$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa File: 757c630c-1704-3fb8-b8aa-a6f536633ed2.roa (raw, json) Hash identifier: k3193+zTytxSNCGGF8UVJ0hiptUAOe8/OBXuD40H+yI= Subject key identifier: A0:5A:C1:C0:C8:44:1B:7E:72:4B:4D:B9:F9:84:BB:B5:97:77:6F:35 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F432858477661089D2FA3C22D64DF0120 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 8075 IP address blocks: 209.51.100.0/24 maxlen: 24 209.51.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:08:9d:2f:a3:c2:2d:64:df:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=bb817e99-87cb-4001-b064-97d9bbe8f8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:70:d2:5d:ae:9a:72:54:cd:d7:7f:c4:18: fa:15:fb:79:4e:cc:a6:91:dc:8a:af:2c:89:77:cf: 5a:22:e2:d8:89:85:4a:95:6b:a0:d3:d3:a9:f0:a8: b9:2b:3e:c9:e2:6f:38:64:2c:fb:61:f0:ac:66:e5: 2d:74:68:56:c1:ed:16:36:77:d4:37:d3:72:f9:5e: 19:d1:69:21:e3:4c:e4:ef:66:94:27:bb:9e:9c:9c: a3:0b:bb:5f:52:11:d6:c8:49:c8:a9:4a:ef:ad:93: 20:69:f0:27:a3:1a:64:f0:6a:8e:d5:3a:fd:38:ad: 41:fd:14:dd:90:28:2a:b0:05:3b:98:b5:ea:a3:76: a2:e1:37:87:84:3f:e0:d1:11:f1:20:5d:9f:7f:c1: 21:2e:91:ab:67:f6:f6:d0:a4:fb:7d:88:32:44:76: 67:f3:d1:47:7d:9b:66:67:69:4e:d0:ca:76:6c:14: 99:7b:78:38:42:a5:cc:3e:67:6c:4b:99:c7:e8:d6: 2e:3d:e0:0f:98:b8:b9:a9:ad:89:8c:64:0b:09:62: 09:18:3f:4b:6f:c5:16:9c:9a:7c:d4:31:41:63:94: cc:32:ae:04:70:00:8c:4c:20:cf:c7:a7:27:b9:3c: fe:e6:f3:8f:97:66:d9:76:08:77:ea:54:e8:af:4b: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5A:C1:C0:C8:44:1B:7E:72:4B:4D:B9:F9:84:BB:B5:97:77:6F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: 209.51.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d4:0e:86:bf:64:e8:e0:e8:72:f5:5d:0c:f0:21:c1:d5:e0: f9:20:54:a5:d6:3c:fe:27:67:05:90:7c:83:f1:7b:d2:e8:a3: 14:aa:a6:07:ec:69:38:38:0c:7a:a7:3f:39:27:ae:53:aa:72: 97:f1:d2:4e:9e:bf:a4:e9:4e:75:c5:16:6f:1b:01:96:b2:e1: fd:34:f2:9d:3a:07:e7:34:7b:4a:b5:e7:79:0d:b9:7e:37:5c: 25:46:ae:ed:c1:50:b1:f5:83:a3:ce:62:f6:90:46:3e:b7:24: 5d:99:67:6c:a5:6f:e5:d9:d1:2c:f0:ab:24:54:3b:26:73:e3: 1c:b9:16:10:b7:02:85:bf:6b:41:6f:95:1d:da:db:0c:c1:3d: 4d:c7:a0:ae:54:3b:01:21:ba:5e:f9:ff:6a:63:55:21:2d:76: 36:bc:cf:6c:58:fa:ff:31:88:b5:68:28:8d:c2:d0:13:5a:cf: 37:e0:f2:3e:30:b9:2b:e8:19:b8:b9:82:7e:e8:d2:7c:82:7b: f9:80:7f:34:e2:b7:f5:a3:0a:5b:47:3c:99:0d:84:0d:fb:f3: b0:f6:15:bc:3d:2b:ce:ea:4d:52:6d:51:21:78:10:62:a2:03: 12:75:47:00:a7:00:b1:91:17:37:73:59:b9:54:d9:70:5e:07: 92:45:1d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQidL6PCLWTfASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YmI4MTdlOTktODdjYi00MDAxLWIwNjQtOTdkOWJiZThmOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl9w0l2umnJUzdd/xBj6Fft5TsymkdyKryyJ d89aIuLYiYVKlWug09Op8Ki5Kz7J4m84ZCz7YfCsZuUtdGhWwe0WNnfUN9Ny+V4Z 0Wkh40zk72aUJ7uenJyjC7tfUhHWyEnIqUrvrZMgafAnoxpk8GqO1Tr9OK1B/RTd kCgqsAU7mLXqo3ai4TeHhD/g0RHxIF2ff8EhLpGrZ/b20KT7fYgyRHZn89FHfZtm Z2lO0Mp2bBSZe3g4QqXMPmdsS5nH6NYuPeAPmLi5qa2JjGQLCWIJGD9Lb8UWnJp8 1DFBY5TMMq4EcACMTCDPx6cnuTz+5vOPl2bZdgh36lTor0s0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBawcDIRBt+cktNufmEu7WXd281MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvNzU3YzYzMGMtMTcwNC0z ZmI4LWI4YWEtYTZmNTM2NjMzZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbUDoa/ZOjg6HL1XQzwIcHV4PkgVKXWPP4nZwWQfIPxe9LooxSqpgfs aTg4DHqnPzknrlOqcpfx0k6ev6TpTnXFFm8bAZay4f008p06B+c0e0q153kNuX43 XCVGru3BULH1g6POYvaQRj63JF2ZZ2ylb+XZ0SzwqyRUOyZz4xy5FhC3AoW/a0Fv lR3a2wzBPU3HoK5UOwEhul75/2pjVSEtdja8z2xY+v8xiLVoKI3C0BNazzfg8j4w uSvoGbi5gn7o0nyCe/mAfzTit/WjCltHPJkNhA3787D2Fbw9K87qTVJtUSF4EGKi AxJ1RwCnALGRFzdzWblU2XBeB5JFHZk= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org