$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa File: 3fb48407-4606-35a4-99e8-1568ddbd9809.roa (raw, json) Hash identifier: BwLqSvZyhLMvNvMdFH2t6ZlbgJ+u7kPrQOa8pULLuQQ= Subject key identifier: 41:C9:0C:FA:DB:A2:89:3B:EF:75:A1:B7:50:DF:A5:DE:E5:5B:36:8E Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285847EBBF80A5E5EE1E8332E31C00 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 55293 IP address blocks: 209.124.88.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:80:a5:e5:ee:1e:83:32:e3:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=6deebcf0-4327-4794-9ce8-a175e64422d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:68:60:2a:71:cc:f1:d6:ff:49:9a:b6:09: e4:02:85:fe:86:6b:fe:9e:14:df:0c:ae:33:59:64: 33:15:9a:93:0d:81:a0:48:90:31:63:ec:1e:c4:ec: 08:8e:74:ac:f6:7f:1f:3d:69:c8:dc:a6:8f:ea:f8: 9f:ff:c6:4c:c4:ad:6c:db:89:70:dc:30:16:51:34: 19:63:a2:e9:2a:3b:1a:3d:ec:c0:71:41:03:74:84: 0e:87:4d:5e:e0:23:89:60:d7:9d:33:36:35:f0:7d: 7a:40:d0:3c:26:dd:62:46:87:ba:c3:65:c5:22:1a: 92:2c:95:d9:1a:94:70:8b:5d:82:52:12:ea:04:c7: a4:0f:fa:78:40:0a:20:82:fb:64:a7:6f:ac:ba:77: 82:cf:2d:c9:32:c1:07:f8:09:8c:00:68:34:cf:ee: d6:30:e2:20:e0:9a:cc:4b:0e:ca:c6:11:4f:17:6a: df:aa:51:18:8a:cf:75:fe:22:bd:84:8a:2a:ee:28: b5:8c:6e:f9:32:80:cf:31:c6:cf:2f:46:bf:be:8a: 14:67:40:9a:a6:1f:1c:31:00:47:1b:47:5c:09:d0: a0:c5:bf:0b:83:a8:f3:13:b9:d9:a1:f9:bc:45:f4: 72:d5:69:5b:2d:f5:1d:2c:ab:60:c4:1a:c4:b5:d7: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C9:0C:FA:DB:A2:89:3B:EF:75:A1:B7:50:DF:A5:DE:E5:5B:36:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3fb48407-4606-35a4-99e8-1568ddbd9809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 209.124.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a4:e3:50:ac:57:fe:63:68:93:b3:42:d0:ef:b0:a8:3f:8f: 4c:32:3d:38:37:89:6e:25:13:ac:96:24:ab:c5:0c:ad:8e:6d: 3d:d9:3b:ba:4a:d7:22:bb:71:a5:ec:01:77:10:58:87:03:fb: 51:b4:5d:6f:18:27:64:ce:12:ee:dd:b4:1f:f0:83:37:82:65: 6b:f5:cc:f6:44:af:04:91:45:fd:a1:55:ec:4f:9d:01:fd:2b: 7b:3d:3a:98:f7:3c:2e:4c:be:3a:ea:69:7d:91:a2:a3:d4:e8: fa:a5:b4:66:85:24:2e:4d:07:11:b5:ad:92:b7:b5:1b:46:af: b6:68:65:30:5d:91:b7:76:85:fc:c7:97:2c:cb:36:21:4f:d1: c9:e5:92:06:73:f1:5d:0a:ee:11:f7:d4:75:c7:72:97:de:d7: 31:16:cc:39:d7:3b:43:31:03:ac:52:21:ca:79:a4:53:90:d8: 9c:1e:f0:bc:95:97:98:38:e0:a6:4d:5d:14:99:20:b7:34:b2: 8e:7e:bc:b4:f5:5b:f9:17:e2:52:25:74:87:a7:54:15:e5:75: 68:59:65:10:87:9b:5a:66:e3:1a:71:68:92:f7:e7:63:e4:cf: 6a:f7:e5:3c:f9:42:26:a0:74:04:3a:bd:f8:43:a1:b4:38:9c: ac:51:d2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4Cl5e4egzLjHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk NmRlZWJjZjAtNDMyNy00Nzk0LTljZTgtYTE3NWU2NDQyMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo1oYCpxzPHW/0matgnkAoX+hmv+nhTfDK4z WWQzFZqTDYGgSJAxY+wexOwIjnSs9n8fPWnI3KaP6vif/8ZMxK1s24lw3DAWUTQZ Y6LpKjsaPezAcUEDdIQOh01e4COJYNedMzY18H16QNA8Jt1iRoe6w2XFIhqSLJXZ GpRwi12CUhLqBMekD/p4QAoggvtkp2+suneCzy3JMsEH+AmMAGg0z+7WMOIg4JrM Sw7KxhFPF2rfqlEYis91/iK9hIoq7ii1jG75MoDPMcbPL0a/vooUZ0Caph8cMQBH G0dcCdCgxb8Lg6jzE7nZofm8RfRy1WlbLfUdLKtgxBrEtddhNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHJDPrbook773Wht1Dfpd7lWzaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvM2ZiNDg0MDctNDYwNi0z NWE0LTk5ZTgtMTU2OGRkYmQ5ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGik41CsV/5jaJOzQtDvsKg/j0wyPTg3iW4lE6yWJKvFDK2ObT3ZO7pK 1yK7caXsAXcQWIcD+1G0XW8YJ2TOEu7dtB/wgzeCZWv1zPZErwSRRf2hVexPnQH9 K3s9Opj3PC5MvjrqaX2RoqPU6PqltGaFJC5NBxG1rZK3tRtGr7ZoZTBdkbd2hfzH lyzLNiFP0cnlkgZz8V0K7hH31HXHcpfe1zEWzDnXO0MxA6xSIcp5pFOQ2Jwe8LyV l5g44KZNXRSZILc0so5+vLT1W/kX4lIldIenVBXldWhZZRCHm1pm4xpxaJL352Pk z2r35Tz5QiagdAQ6vfhDobQ4nKxR0tE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org