$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa File: e409102b-1574-3eb9-9d70-f7404931cfa6.roa (raw, json) Hash identifier: iFqSnjFCTTTKR/hITQ9Ib53x4gUjmGlWBKjscXVVqlo= Subject key identifier: 98:72:76:D9:DE:71:9A:89:CB:01:4D:AE:1A:6B:3C:28:A4:3F:30:41 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F432858477230EB17288B8E10C3500040 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 13213 IP address blocks: 209.236.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:eb:17:28:8b:8e:10:c3:50:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=afe65641-de75-4c1e-806e-b711a7813bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:c9:1f:30:b1:2b:cd:d4:58:11:7a:dd:35: 1e:e3:74:4f:05:a5:53:db:21:cb:28:cd:80:ba:55: 09:a1:c6:37:8d:1e:bd:0a:a4:d2:e3:8e:9b:ba:ad: 0b:13:f3:23:e1:55:89:1f:37:e3:6f:8f:fc:d1:08: a5:f8:14:88:d8:f7:1e:9d:04:9e:82:d6:d5:0b:ee: 3c:d0:e4:a9:72:c1:68:8b:b4:1f:d4:ae:98:92:47: 2e:2c:52:66:2b:0d:35:0b:0d:b3:92:24:e0:6f:d8: ae:c5:88:76:0e:d4:7e:ce:f0:7a:6b:c5:82:45:45: d2:b2:e3:43:bf:26:a3:97:b1:95:69:d4:e7:55:64: 33:01:cc:f6:48:e2:de:f7:f3:83:b3:3f:5e:87:0d: c2:aa:ef:cf:96:b9:84:60:94:7e:a9:5e:5a:09:bd: 6d:bc:38:9b:bd:1c:31:33:fe:af:0a:6a:d6:28:a8: bb:70:5d:a6:6c:47:03:e5:6a:ca:3c:36:66:2b:e4: 68:76:7a:f3:57:b4:34:ce:75:89:ff:46:e3:1e:8c: ba:b2:08:14:f6:d4:44:13:9d:df:bb:d5:f3:93:dd: 84:59:d4:58:6e:19:47:a2:1a:33:1b:1c:a1:e1:74: a0:65:0f:e7:b1:df:cd:77:c5:4a:18:81:2f:6b:cc: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:72:76:D9:DE:71:9A:89:CB:01:4D:AE:1A:6B:3C:28:A4:3F:30:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e409102b-1574-3eb9-9d70-f7404931cfa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8b:83:e9:fc:59:a6:0a:0f:a9:cc:63:03:80:8f:b9:f3:93: 8e:6a:f1:a6:14:7e:53:7b:47:cc:ba:04:48:76:26:6d:55:43: 82:3b:b6:04:ae:8a:e0:19:6d:ff:cc:c8:74:e8:08:ef:42:0d: f0:e2:25:8f:29:bd:00:5b:ff:8e:9b:cc:0e:e1:00:3a:b7:8d: 0a:2a:de:ea:5f:6f:7d:85:f2:6b:f9:4e:e3:0f:33:48:64:d2: 47:54:db:80:20:49:7f:68:a9:52:b7:bc:fc:db:36:e7:f7:10: b6:59:be:a5:e8:b6:87:79:87:cf:d0:53:c4:48:ee:35:a1:9a: 9f:c4:46:60:e9:ea:a7:48:4c:a9:30:49:81:14:f1:3e:72:71: 6e:cb:c6:93:ff:10:2e:b1:56:e9:2a:e1:4d:5b:24:4b:80:9d: db:d9:bb:68:b7:9c:0c:22:b8:cd:cc:0e:51:33:29:ae:29:4d: 21:3d:d8:bf:5f:e6:f0:31:d3:e2:1f:80:d9:b7:1d:a3:2c:09: 43:42:51:2f:17:10:6e:d4:26:ee:2b:04:15:f3:cf:60:e8:08: a9:ed:9e:b6:d5:b8:82:71:7a:f6:5a:45:4f:44:72:12:44:3b: 9a:4b:91:f1:c3:30:02:61:55:0d:6a:5c:77:85:24:30:9a:f9: 8c:fc:5d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMOsXKIuOEMNQAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk YWZlNjU2NDEtZGU3NS00YzFlLTgwNmUtYjcxMWE3ODEzYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9nJHzCxK83UWBF63TUe43RPBaVT2yHLKM2A ulUJocY3jR69CqTS446buq0LE/Mj4VWJHzfjb4/80Qil+BSI2PcenQSegtbVC+48 0OSpcsFoi7Qf1K6YkkcuLFJmKw01Cw2zkiTgb9iuxYh2DtR+zvB6a8WCRUXSsuND vyajl7GVadTnVWQzAcz2SOLe9/ODsz9ehw3Cqu/PlrmEYJR+qV5aCb1tvDibvRwx M/6vCmrWKKi7cF2mbEcD5WrKPDZmK+RodnrzV7Q0znWJ/0bjHoy6sggU9tREE53f u9Xzk92EWdRYbhlHohozGxyh4XSgZQ/nsd/Nd8VKGIEva8zpIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhydtnecZqJywFNrhprPCikPzBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZTQwOTEwMmItMTU3NC0z ZWI5LTlkNzAtZjc0MDQ5MzFjZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0exGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWLg+n8WaYKD6nMYwOAj7nzk45q8aYUflN7R8y6BEh2Jm1VQ4I7tgSu iuAZbf/MyHToCO9CDfDiJY8pvQBb/46bzA7hADq3jQoq3upfb32F8mv5TuMPM0hk 0kdU24AgSX9oqVK3vPzbNuf3ELZZvqXotod5h8/QU8RI7jWhmp/ERmDp6qdITKkw SYEU8T5ycW7LxpP/EC6xVukq4U1bJEuAndvZu2i3nAwiuM3MDlEzKa4pTSE92L9f 5vAx0+IfgNm3HaMsCUNCUS8XEG7UJu4rBBXzz2DoCKntnrbVuIJxevZaRU9EchJE O5pLkfHDMAJhVQ1qXHeFJDCa+Yz8XeM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:01 2024 by rpki-client on console-ams.rpki-client.org