$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json) Hash identifier: LPsg7VyIiNyZJd9QW2OOqujCv7AwlFTAPABKWH6km7Y= Subject key identifier: 44:E2:43:64:E0:7A:06:CE:E8:31:02:89:62:0D:5E:2B:9C:80:3A:54 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F43285847C8D9E85461966773892EE880 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 8075 IP address blocks: 209.143.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e8:54:61:96:67:73:89:2e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=ab07abe7-7397-40aa-adf1-821269e4feec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:e7:51:c3:a4:29:ce:62:76:e1:0a:60:85: 82:35:9c:f6:06:dc:f8:4e:c6:dc:23:f7:47:0c:93: a3:d8:74:c1:d4:82:14:7a:99:c0:f1:9f:f1:26:4f: bc:c2:14:d5:04:14:70:22:e7:4a:3f:64:04:05:3c: ef:6f:a9:c4:fe:da:8d:60:a7:7f:92:db:d3:13:5b: a7:08:0c:82:45:63:49:70:c8:14:6b:83:17:cb:40: 14:ba:4f:3a:9d:f3:70:9b:08:3b:c5:df:2b:e0:3c: b2:02:ac:6e:ac:9f:24:51:7c:0e:a2:45:91:54:7c: 8d:96:be:42:84:a1:05:0d:b4:52:47:4a:b2:1e:c3: 0d:ac:17:57:8b:77:18:23:32:35:e5:d7:da:1b:48: 5c:51:41:f6:81:1f:21:90:84:21:9b:d0:a0:59:68: f6:e5:0d:42:5a:95:a9:c7:a7:2a:74:0a:d1:9d:5b: 4c:af:27:a9:33:c4:71:36:56:7c:70:74:4e:57:24: 85:a7:d3:94:d3:b9:57:03:65:14:8f:ef:a2:37:b3: e3:c3:9b:66:7f:c9:da:20:dc:7d:23:5b:b2:2b:33: 80:24:31:8e:05:31:fd:9d:bc:fb:ad:5b:e0:62:7d: 82:e7:9e:79:37:2a:43:3a:ac:45:76:b7:04:d5:7a: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E2:43:64:E0:7A:06:CE:E8:31:02:89:62:0D:5E:2B:9C:80:3A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b8:2f:a2:c1:b3:03:ef:df:a5:b9:a6:e1:91:3a:ca:3e:43: 81:d7:a6:66:35:21:24:96:e1:a5:08:96:7b:0e:df:a2:76:7f: da:e7:85:a1:dd:de:19:90:a3:61:19:ae:df:44:ec:8a:be:86: 50:99:a2:bc:e2:76:bc:f4:0a:62:ff:6a:fd:0c:46:63:76:23: b9:14:18:e8:f2:cb:9a:6d:1d:03:51:4d:4e:1e:64:8e:00:7f: ed:69:c3:a1:56:56:d3:01:d3:2f:1b:85:79:f3:d5:c9:e8:d5: 33:ee:2b:d7:60:a9:48:77:2f:c4:c3:fb:7a:42:61:ff:db:81: 4f:88:6b:56:31:d5:21:be:71:cf:fd:d2:e8:49:9e:d1:6c:f0: ee:50:1f:88:c9:fc:8a:92:17:8c:a1:fe:95:7a:94:7e:49:53: 59:21:db:ea:cc:92:01:e6:f0:e5:85:f1:67:c8:21:f3:07:13: 79:3f:ba:7e:bb:74:aa:e5:2a:dd:58:2d:e6:5a:0b:12:29:26: 3b:df:c1:75:57:ca:33:17:0d:df:6c:72:97:e9:02:a9:fb:50: 30:9d:f4:29:f2:36:66:13:48:9b:38:a3:de:0e:9c:e5:1d:8a: 40:6a:af:65:d0:98:4f:0d:e8:b5:c6:5a:96:60:e4:65:e9:52: 99:aa:de:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2ehUYZZnc4ku6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk YWIwN2FiZTctNzM5Ny00MGFhLWFkZjEtODIxMjY5ZTRmZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNnnUcOkKc5iduEKYIWCNZz2Btz4TsbcI/dH DJOj2HTB1IIUepnA8Z/xJk+8whTVBBRwIudKP2QEBTzvb6nE/tqNYKd/ktvTE1un CAyCRWNJcMgUa4MXy0AUuk86nfNwmwg7xd8r4DyyAqxurJ8kUXwOokWRVHyNlr5C hKEFDbRSR0qyHsMNrBdXi3cYIzI15dfaG0hcUUH2gR8hkIQhm9CgWWj25Q1CWpWp x6cqdArRnVtMryepM8RxNlZ8cHROVySFp9OU07lXA2UUj++iN7Pjw5tmf8naINx9 I1uyKzOAJDGOBTH9nbz7rVvgYn2C5555NypDOqxFdrcE1XosYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETiQ2TgegbO6DECiWINXiucgDpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMWE3MDRkMWMtNGU3OS0z Y2ZiLWIzM2YtZjczMjVhNWE3ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS4L6LBswPv36W5puGROso+Q4HXpmY1ISSW4aUIlnsO36J2f9rnhaHd 3hmQo2EZrt9E7Iq+hlCZorzidrz0CmL/av0MRmN2I7kUGOjyy5ptHQNRTU4eZI4A f+1pw6FWVtMB0y8bhXnz1cno1TPuK9dgqUh3L8TD+3pCYf/bgU+Ia1Yx1SG+cc/9 0uhJntFs8O5QH4jJ/IqSF4yh/pV6lH5JU1kh2+rMkgHm8OWF8WfIIfMHE3k/un67 dKrlKt1YLeZaCxIpJjvfwXVXyjMXDd9scpfpAqn7UDCd9CnyNmYTSJs4o94OnOUd ikBqr2XQmE8N6LXGWpZg5GXpUpmq3mY= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org