$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa File: efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa (raw, json) Hash identifier: kzC6lqEwaonofgx9WnaLAR9zHuHBmnwQWrrJVHmzm4Q= Subject key identifier: A5:C6:2F:0B:5B:33:1D:05:CD:CE:85:B3:C6:59:D7:4E:8D:57:F5:C3 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285847CE6F3C13033D6C61F3C95578 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 40836 IP address blocks: 209.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:3c:13:03:3d:6c:61:f3:c9:55:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=e943df5e-8728-486d-8d39-44a3c5eb5a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:5b:be:79:7a:1f:1d:8f:d8:8e:ca:db:f2: 82:f8:90:d0:a6:81:c5:20:5d:52:4c:73:a1:59:fc: 9e:77:18:82:c4:17:31:00:50:c4:75:a4:7d:89:39: 9e:75:65:0b:45:dc:d0:b5:03:9d:d8:3f:ff:6b:da: b8:92:88:1e:30:02:ad:17:d0:e8:68:1b:da:29:75: 90:91:7b:fe:81:c9:2e:27:00:9a:c9:f1:32:cf:e6: 37:4d:91:33:64:a6:4e:dc:98:4c:b7:ee:91:cc:c7: 9f:54:e9:40:e9:a9:14:0e:67:47:00:40:f4:50:54: 39:9d:2f:45:7a:32:20:da:9c:e2:08:63:c7:b9:ab: 51:60:7f:14:44:49:e8:13:9d:0d:34:df:97:c1:06: 43:c0:a6:bc:64:16:c0:48:c8:82:6d:4e:78:54:61: 41:16:02:73:84:c9:74:c8:25:c0:ed:d1:ae:f6:7e: 3a:55:7e:d5:88:88:7c:85:f4:27:5f:cd:6f:bd:21: 9b:0f:60:76:98:8a:a6:dd:a2:c0:2a:ec:15:91:d4: 39:49:da:83:71:5f:d1:da:20:a3:83:83:ca:c1:b6: a8:93:b6:63:d1:ac:02:bf:79:55:be:45:c3:ee:37: fc:9b:c1:34:83:19:e9:c2:7b:24:ef:55:b9:98:4a: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C6:2F:0B:5B:33:1D:05:CD:CE:85:B3:C6:59:D7:4E:8D:57:F5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.114.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b9:0d:6e:14:56:8a:05:02:21:b4:c3:01:a6:3a:b0:51:cc: 5d:2d:5c:ce:f4:c9:cc:13:5f:e3:c6:a8:60:d9:a4:4f:df:ae: 43:cc:28:1b:3f:93:1d:57:25:64:6a:62:88:06:59:c0:4f:37: 1a:be:d5:3b:24:27:b7:23:07:9d:65:13:03:0e:77:a8:a4:75: 03:90:5b:c3:cd:8c:ee:d0:c4:bb:e4:54:f0:64:5e:42:9b:e8: 7b:4c:1f:c1:de:49:81:69:8f:b9:a4:3f:21:7b:70:85:1e:07: f4:66:50:cc:7d:e5:67:50:20:e4:38:36:75:80:9d:4f:47:13: 77:9e:6d:f9:3e:4a:57:08:e6:d1:e6:9e:14:8f:23:00:c2:d3: 49:3b:5e:6e:4c:44:e2:52:0f:2f:a8:4c:45:92:f5:e2:22:3e: a4:6e:4f:2a:9a:9c:ae:ca:78:5e:ff:19:aa:3e:47:ba:bc:03: d6:44:7f:c1:5e:44:b0:f6:39:43:28:76:15:0d:d7:74:48:ec: 75:68:13:a8:23:7d:ea:ba:bf:a1:51:88:32:62:3d:ea:b1:eb: 1e:bc:1f:e4:7c:22:30:dc:85:d3:55:8f:57:6b:c8:c0:44:a6: 36:45:ec:07:14:24:f2:8b:d5:e1:c4:e9:26:00:71:63:28:36: 46:3c:0d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObzwTAz1sYfPJVXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZTk0M2RmNWUtODcyOC00ODZkLThkMzktNDRhM2M1ZWI1YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8hbvnl6Hx2P2I7K2/KC+JDQpoHFIF1STHOh WfyedxiCxBcxAFDEdaR9iTmedWULRdzQtQOd2D//a9q4kogeMAKtF9DoaBvaKXWQ kXv+gckuJwCayfEyz+Y3TZEzZKZO3JhMt+6RzMefVOlA6akUDmdHAED0UFQ5nS9F ejIg2pziCGPHuatRYH8UREnoE50NNN+XwQZDwKa8ZBbASMiCbU54VGFBFgJzhMl0 yCXA7dGu9n46VX7ViIh8hfQnX81vvSGbD2B2mIqm3aLAKuwVkdQ5SdqDcV/R2iCj g4PKwbaok7Zj0awCv3lVvkXD7jf8m8E0gxnpwnsk71W5mEqRKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXGLwtbMx0Fzc6Fs8ZZ106NV/XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZWZkNDhmZWEtZmJiMS0z MjY4LWE5YTEtNGY5Y2FhMDgxYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS5DW4UVooFAiG0wwGmOrBRzF0tXM70ycwTX+PGqGDZpE/frkPMKBs/ kx1XJWRqYogGWcBPNxq+1TskJ7cjB51lEwMOd6ikdQOQW8PNjO7QxLvkVPBkXkKb 6HtMH8HeSYFpj7mkPyF7cIUeB/RmUMx95WdQIOQ4NnWAnU9HE3eebfk+SlcI5tHm nhSPIwDC00k7Xm5MROJSDy+oTEWS9eIiPqRuTyqanK7KeF7/Gao+R7q8A9ZEf8Fe RLD2OUModhUN13RI7HVoE6gjfeq6v6FRiDJiPeqx6x68H+R8IjDchdNVj1dryMBE pjZF7AcUJPKL1eHE6SYAcWMoNkY8Df0= -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:24 2024 by rpki-client on console-fra.rpki-client.org