$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa File: 40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json) Hash identifier: CxnG+UWxotl7/h5OkbAE8pixYBp5x11cB/cWUYj4Xn8= Subject key identifier: 2C:AE:D3:C2:F4:81:B0:7E:20:C0:73:34:E5:1E:36:16:00:A1:EA:15 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285847CE6F34A215A6A35F9CBDEB40 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 30610 IP address blocks: 209.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:34:a2:15:a6:a3:5f:9c:bd:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=a010208f-3afc-4e1b-8885-e9bfbf6f6f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:82:0e:c9:84:17:93:4e:d0:c5:6d:cc:fe: 75:26:05:09:74:f1:18:35:0a:6c:fd:d5:ba:f0:36: 56:b5:a8:49:95:d0:7f:7c:e0:40:d3:52:27:83:cc: 4e:19:11:19:f3:ea:54:b8:f6:c8:8a:5a:de:08:78: 66:f7:e1:d4:a2:6b:63:67:ad:2c:8b:3b:dd:b5:05: 8f:ec:66:97:c5:3e:6c:9a:93:c8:53:5f:6b:a2:d7: f9:34:de:51:fc:43:c1:fc:ff:4e:4b:a1:8f:a9:f5: ed:66:7a:c9:bc:0c:e5:7f:07:86:24:60:d0:89:5b: 69:6b:98:7f:ea:f8:83:1f:77:8f:f0:28:03:e0:37: fd:4f:7c:63:23:84:f6:c1:45:c2:d6:47:15:e9:7a: dd:9a:fd:fb:e2:c0:6a:54:d4:ac:23:51:d4:71:a8: 63:6f:2d:99:d1:0b:7a:57:90:8c:24:c4:16:b0:1f: 45:4d:4a:05:ac:48:00:e9:d7:c3:fd:3b:c1:cf:80: 3d:d4:5d:1e:cb:5d:74:1f:84:5b:e7:c5:99:57:d1: 3a:7a:ad:60:78:a8:e5:46:a0:94:a3:4b:83:a6:3f: a5:90:4d:aa:e0:67:4b:56:87:8b:8e:ec:f9:54:5e: 73:79:9f:ab:71:a5:8c:6f:7a:ee:8c:ce:34:0b:d9: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:D3:C2:F4:81:B0:7E:20:C0:73:34:E5:1E:36:16:00:A1:EA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3f:14:3a:59:be:bf:8a:c8:bc:66:8d:47:95:27:e8:64:84: 17:7a:b1:7e:ac:49:97:f0:d3:17:83:7b:4a:ca:b8:b3:55:88: 86:d2:f7:67:22:b5:82:d4:75:4c:be:e2:4a:a9:5a:de:2c:67: e4:25:01:71:e3:4f:dd:d1:64:ea:01:fb:1f:15:43:e8:af:63: 68:3a:03:82:be:cc:16:b5:38:c7:68:1b:4f:17:55:6c:7e:43: af:b3:c4:e4:a1:8b:95:d3:1d:61:8c:01:2b:ee:b4:8d:28:27: c0:c3:d0:07:98:cb:46:0a:72:80:fe:90:13:cb:22:b2:f6:9f: f5:4f:40:c1:74:d4:57:6b:ef:98:2d:6c:9e:49:72:65:39:6a: ab:85:69:1c:53:af:20:3c:78:af:de:55:bb:19:fc:ca:bb:6c: 39:58:c5:89:5d:c8:be:62:90:c7:46:cf:2c:20:13:67:a6:4e: bb:9e:f0:85:ad:d9:38:52:6b:65:ad:cd:ce:1c:4c:2e:5b:dc: d7:a9:a7:16:fb:08:8c:0a:68:c0:6d:1a:ad:79:11:fb:3d:5c: dc:67:71:2d:31:fb:90:76:29:eb:29:a7:6c:31:c5:c0:21:a7: 96:0c:5f:8f:40:9d:57:7d:d5:65:eb:f8:39:8a:a9:95:af:e7: 1c:ad:86:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObzSiFaajX5y960AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk YTAxMDIwOGYtM2FmYy00ZTFiLTg4ODUtZTliZmJmNmY2ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxmCDsmEF5NO0MVtzP51JgUJdPEYNQps/dW6 8DZWtahJldB/fOBA01Ing8xOGREZ8+pUuPbIilreCHhm9+HUomtjZ60sizvdtQWP 7GaXxT5smpPIU19rotf5NN5R/EPB/P9OS6GPqfXtZnrJvAzlfweGJGDQiVtpa5h/ 6viDH3eP8CgD4Df9T3xjI4T2wUXC1kcV6Xrdmv374sBqVNSsI1HUcahjby2Z0Qt6 V5CMJMQWsB9FTUoFrEgA6dfD/TvBz4A91F0ey110H4Rb58WZV9E6eq1geKjlRqCU o0uDpj+lkE2q4GdLVoeLjuz5VF5zeZ+rcaWMb3rujM40C9m0VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyu08L0gbB+IMBzNOUeNhYAoeoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNDBkMzQ3OWQtYmI1Zi0z ODY5LTg0MjAtZmVlMDE5NGQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY/FDpZvr+KyLxmjUeVJ+hkhBd6sX6sSZfw0xeDe0rKuLNViIbS92ci tYLUdUy+4kqpWt4sZ+QlAXHjT93RZOoB+x8VQ+ivY2g6A4K+zBa1OMdoG08XVWx+ Q6+zxOShi5XTHWGMASvutI0oJ8DD0AeYy0YKcoD+kBPLIrL2n/VPQMF01Fdr75gt bJ5JcmU5aquFaRxTryA8eK/eVbsZ/Mq7bDlYxYldyL5ikMdGzywgE2emTrue8IWt 2ThSa2Wtzc4cTC5b3Neppxb7CIwKaMBtGq15Efs9XNxncS0x+5B2Kespp2wxxcAh p5YMX49AnVd91WXr+DmKqZWv5xythl8= -----END CERTIFICATE-----Generated at Fri Nov 22 17:31:29 2024 by rpki-client on console-ams.rpki-client.org