$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa File: 3495d15c-fa42-330f-b8d8-37281c835c5c.roa (raw, json) Hash identifier: grR0G4jM2GaPOgnLbr9PO2vWcro+JTtlvkS4gpZ4YIs= Subject key identifier: DE:7A:03:A6:F3:EE:3E:A0:9B:97:47:C3:09:DD:94:DD:3A:5A:8E:51 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474850B86B061A2752358E3300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 22612 IP address blocks: 209.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:b8:6b:06:1a:27:52:35:8e:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=2c2771ed-2380-44d7-92a0-474f7f956bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:62:37:c7:ff:7e:af:83:c6:0c:65:fd:56:0d: 56:f7:7a:6a:88:fc:d6:d5:37:42:f5:43:e9:85:34: 9a:5f:9e:5c:48:c5:72:e2:83:b1:e4:ed:fe:e6:4b: d1:b8:45:1a:30:c5:a1:a7:a7:63:c0:10:3b:a7:59: 51:b6:5b:a4:b4:6e:48:3e:cc:6b:7d:c0:01:f9:af: bc:b1:3f:e6:4f:4a:2a:cc:18:21:2f:2f:f5:fd:fa: 1f:35:d9:78:16:87:dd:d8:2c:24:6c:ef:3a:c2:9e: 8f:54:a7:95:ab:fb:34:48:f6:de:43:8e:bf:36:14: e3:92:0b:94:e2:60:69:24:5b:df:ca:4c:22:fa:37: b6:ba:d9:c2:37:92:51:a3:c7:2c:c0:55:89:39:87: 63:39:64:bb:af:00:8b:76:ba:d5:5e:68:73:40:9b: 1d:01:6c:4b:74:33:da:69:81:be:44:16:44:5c:9a: 79:8b:f1:26:c6:19:d5:f5:eb:79:10:24:4c:a9:26: cb:96:34:3d:b4:c5:5e:7b:69:17:96:46:0c:cd:29: fd:6d:4a:ad:1f:39:8f:ca:b7:76:c3:7b:64:25:9f: dc:f6:77:7a:b4:0c:8c:98:44:1e:c0:82:b3:5d:71: 36:b2:c3:f9:03:6e:86:af:d8:4e:ea:16:91:8f:df: 38:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7A:03:A6:F3:EE:3E:A0:9B:97:47:C3:09:DD:94:DD:3A:5A:8E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:43:07:7d:75:5f:d7:5a:9b:8c:8b:8f:2e:50:b5:43:74:59: 95:69:62:35:60:fa:ab:89:7f:29:8a:3d:cc:27:56:a1:e0:30: c5:2b:52:9e:c5:7f:11:cb:d7:f3:3d:3c:3f:9e:75:c3:ea:8e: 60:61:4a:7b:77:7c:93:ac:7f:b6:72:a4:fe:1d:40:b2:09:14: 9f:7f:9a:7b:37:03:16:16:7a:80:d2:a5:23:e3:b5:17:4b:57: 79:1a:92:38:3a:89:12:c2:c1:03:5f:9b:47:ec:42:34:ca:2f: 3d:22:3f:86:90:f5:39:bf:00:f2:66:5e:ac:ef:ff:11:b9:21: e7:d0:fa:34:b6:ef:fd:9e:ea:e9:3e:85:84:9f:ac:6a:68:47: ba:21:2b:a3:95:91:39:d8:ee:c8:52:05:85:01:a2:ae:c9:9d: 4a:67:2e:1c:8a:f0:78:17:38:81:6d:2d:9d:ca:d4:bd:16:5a: d7:25:62:03:49:ae:08:72:a1:a9:e4:32:2b:45:d1:9c:99:b2: 9a:bd:7a:93:ce:89:a9:ee:a4:87:5d:ca:fd:57:6f:f2:90:49: f7:e2:8f:34:ca:3e:e4:b0:0b:79:6a:e0:5d:30:99:60:76:22: 8a:5e:19:e0:02:ad:f6:e7:9e:56:13:e3:e0:7b:43:ba:c1:10: 48:75:6f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIULhrBhonUjWOMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk MmMyNzcxZWQtMjM4MC00NGQ3LTkyYTAtNDc0ZjdmOTU2YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGI3x/9+r4PGDGX9Vg1W93pqiPzW1TdC9UPp hTSaX55cSMVy4oOx5O3+5kvRuEUaMMWhp6djwBA7p1lRtluktG5IPsxrfcAB+a+8 sT/mT0oqzBghLy/1/fofNdl4Fofd2CwkbO86wp6PVKeVq/s0SPbeQ46/NhTjkguU 4mBpJFvfykwi+je2utnCN5JRo8cswFWJOYdjOWS7rwCLdrrVXmhzQJsdAWxLdDPa aYG+RBZEXJp5i/EmxhnV9et5ECRMqSbLljQ9tMVee2kXlkYMzSn9bUqtHzmPyrd2 w3tkJZ/c9nd6tAyMmEQewIKzXXE2ssP5A26Gr9hO6haRj984YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN56A6bz7j6gm5dHwwndlN06Wo5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzQ5NWQxNWMtZmE0Mi0z MzBmLWI4ZDgtMzcyODFjODM1YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9DB311X9dam4yLjy5QtUN0WZVpYjVg+quJfymKPcwnVqHgMMUrUp7F fxHL1/M9PD+edcPqjmBhSnt3fJOsf7ZypP4dQLIJFJ9/mns3AxYWeoDSpSPjtRdL V3kakjg6iRLCwQNfm0fsQjTKLz0iP4aQ9Tm/APJmXqzv/xG5IefQ+jS27/2e6uk+ hYSfrGpoR7ohK6OVkTnY7shSBYUBoq7JnUpnLhyK8HgXOIFtLZ3K1L0WWtclYgNJ rghyoankMitF0ZyZspq9epPOianupIddyv1Xb/KQSffijzTKPuSwC3lq4F0wmWB2 IopeGeACrfbnnlYT4+B7Q7rBEEh1b8s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org