$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa File: 40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa (raw, json) Hash identifier: qdAhZ0g8z2328mZTMRhov0aTw9FCKyH1gBlSJTN0Nz4= Subject key identifier: 76:C6:4B:48:5C:89:CE:92:BD:C7:C1:48:19:AB:29:06:10:63:54:B2 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285847A73BE7C82640FF5C910F13C0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 271 IP address blocks: 209.87.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e7:c8:26:40:ff:5c:91:0f:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=456f8e21-9e12-48e3-b49b-13a061dcf1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:43:29:25:69:41:b6:e8:44:8e:9c:b9:b6: ee:55:ff:ea:1b:8b:f0:fe:48:98:bc:80:1d:9e:4b: 83:57:68:a4:e1:5e:8a:2f:98:6e:b5:2d:67:01:de: b8:7f:d6:5e:a6:b7:78:8e:61:cc:4f:33:01:9e:c1: db:d4:94:40:18:7b:14:53:60:ea:99:46:70:b2:0c: 36:8e:6a:1c:98:44:97:5b:cb:43:58:ce:70:92:61: 92:03:b7:6a:0b:f7:e2:bb:f6:07:0e:27:a3:9e:e6: 92:da:9c:54:80:47:0b:1c:9d:11:e6:f7:75:90:9f: 24:1e:4d:08:88:96:57:ad:64:8b:c3:16:52:54:99: e4:82:c3:6e:9d:2d:84:84:3e:40:42:b7:bd:fb:ec: fc:32:97:32:f4:eb:0e:3c:47:35:e8:9f:d1:23:de: 23:0f:2c:b1:2b:94:cd:25:6f:5c:f8:06:c2:9d:fb: 2f:54:7d:c5:b7:87:54:25:a8:ea:cd:4c:42:8c:30: a4:88:17:cd:18:0b:b0:4b:47:ad:5e:eb:b2:98:68: ae:eb:a4:ae:2a:76:30:c4:0e:72:c9:64:82:dd:21: 75:1b:35:3c:03:ac:5f:4f:82:80:22:fb:69:58:eb: 6d:67:95:da:04:48:b1:43:79:6a:52:49:03:29:ab: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C6:4B:48:5C:89:CE:92:BD:C7:C1:48:19:AB:29:06:10:63:54:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/40df0d8c-78eb-39e8-80b9-dfebb173d0bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:18:a7:1a:c1:b7:1a:93:73:a1:c3:44:8f:8f:c3:74:30:01: 7e:87:27:6e:d2:ea:a9:05:24:36:6c:c2:eb:d5:ce:7f:fe:31: 93:df:66:49:fe:cf:2d:f2:6a:49:57:d7:20:95:2c:cb:5a:e1: a1:a0:1b:48:bd:ce:d2:e3:b1:4e:f1:9a:e8:37:35:f0:90:40: e1:a4:35:d9:5f:b6:05:54:58:8e:01:70:05:71:67:3c:60:c8: 8f:b1:76:b6:d6:e2:65:cf:e7:eb:8c:ba:8c:ff:f2:ed:c6:99: a5:fd:db:6e:0c:5b:4e:4c:4c:ab:40:87:32:07:c0:ae:5c:b5: 94:15:5e:5f:7a:2c:08:03:d9:ae:7c:c2:a2:85:c0:28:ad:03: 52:73:28:7a:30:67:6d:9c:39:d0:63:ce:c2:1e:0a:bf:a5:56: f9:55:60:46:f4:9b:83:3d:05:d4:9d:d2:7d:cf:de:36:f3:57: 72:48:76:f0:bd:aa:0d:c5:49:0f:b0:b7:19:0c:8e:79:32:d9: c6:bc:4f:b0:e3:14:4d:ab:6d:82:cf:b6:c4:5c:1d:b9:d8:c1: 9a:7f:78:b2:e9:9e:e6:6d:70:47:f8:70:a4:3b:d3:df:3a:c3: f3:60:95:1f:e5:3f:7d:17:4f:2f:ea:be:1e:7d:d8:6d:95:56: 87:bf:d5:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+fIJkD/XJEPE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NDU2ZjhlMjEtOWUxMi00OGUzLWI0OWItMTNhMDYxZGNmMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhelDKSVpQbboRI6cubbuVf/qG4vw/kiYvIAd nkuDV2ik4V6KL5hutS1nAd64f9Zeprd4jmHMTzMBnsHb1JRAGHsUU2DqmUZwsgw2 jmocmESXW8tDWM5wkmGSA7dqC/fiu/YHDiejnuaS2pxUgEcLHJ0R5vd1kJ8kHk0I iJZXrWSLwxZSVJnkgsNunS2EhD5AQre9++z8Mpcy9OsOPEc16J/RI94jDyyxK5TN JW9c+AbCnfsvVH3Ft4dUJajqzUxCjDCkiBfNGAuwS0etXuuymGiu66SuKnYwxA5y yWSC3SF1GzU8A6xfT4KAIvtpWOttZ5XaBEixQ3lqUkkDKav8IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbGS0hcic6SvcfBSBmrKQYQY1SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDBkZjBkOGMtNzhlYi0z OWU4LTgwYjktZGZlYmIxNzNkMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwYpxrBtxqTc6HDRI+Pw3QwAX6HJ27S6qkFJDZswuvVzn/+MZPfZkn+ zy3yaklX1yCVLMta4aGgG0i9ztLjsU7xmug3NfCQQOGkNdlftgVUWI4BcAVxZzxg yI+xdrbW4mXP5+uMuoz/8u3GmaX9224MW05MTKtAhzIHwK5ctZQVXl96LAgD2a58 wqKFwCitA1JzKHowZ22cOdBjzsIeCr+lVvlVYEb0m4M9BdSd0n3P3jbzV3JIdvC9 qg3FSQ+wtxkMjnky2ca8T7DjFE2rbYLPtsRcHbnYwZp/eLLpnuZtcEf4cKQ70986 w/NglR/lP30XTy/qvh592G2VVoe/1bs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org