$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa File: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (raw, json) Hash identifier: Tl1P/sz8M9Ta++x/hUZB2nTqsDkJ/PP1SdU52HeM4Ao= Subject key identifier: 45:F8:44:E0:80:B3:C9:7A:23:1E:71:0C:A3:27:9F:82:14:BF:28:F3 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584769D0DD2771DBAA6FDDC2C680 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 18587 IP address blocks: 204.209.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:dd:27:71:db:aa:6f:dd:c2:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=2e912131-b9a8-41da-b7c3-fde948f987ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:af:57:54:83:af:ac:2e:5c:9b:05:c9:2c: 89:0b:d1:47:80:38:0a:ea:d8:14:8c:c0:b5:43:02: d3:cd:94:c2:38:db:cf:ee:4a:65:c7:7b:4e:9a:4b: 0a:2b:0b:9b:6c:5b:6b:39:cd:01:c4:85:db:bd:7b: f5:7e:f9:55:95:bc:9a:b2:bc:fe:16:45:4d:f9:ef: 81:0b:fc:5a:06:5f:70:e1:82:8d:ca:de:70:ce:23: d8:4b:4b:21:33:d8:3b:cf:60:3a:23:6d:2e:a2:85: ea:fd:94:ee:e0:e7:87:1b:85:87:e4:ea:f0:7b:c6: df:ae:10:71:bb:bc:92:3d:62:5a:04:72:f9:a4:80: 1f:23:31:f4:fe:7f:2e:da:a3:8f:f0:e3:a8:d2:1a: 0f:ad:59:cc:76:92:80:9f:83:bf:3d:db:aa:e6:35: d9:a5:8a:b0:5b:67:60:7b:7a:43:d1:2c:6b:5c:29: 33:f1:8c:e8:a2:f6:01:f1:73:2f:f5:56:72:3d:f1: 72:ea:c3:72:f1:ff:07:f5:b9:6c:f6:39:39:dd:fc: 70:48:59:e6:9a:c7:23:86:5b:b0:2a:be:5d:91:16: 0d:f3:90:40:9a:5f:0b:37:9e:b5:f8:a6:11:d8:07: d3:cd:f1:47:64:c4:74:d0:a4:d7:00:c5:7a:17:fb: 39:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F8:44:E0:80:B3:C9:7A:23:1E:71:0C:A3:27:9F:82:14:BF:28:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c8:4f:31:7e:f6:c8:14:35:c2:d5:04:9e:b0:42:e5:21:29: 46:35:1c:1f:c3:78:43:28:fd:8f:ca:30:88:91:a0:26:58:43: 49:a5:76:94:97:23:04:17:06:77:55:b2:08:51:59:a5:81:5f: 76:87:65:5a:79:3a:44:fd:c2:b1:f4:ca:e6:a7:4b:78:a1:e6: 13:8e:4c:93:08:87:cb:2b:07:36:7c:40:e6:ed:01:df:5a:6c: 9f:b7:a8:6a:98:c9:e1:10:dc:3d:11:61:ae:59:0e:d0:ed:07: b8:07:6e:97:bc:d5:3c:3a:6a:43:eb:11:0f:b8:bc:85:30:95: 46:d2:43:44:3e:08:3e:a3:9c:6f:5d:35:57:78:4a:55:b7:ab: a5:ad:7d:d6:2b:57:1c:7d:9c:9f:82:96:cc:1b:b3:25:60:a3: 19:aa:1b:9d:43:d4:9b:28:32:39:5c:ae:db:de:22:d1:3c:8e: 9c:c3:e8:33:c7:2d:7c:53:80:63:2d:c4:5c:43:b1:f8:e7:ef: d3:30:20:17:d1:53:16:ac:4e:92:48:2a:c5:97:4d:95:d3:d0: 60:ee:b8:35:8e:11:bf:8e:29:1d:5a:d7:24:c1:51:c6:53:48: cb:ac:c6:9e:f5:7d:35:d6:e4:20:d3:39:42:09:99:40:06:7a: fe:40:83:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0N0ncduqb93CxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk MmU5MTIxMzEtYjlhOC00MWRhLWI3YzMtZmRlOTQ4Zjk4N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulKvV1SDr6wuXJsFySyJC9FHgDgK6tgUjMC1 QwLTzZTCONvP7kplx3tOmksKKwubbFtrOc0BxIXbvXv1fvlVlbyasrz+FkVN+e+B C/xaBl9w4YKNyt5wziPYS0shM9g7z2A6I20uooXq/ZTu4OeHG4WH5Orwe8bfrhBx u7ySPWJaBHL5pIAfIzH0/n8u2qOP8OOo0hoPrVnMdpKAn4O/Pduq5jXZpYqwW2dg e3pD0SxrXCkz8YzoovYB8XMv9VZyPfFy6sNy8f8H9bls9jk53fxwSFnmmscjhluw Kr5dkRYN85BAml8LN561+KYR2AfTzfFHZMR00KTXAMV6F/s5VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEX4ROCAs8l6Ix5xDKMnn4IUvyjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMmIyYWMxMWItZTQ4ZS0z ZDdiLWJiNDctNzRiODgyOTg2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3ITzF+9sgUNcLVBJ6wQuUhKUY1HB/DeEMo/Y/KMIiRoCZYQ0mldpSX IwQXBndVsghRWaWBX3aHZVp5OkT9wrH0yuanS3ih5hOOTJMIh8srBzZ8QObtAd9a bJ+3qGqYyeEQ3D0RYa5ZDtDtB7gHbpe81Tw6akPrEQ+4vIUwlUbSQ0Q+CD6jnG9d NVd4SlW3q6WtfdYrVxx9nJ+ClswbsyVgoxmqG51D1JsoMjlcrtveItE8jpzD6DPH LXxTgGMtxFxDsfjn79MwIBfRUxasTpJIKsWXTZXT0GDuuDWOEb+OKR1a1yTBUcZT SMusxp71fTXW5CDTOUIJmUAGev5Ag4Y= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org