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvSIIp3wZsszuKeLvcBQmzZqOsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvNzcwMjZhZWMtYTZjNy0z MzM5LTkzNjQtYWRlM2NjMzlmMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aXNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBMepTgkmJ0pZWn/09LNpO15lpbsYCQjgC9zSpNQqZghCm2BUaJLeoe ZzHQZwXjklhAHKmo55x113tb8xdzQnIqoRswe1CfGHXSqDY+446VucAoD9BzvIsF xiG9tWZnfYjuBNsJCG9h1U6sNh1lYh3YZhkch+6hYR17ml8j9nRlPG3nOOEqTpoR PKffk3Zgo66cGVglJf4FFSovLupWkpTu3aAzTPELU4UrN4qPoG2Jok/+nQ81y0wm m5Tvzufd4QX5UaWUTH5l7NPKOB9++Y3mr51L0+QzsFq27NuQw4tVQPb7riTJY9MD zqtD8aXL2JeRYs3miXDJwq+KLCGEjac= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org