$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json) Hash identifier: zLk/pl8SK/0jxMccGa2Wp696vjIgJQ2Jh9qQJO4BvwE= Subject key identifier: DB:85:C9:28:71:C9:E9:47:46:B3:0E:07:DD:E4:7E:E9:7E:46:12:75 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285847CE6F3BEFC61DFC39A4ED5D7D Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 399635 IP address blocks: 209.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:3b:ef:c6:1d:fc:39:a4:ed:5d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=5cfdf32f-06b5-4eaa-8b43-a3e1d09f983c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:5b:d2:86:ac:84:c6:52:7a:08:91:85:4c: 79:be:df:2b:29:c1:5c:88:e7:dd:13:a9:1e:2d:2d: 98:21:47:32:d9:28:59:5e:1d:03:ba:0e:d5:cb:23: b4:d5:64:36:bc:44:0e:5f:57:02:57:cf:93:c5:30: 79:f2:6e:4a:1a:ef:96:1b:b3:df:11:20:c3:c5:bc: 4c:63:26:bc:ed:b8:ac:62:a6:9f:9a:23:14:e0:6e: 05:be:75:0c:c5:ec:09:5b:59:0d:3b:c9:ca:b3:78: 78:f9:85:4f:0d:84:aa:f7:4f:5e:70:13:ed:91:8f: 1b:0f:f2:2d:3c:70:d5:0c:33:0b:23:67:23:4b:ce: 7e:55:3e:d1:01:db:0c:69:f7:7e:cb:91:a0:c2:28: ed:1d:fa:ce:57:20:66:f6:25:dc:51:cd:85:1f:68: 6d:a7:01:ca:c0:a8:0a:4b:c0:d5:45:d1:03:a0:ce: 1c:a2:e8:9d:70:49:09:7e:38:0f:52:bb:9c:6d:29: c3:fd:ed:9b:d7:32:38:61:d0:2f:0f:11:b6:cb:c4: bd:c2:7b:0f:7f:4a:b6:79:90:ec:b6:a8:ed:4c:00: c5:25:0e:f0:80:c6:6c:2c:3c:d8:fa:42:13:62:2f: 55:f5:15:81:dc:22:c9:2c:82:fc:0f:18:17:27:14: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:85:C9:28:71:C9:E9:47:46:B3:0E:07:DD:E4:7E:E9:7E:46:12:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:98:67:62:eb:83:a7:b8:d7:35:09:82:73:4d:aa:11:b9:07: b5:4f:a8:79:84:8e:ca:77:42:27:3e:b4:44:cd:14:cc:ce:5d: ae:8f:b4:65:f1:6f:7c:0e:6a:b1:d4:b1:fa:4c:c0:b2:cb:06: 73:ba:37:c7:7c:5f:05:3c:e5:95:03:87:32:51:4d:2f:29:b0: 1e:90:91:e8:f3:01:a4:02:f1:43:0b:80:63:8e:52:30:8e:30: 44:bf:64:72:4d:fd:5d:be:bc:1e:56:2c:89:df:9f:9b:4d:08: 4e:b3:7c:66:cd:be:2c:bc:03:ee:42:fc:4b:3f:3e:89:1c:59: e0:a7:e4:93:51:04:42:b7:d3:df:f3:66:6d:7c:59:33:44:92: 2b:ad:f1:79:11:2b:00:ab:61:90:e8:bf:c2:c9:d6:05:41:84: 47:56:d4:72:ca:55:a7:20:80:45:56:9c:0a:97:f1:20:ca:f1: 34:03:44:d2:6f:9d:c6:24:99:65:33:49:3e:37:cc:b9:71:5a: 6f:6b:11:f2:f1:a8:ed:0d:86:0d:f5:73:a5:e1:46:42:0a:18: 94:52:b1:c4:5b:96:f8:90:30:c1:9c:53:04:7a:36:98:5c:fa: 9a:8e:4b:34:67:5b:6e:06:8d:c7:d8:46:23:18:75:d3:0a:5f: 70:7f:33:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObzvvxh38OaTtXX0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk NWNmZGYzMmYtMDZiNS00ZWFhLThiNDMtYTNlMWQwOWY5ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkJb0oashMZSegiRhUx5vt8rKcFciOfdE6ke LS2YIUcy2ShZXh0Dug7VyyO01WQ2vEQOX1cCV8+TxTB58m5KGu+WG7PfESDDxbxM Yya87bisYqafmiMU4G4FvnUMxewJW1kNO8nKs3h4+YVPDYSq909ecBPtkY8bD/It PHDVDDMLI2cjS85+VT7RAdsMafd+y5GgwijtHfrOVyBm9iXcUc2FH2htpwHKwKgK S8DVRdEDoM4couidcEkJfjgPUrucbSnD/e2b1zI4YdAvDxG2y8S9wnsPf0q2eZDs tqjtTADFJQ7wgMZsLDzY+kITYi9V9RWB3CLJLIL8DxgXJxQn0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuFyShxyelHRrMOB93kful+RhJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZjk2MDAzYTQtNWU2YS0z NDA4LWFkODQtMDM1YWRhMjlmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6YZ2Lrg6e41zUJgnNNqhG5B7VPqHmEjsp3Qic+tETNFMzOXa6PtGXx b3wOarHUsfpMwLLLBnO6N8d8XwU85ZUDhzJRTS8psB6QkejzAaQC8UMLgGOOUjCO MES/ZHJN/V2+vB5WLInfn5tNCE6zfGbNviy8A+5C/Es/PokcWeCn5JNRBEK309/z Zm18WTNEkiut8XkRKwCrYZDov8LJ1gVBhEdW1HLKVacggEVWnAqX8SDK8TQDRNJv ncYkmWUzST43zLlxWm9rEfLxqO0Nhg31c6XhRkIKGJRSscRblviQMMGcUwR6Nphc +pqOSzRnW24GjcfYRiMYddMKX3B/M+A= -----END CERTIFICATE-----Generated at Fri Nov 22 17:31:29 2024 by rpki-client on console-ams.rpki-client.org