$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json) Hash identifier: 5GU2GtS5mLw6xYy5Ofbaa4BSJm6vQkHswBp2eQODiz8= Subject key identifier: AB:82:B4:25:42:6C:42:43:85:F3:C2:40:30:3A:B1:03:14:0B:53:BD Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f Certificate serial: 010D0C9F43285847823577A1DAE4CDDDF97D6980 Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa Signing time: Fri 11 Oct 2024 18:42:46 +0000 ROA not before: Fri 11 Oct 2024 18:42:46 +0000 ROA not after: Thu 09 Jan 2025 19:42:46 +0000 asID: 4393 IP address blocks: 209.251.198.0/23 maxlen: 23 209.251.200.0/21 maxlen: 21 209.251.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:35:77:a1:da:e4:cd:dd:f9:7d:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f Validity Not Before: Oct 11 18:42:46 2024 GMT Not After : Jan 9 19:42:46 2025 GMT Subject: CN=a7df9956-ee6e-4cac-b235-03a77461c674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:79:2c:b9:ce:dc:91:4a:7b:26:bd:6d:4c: 0a:7e:b6:1c:53:5c:a0:63:1a:ce:0f:0b:24:35:2b: 5e:75:13:55:eb:a6:c1:65:e6:2a:9d:4c:61:23:ec: 47:80:69:19:4c:21:93:8a:99:48:21:53:08:5f:ef: 78:e3:e7:32:21:4e:11:26:56:d6:bb:32:48:97:71: 0b:3e:90:82:41:42:36:38:07:44:4e:1d:b2:5f:da: 31:ac:44:f4:08:0f:2c:e4:e6:47:b7:5c:f8:7f:08: 10:ef:a3:6b:0e:a9:b5:c7:fa:15:a4:d0:cb:30:ba: 07:01:c1:46:1d:0c:90:75:c0:42:4b:bb:ad:b9:ee: a0:65:d8:87:f2:d6:c1:58:d5:23:f2:42:c6:bf:3d: 10:8b:93:16:0f:5a:9a:71:ba:29:7a:3c:f5:db:50: a1:bc:94:05:69:19:a6:1a:27:48:61:3a:ce:e3:52: 9b:f5:d3:47:b0:bc:3c:61:6b:1a:ed:3f:82:53:b8: ab:d9:c1:db:7f:a3:e5:39:25:85:30:8f:cf:15:22: a6:a3:68:cd:ea:8e:9f:40:ce:d8:6c:d6:f7:b7:92: 69:74:79:64:49:14:a6:f7:9b:4f:0e:ec:8f:d6:ff: 3a:d9:ee:b0:2d:90:11:11:1b:73:c0:db:06:77:c7: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:B4:25:42:6C:42:43:85:F3:C2:40:30:3A:B1:03:14:0B:53:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl X509v3 Authority Key Identifier: keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer sbgp-ipAddrBlock: critical IPv4: 209.251.198.0-209.251.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:68:3a:ee:98:0c:27:6e:61:57:ef:3f:17:5b:54:ac:2b:b1: 65:63:2c:36:10:58:63:ae:2c:8a:be:48:68:9f:74:61:a1:b4: 2a:5f:1c:8b:60:8b:c5:e9:63:9b:f9:ed:03:0a:e9:41:14:20: ac:03:f6:83:12:c9:55:a4:97:ac:e6:14:fd:a5:1b:a0:ce:b5: 92:62:3a:67:75:51:51:fc:65:cd:6e:81:38:4b:fe:47:65:ab: 03:12:4e:f4:f0:27:56:1a:44:be:1a:7b:f9:f0:fc:55:43:1f: 15:55:4e:76:ee:c0:38:82:00:bf:e8:35:0c:b1:6c:b0:40:e0: cb:da:f6:46:5c:a0:df:88:4c:3b:3d:72:d6:32:a8:ed:f1:64: 93:f0:b5:cb:cc:d7:61:3d:e2:df:c5:63:6c:87:53:17:c5:ac: aa:e6:53:ed:a1:a4:c0:af:85:c0:66:44:a3:2e:f7:fa:66:19: 52:33:d8:a9:8d:4d:65:11:0e:ec:e0:72:d7:a2:a0:4e:71:0f: a0:8a:70:6d:f1:0f:19:fb:33:b9:e6:1c:21:ec:a1:81:75:91: 23:bd:33:07:e5:57:c0:73:4f:2c:9b:d3:64:47:ab:37:de:83: 93:ed:15:f1:78:5e:7d:5b:df:9f:2d:f2:97:d4:bf:f3:a0:6d: 89:1b:3f:b8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEeCNXeh2uTN3fl9aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzNzBhOGMtN2UzOS00OTBkLTk4NWEtYTQ3OGNlNTQ0 NTlmMB4XDTI0MTAxMTE4NDI0NloXDTI1MDEwOTE5NDI0NlowLzEtMCsGA1UEAxMk YTdkZjk5NTYtZWU2ZS00Y2FjLWIyMzUtMDNhNzc0NjFjNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp55LLnO3JFKeya9bUwKfrYcU1ygYxrODwsk NStedRNV66bBZeYqnUxhI+xHgGkZTCGTiplIIVMIX+944+cyIU4RJlbWuzJIl3EL PpCCQUI2OAdETh2yX9oxrET0CA8s5OZHt1z4fwgQ76NrDqm1x/oVpNDLMLoHAcFG HQyQdcBCS7utue6gZdiH8tbBWNUj8kLGvz0Qi5MWD1qacbopejz121ChvJQFaRmm GidIYTrO41Kb9dNHsLw8YWsa7T+CU7ir2cHbf6PlOSWFMI/PFSKmo2jN6o6fQM7Y bNb3t5JpdHlkSRSm95tPDuyP1v862e6wLZARERtzwNsGd8eo+QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKuCtCVCbEJDhfPCQDA6sQMUC1O9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3 MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4Y2U1NDQ1OWYvNWM4MGEwOGMtZTQ5ZC0z M2Y0LWI2MTctNWFkYTVmMmFmODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTMzNzBhOGMtN2UzOS00OTBkLTk4 NWEtYTQ3OGNlNTQ0NTlmL2UzMzcwYThjLTdlMzktNDkwZC05ODVhLWE0NzhjZTU0 NDU5Zi5jcmwwHwYDVR0jBBgwFoAU4uoLRS/p/vRebN8XfsgDYlxFUiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMzM3MGE4Yy03ZTM5LTQ5MGQtOTg1YS1hNDc4 Y2U1NDQ1OWYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHR+8YD BAXR+8AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAN2g67pgMJ25hV+8/F1tUrCuxZWMsNhBYY64sir5IaJ90 YaG0Kl8ci2CLxeljm/ntAwrpQRQgrAP2gxLJVaSXrOYU/aUboM61kmI6Z3VRUfxl zW6BOEv+R2WrAxJO9PAnVhpEvhp7+fD8VUMfFVVOdu7AOIIAv+g1DLFssEDgy9r2 Rlyg34hMOz1y1jKo7fFkk/C1y8zXYT3i38VjbIdTF8WsquZT7aGkwK+FwGZEoy73 +mYZUjPYqY1NZREO7OBy16KgTnEPoIpwbfEPGfszueYcIeyhgXWRI70zB+VXwHNP LJvTZEerN96Dk+0V8XhefVvfny3yl9S/86BtiRs/uA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org