$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa File: b2cfa53d-a932-3912-aadb-d09c12415290.roa (raw, json) Hash identifier: ebUA81YW5Zj15eyK48KbQI57U6VC9IeYXUtvWvvdsOo= Subject key identifier: F3:52:1B:AC:7B:8A:40:CC:DF:D3:8A:16:F7:20:55:70:AE:A9:94:80 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285847A73BE7D97BD3ACEE1A865E40 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 271 IP address blocks: 209.87.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e7:d9:7b:d3:ac:ee:1a:86:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=2023ef90-9ff8-419d-a7c5-e964f3c07dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:54:26:72:fc:85:ec:e2:b9:28:1e:35:7b:e1: 27:d9:55:ec:a8:89:76:c3:8f:b5:31:9a:ae:73:3c: 5f:b0:8b:1e:5b:21:02:8e:f8:71:08:07:db:92:93: be:42:79:84:13:ce:bb:6d:c6:6e:13:33:a6:3a:64: db:f1:f9:f7:aa:04:95:9d:42:3d:93:66:a2:93:c6: f9:9c:da:ca:73:ce:e4:6e:ee:e3:73:06:5e:d5:54: ed:d2:f7:60:69:10:58:78:50:a7:f3:14:d7:fd:28: 80:ac:23:4b:1e:a1:af:07:20:09:61:87:47:8c:24: 57:b3:6e:11:bc:81:de:b6:39:a7:40:af:49:80:49: 8c:b3:3f:81:0d:5d:43:b7:9d:ec:bf:56:47:66:44: c8:92:69:df:ce:fe:d7:2c:b1:8d:a5:0a:47:9d:8f: 06:fa:55:fe:7c:99:3f:9d:17:c3:9a:47:cb:13:68: 13:25:d7:91:4b:7a:2b:bc:30:15:74:75:5b:9f:61: 58:06:5b:3f:c6:7d:9f:a3:1e:43:19:c2:0f:b4:ac: 7d:b5:39:1a:ec:92:c0:59:22:f0:c6:17:5c:b0:d4: bc:8c:70:05:0c:50:05:3a:63:1d:68:e1:4b:ea:54: 67:8d:10:e4:d1:3d:38:83:ba:c1:e5:ec:a0:fa:00: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:1B:AC:7B:8A:40:CC:DF:D3:8A:16:F7:20:55:70:AE:A9:94:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b2cfa53d-a932-3912-aadb-d09c12415290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:af:be:af:1e:e8:b9:86:2a:25:95:d9:bf:8e:d4:38:a6:ac: 5c:60:7c:54:30:e7:05:8c:1a:58:9a:2e:13:43:3c:ab:92:93: cd:0b:69:b2:43:a5:13:8b:e2:89:7b:e9:53:53:84:07:4a:e5: 35:3a:cf:96:d1:6c:79:e7:28:42:ae:c1:78:54:14:f2:da:af: 9f:b3:ed:fc:63:4a:6e:ed:2b:9c:b4:c6:4b:c0:b0:6a:4a:54: a4:8d:14:ee:03:06:bf:dc:04:41:8a:42:80:47:d0:e3:72:50: 6d:94:30:b0:f4:32:68:53:fd:67:10:2e:ad:ab:25:f0:2c:34: be:94:b6:ed:18:18:d2:6c:7d:a6:99:bd:9d:f6:7f:10:c7:e6: 7c:f1:ed:34:1b:3e:5a:aa:ec:3a:9b:ca:f1:1c:c1:ca:6c:c4: 71:0b:28:15:d0:19:74:9d:9e:d0:3e:f8:c2:99:44:f1:21:85: b9:91:db:40:dd:8f:47:64:74:49:bc:ec:6a:15:d3:41:97:34: 25:53:98:f6:53:2f:dc:26:50:75:28:52:8e:57:31:31:17:e0: 04:f9:25:db:23:8a:b0:11:7e:f5:0d:ff:2f:c0:43:92:b3:ec: f2:ff:3f:8f:62:02:5b:e9:52:08:1e:3b:6d:0f:79:87:cd:fb: 75:92:d7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+fZe9Os7hqGXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MjAyM2VmOTAtOWZmOC00MTlkLWE3YzUtZTk2NGYzYzA3ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglQmcvyF7OK5KB41e+En2VXsqIl2w4+1MZqu czxfsIseWyECjvhxCAfbkpO+QnmEE867bcZuEzOmOmTb8fn3qgSVnUI9k2aik8b5 nNrKc87kbu7jcwZe1VTt0vdgaRBYeFCn8xTX/SiArCNLHqGvByAJYYdHjCRXs24R vIHetjmnQK9JgEmMsz+BDV1Dt53sv1ZHZkTIkmnfzv7XLLGNpQpHnY8G+lX+fJk/ nRfDmkfLE2gTJdeRS3orvDAVdHVbn2FYBls/xn2fox5DGcIPtKx9tTka7JLAWSLw xhdcsNS8jHAFDFAFOmMdaOFL6lRnjRDk0T04g7rB5eyg+gBdswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNSG6x7ikDM39OKFvcgVXCuqZSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjJjZmE1M2QtYTkzMi0z OTEyLWFhZGItZDA5YzEyNDE1MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCvvq8e6LmGKiWV2b+O1DimrFxgfFQw5wWMGliaLhNDPKuSk80LabJD pROL4ol76VNThAdK5TU6z5bRbHnnKEKuwXhUFPLar5+z7fxjSm7tK5y0xkvAsGpK VKSNFO4DBr/cBEGKQoBH0ONyUG2UMLD0MmhT/WcQLq2rJfAsNL6Utu0YGNJsfaaZ vZ32fxDH5nzx7TQbPlqq7DqbyvEcwcpsxHELKBXQGXSdntA++MKZRPEhhbmR20Dd j0dkdEm87GoV00GXNCVTmPZTL9wmUHUoUo5XMTEX4AT5JdsjirARfvUN/y/AQ5Kz 7PL/P49iAlvpUggeO20PeYfN+3WS12c= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org