$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa File: 245081f2-effd-35ab-aee8-d10c19f48000.roa (raw, json) Hash identifier: C3PO1mgxAhDWj924tFuKGoKhPif08k2Ch1Xrw5M/0AI= Subject key identifier: 59:3F:A9:FA:BA:21:3C:1C:1A:AB:59:E3:E1:79:99:67:46:8C:7E:C0 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F43285847771E8DF91A608107089D9040 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa Signing time: Mon 07 Oct 2024 19:22:42 +0000 ROA not before: Mon 07 Oct 2024 19:22:42 +0000 ROA not after: Sun 05 Jan 2025 20:22:42 +0000 asID: 16509 IP address blocks: 209.51.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:1e:8d:f9:1a:60:81:07:08:9d:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Oct 7 19:22:42 2024 GMT Not After : Jan 5 20:22:42 2025 GMT Subject: CN=a3e3e7a0-4390-4742-87a4-b3e8d1a862fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:a5:92:3b:44:56:0d:cf:a0:f3:22:78:3b: 41:b7:29:fc:5e:48:3d:e2:bd:a5:5e:a1:c5:42:51: da:c8:23:05:9c:f1:b5:9a:08:84:cd:1d:2d:d6:7c: e2:f2:9e:a8:8e:7d:68:88:36:64:c8:87:25:33:0f: 3c:9f:38:71:49:5b:2c:f6:e5:3d:03:e3:87:91:ad: ee:41:88:93:74:b4:71:11:1a:e1:b4:e5:4e:dc:2d: 9a:aa:f2:36:30:ad:80:df:de:58:35:7f:81:6a:c0: 7b:25:30:dd:0f:4c:8d:f2:0a:bb:af:fa:a5:80:33: ff:da:88:8d:ac:25:5e:04:c7:ac:2e:fd:b1:87:66: fc:81:76:19:81:5b:14:20:a6:ff:8e:d8:0f:1b:ac: c4:4b:d6:c3:87:80:82:ba:a1:5c:57:f4:55:80:a9: 40:34:f6:22:03:64:6a:5b:fa:f7:04:6f:f3:e7:48: fb:48:ca:6a:73:74:36:86:4f:a0:22:74:c5:59:c5: f5:33:42:b6:ef:e9:41:e5:fc:cf:95:e8:9c:7e:d1: 33:67:83:19:fb:19:39:83:00:58:ca:90:10:7f:dd: 0e:fd:1d:cf:4a:38:ee:fa:67:39:f2:7b:13:7e:09: dd:47:76:a7:3b:11:ec:09:86:22:70:93:ab:8f:c3: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3F:A9:FA:BA:21:3C:1C:1A:AB:59:E3:E1:79:99:67:46:8C:7E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: 209.51.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9f:8c:87:5e:e3:93:a4:d6:45:0c:b7:0a:8c:c1:07:b8:40: d4:e8:59:9e:d7:fd:f0:53:1a:75:83:e5:b4:04:e9:53:f0:25: 79:9b:db:b2:be:81:d1:74:7a:2c:f2:f0:ee:28:c5:89:87:de: 1c:dc:b5:26:5c:35:65:7c:22:ed:23:6d:35:dd:f8:b7:74:8b: 0f:6d:1a:c3:29:45:64:14:ca:d3:98:94:00:4d:b9:f9:29:fe: b9:c7:e0:58:0f:df:3d:60:32:46:72:25:e3:91:54:55:df:7b: 12:d3:f0:45:4f:d4:a5:ed:6d:f3:e3:70:3f:a6:73:8e:be:d3: 1b:08:93:52:7c:ac:87:c7:04:07:c1:dc:41:ed:0e:95:93:aa: bf:c9:12:8b:08:d2:a9:2a:6a:5f:03:be:95:79:b0:2a:4c:28: ba:d8:5e:c5:3f:4d:0f:20:c4:29:7e:41:17:0b:44:00:07:60: 8c:3b:88:80:f1:d5:be:55:00:ae:52:63:19:af:eb:c1:17:40: 26:ff:7d:76:34:85:79:51:8c:3a:06:93:39:b5:4a:bc:5b:41: 79:2f:c4:9f:dd:3c:ad:b4:82:c0:32:af:5e:d1:65:f1:e6:44: f0:0d:58:98:66:f1:82:7b:b2:07:dc:a0:7c:9c:e1:a2:d5:b2: 78:a2:26:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3Ho35GmCBBwidkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI0MTAwNzE5MjI0MloXDTI1MDEwNTIwMjI0MlowLzEtMCsGA1UEAxMk YTNlM2U3YTAtNDM5MC00NzQyLTg3YTQtYjNlOGQxYTg2MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSylkjtEVg3PoPMieDtBtyn8Xkg94r2lXqHF QlHayCMFnPG1mgiEzR0t1nzi8p6ojn1oiDZkyIclMw88nzhxSVss9uU9A+OHka3u QYiTdLRxERrhtOVO3C2aqvI2MK2A395YNX+BasB7JTDdD0yN8gq7r/qlgDP/2oiN rCVeBMesLv2xh2b8gXYZgVsUIKb/jtgPG6zES9bDh4CCuqFcV/RVgKlANPYiA2Rq W/r3BG/z50j7SMpqc3Q2hk+gInTFWcX1M0K27+lB5fzPleicftEzZ4MZ+xk5gwBY ypAQf90O/R3PSjju+mc58nsTfgndR3anOxHsCYYicJOrj8Oe5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFk/qfq6ITwcGqtZ4+F5mWdGjH7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvMjQ1MDgxZjItZWZmZC0z NWFiLWFlZTgtZDEwYzE5ZjQ4MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJefjIde45Ok1kUMtwqMwQe4QNToWZ7X/fBTGnWD5bQE6VPwJXmb27K+ gdF0eizy8O4oxYmH3hzctSZcNWV8Iu0jbTXd+Ld0iw9tGsMpRWQUytOYlABNufkp /rnH4FgP3z1gMkZyJeORVFXfexLT8EVP1KXtbfPjcD+mc46+0xsIk1J8rIfHBAfB 3EHtDpWTqr/JEosI0qkqal8DvpV5sCpMKLrYXsU/TQ8gxCl+QRcLRAAHYIw7iIDx 1b5VAK5SYxmv68EXQCb/fXY0hXlRjDoGkzm1SrxbQXkvxJ/dPK20gsAyr17RZfHm RPANWJhm8YJ7sgfcoHyc4aLVsniiJjE= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org