$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa File: a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (raw, json) Hash identifier: R0QAAl2ngpc0frzDiXRAeNrBGmGM0qm2Z3k2sBBE3eg= Subject key identifier: 7D:71:D0:E3:99:93:1E:3F:28:EA:47:28:02:3E:DE:EC:E2:0B:D6:06 Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584769D0DD15029C15FC360C23C0 Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 18587 IP address blocks: 204.209.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:dd:15:02:9c:15:fc:36:0c:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=c428c608-80b8-4767-8d98-ef7d47a1e939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:3c:41:a9:cd:d1:28:81:4e:51:5b:0a:46: 7a:b1:fe:b9:a6:38:a2:7b:bf:dd:7e:64:e4:8e:51: 19:1d:e1:28:f0:6d:f9:4f:b7:f2:3f:eb:5e:d3:d1: 09:69:4b:aa:28:73:db:0c:96:b8:31:a1:2a:b1:89: d9:92:37:a7:95:1b:0b:60:a7:da:32:ab:e5:e5:c2: 6e:c2:30:9c:86:64:da:c0:9c:23:b7:49:9c:9e:33: cb:0b:71:c0:5e:1f:52:bd:6c:29:72:4b:b8:5d:78: 5c:18:c6:86:1a:a8:51:0f:63:d9:d8:f8:f8:5f:38: 8f:35:65:aa:29:e0:5d:c9:ef:61:f9:99:b6:cb:8f: 68:ce:a3:bc:ea:36:6e:69:a5:59:39:f1:ae:4d:1e: a9:f9:7d:0b:fd:4a:bd:14:20:fe:0d:30:4c:9c:12: eb:09:7c:5b:2b:0c:dc:73:8f:3f:1b:1a:e4:12:d8: 8b:be:8e:56:f5:8c:60:e7:42:f4:db:7c:ea:6a:b2: da:0b:a4:5b:cd:ae:f0:70:cc:d3:28:26:af:28:66: a7:9a:02:80:c6:9e:08:f1:bc:ec:ed:f8:7e:e1:12: e5:b0:7a:0d:c1:75:25:54:5e:1a:41:12:43:88:8e: de:21:58:c1:ac:ed:30:4d:84:ff:02:c1:fe:d0:b3: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:71:D0:E3:99:93:1E:3F:28:EA:47:28:02:3E:DE:EC:E2:0B:D6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: 204.209.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:2d:a9:d0:43:1f:ea:49:8c:a2:c0:bc:30:94:d0:7c:c3:38: 57:13:d1:61:0d:db:45:17:56:6a:1c:b5:2d:72:fb:56:4b:92: 78:61:72:bd:04:1b:07:be:4c:a6:12:bc:a4:64:5e:30:04:70: 16:6e:39:48:be:c3:04:6e:9d:6a:31:9e:b5:6d:f4:0c:ef:6e: bf:4a:3f:8d:4a:56:60:c9:30:fd:fe:54:0b:c0:74:0d:2e:fa: f1:c6:c2:8a:9e:33:79:7c:5a:5b:99:e2:f7:dd:93:b5:14:48: 2d:2d:1a:ad:e6:20:7d:6d:b2:a9:fa:56:7b:eb:43:ad:3e:88: 5f:f7:22:9a:83:e3:f7:f4:ea:f9:bb:d3:46:d7:19:d8:98:91: 1b:54:16:bf:a5:b6:90:16:4f:15:31:b0:ba:94:92:20:64:3f: 6e:23:a9:f3:4e:70:d8:0d:14:e2:20:4c:64:91:8b:0b:fb:60: b5:be:57:26:bc:89:43:66:6f:b2:6e:33:83:a7:f6:ad:49:49: 7f:87:bd:ad:e5:dc:3b:0b:9d:20:a3:ad:b2:8c:43:c4:ac:16: 9c:59:7a:33:b7:af:6f:c7:c7:a1:c5:1c:b6:ad:e2:5a:74:af: 27:0f:e7:54:9a:84:b0:ea:bb:d2:cb:18:aa:b5:22:fc:86:43: 28:c1:ce:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0N0VApwV/DYMI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk YzQyOGM2MDgtODBiOC00NzY3LThkOTgtZWY3ZDQ3YTFlOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV48QanN0SiBTlFbCkZ6sf65pjiie7/dfmTk jlEZHeEo8G35T7fyP+te09EJaUuqKHPbDJa4MaEqsYnZkjenlRsLYKfaMqvl5cJu wjCchmTawJwjt0mcnjPLC3HAXh9SvWwpcku4XXhcGMaGGqhRD2PZ2Pj4XziPNWWq KeBdye9h+Zm2y49ozqO86jZuaaVZOfGuTR6p+X0L/Uq9FCD+DTBMnBLrCXxbKwzc c48/GxrkEtiLvo5W9Yxg50L023zqarLaC6Rbza7wcMzTKCavKGanmgKAxp4I8bzs 7fh+4RLlsHoNwXUlVF4aQRJDiI7eIVjBrO0wTYT/AsH+0LO8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1x0OOZkx4/KOpHKAI+3uziC9YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvYTFmNmQ0OTktNGY5Ny0z ZTk2LWIzM2UtYWRiOGJhNzk2ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALItqdBDH+pJjKLAvDCU0HzDOFcT0WEN20UXVmoctS1y+1ZLknhhcr0E Gwe+TKYSvKRkXjAEcBZuOUi+wwRunWoxnrVt9Azvbr9KP41KVmDJMP3+VAvAdA0u +vHGwoqeM3l8WluZ4vfdk7UUSC0tGq3mIH1tsqn6VnvrQ60+iF/3IpqD4/f06vm7 00bXGdiYkRtUFr+ltpAWTxUxsLqUkiBkP24jqfNOcNgNFOIgTGSRiwv7YLW+Vya8 iUNmb7JuM4On9q1JSX+Hva3l3DsLnSCjrbKMQ8SsFpxZejO3r2/Hx6HFHLat4lp0 rycP51SahLDqu9LLGKq1IvyGQyjBzmg= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org