$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa File: 5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa (raw, json) Hash identifier: 850Vb/RtLbdFH1tJOz+nOmMflsPd//XvFLyFHQjqAu8= Subject key identifier: D9:99:1D:DE:6A:B4:11:14:97:05:EE:47:B1:03:49:AB:FD:44:25:D0 Certificate issuer: /CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Certificate serial: 010D0C9F43285847D6CF40F065C4C490CB8B1900 Authority key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 16509 IP address blocks: 209.188.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:40:f0:65:c4:c4:90:cb:8b:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=e165f49b-0e87-4dd1-a42a-a9ab1ada1573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b5:ce:25:2b:2c:32:27:53:c9:a0:e7:b9:33: 1a:3d:23:7d:2a:af:f3:b0:2f:27:ed:bc:fe:31:e6: e8:55:61:46:b7:42:10:07:59:5f:4a:b5:4f:78:10: e5:cf:c2:bc:1b:16:dd:ae:8b:57:f1:e3:e8:93:75: c8:7d:5d:87:c2:81:3e:dc:9a:53:de:51:6d:b4:4f: 1c:a5:00:29:4d:ac:c3:a0:52:ef:70:6f:8b:41:18: 87:e8:b7:d4:01:c6:a5:61:03:49:63:2a:11:29:ea: a0:89:dd:fe:ae:68:75:43:e7:c9:73:44:28:6a:3f: 06:10:38:30:91:17:d0:41:d8:52:57:2f:7a:0b:bc: 2c:77:a6:dd:be:21:37:76:4e:3a:1d:20:be:0b:a7: 9c:c9:d8:85:b0:53:63:42:39:6e:07:a3:30:ff:18: 1e:c7:c9:a7:86:7f:ad:d5:ae:5d:a2:e5:5c:88:34: b6:27:f9:dc:53:c1:1c:95:50:dc:2b:d1:a2:84:98: 2f:ab:39:03:56:e5:c1:e2:e2:1a:c6:16:cc:b9:82: c9:32:e9:22:cc:b8:88:dc:fc:9f:97:c1:57:bc:aa: 8e:33:2a:d4:2d:32:d6:38:a3:48:12:cf:81:fc:76: 5c:09:e6:f3:bc:f2:08:ae:b7:3c:c5:52:86:87:1b: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:99:1D:DE:6A:B4:11:14:97:05:EE:47:B1:03:49:AB:FD:44:25:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl X509v3 Authority Key Identifier: keyid:AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer sbgp-ipAddrBlock: critical IPv4: 209.188.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9a:dc:48:aa:e9:b8:ee:0b:5e:5a:6b:c2:f1:07:00:1b:25: fe:77:10:62:12:d0:f9:ea:aa:b9:3b:e1:90:0f:57:8b:e7:cb: c2:78:6c:9b:89:a1:23:d5:31:ca:f9:5b:8c:8f:58:df:2d:44: 5b:ee:a6:88:3f:1b:43:d9:fc:32:c3:f6:3c:95:82:56:71:64: 76:8e:bc:be:5d:11:f2:eb:c1:60:1a:72:76:33:54:39:da:c7: 52:ec:8d:12:36:6e:90:3f:fa:c5:3e:7c:19:f7:11:5e:01:1e: 8c:32:6a:ae:a1:de:fe:1e:60:b5:ff:06:f5:56:91:25:b5:d6: 71:fd:33:25:a2:6b:62:f6:e6:2c:90:4b:78:da:5f:30:31:13: e9:fa:45:9d:a5:a2:84:4f:74:44:87:20:02:eb:06:13:db:72: 3a:06:5a:c1:d8:26:fb:d9:5c:18:ac:ff:0a:2a:e8:d9:16:28: 6a:03:b4:9d:3d:78:7a:0e:73:ed:b1:11:ba:5f:eb:f3:08:72: db:c1:8d:49:92:39:8c:42:20:2b:dd:5f:c7:24:26:b5:26:30: fd:81:c1:75:ec:00:12:90:70:17:2c:59:39:00:bc:44:fa:14: f8:53:c2:54:e0:be:f7:ce:ff:f0:4d:3f:ae:56:0f:4a:dc:bb: 1f:8e:54:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0DwZcTEkMuLGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMxN2MxZDEtNzU5NS00NzdlLWFhY2ItZjhlZjQyYzRi YThlMB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk ZTE2NWY0OWItMGU4Ny00ZGQxLWE0MmEtYTlhYjFhZGExNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLXOJSssMidTyaDnuTMaPSN9Kq/zsC8n7bz+ MeboVWFGt0IQB1lfSrVPeBDlz8K8GxbdrotX8ePok3XIfV2HwoE+3JpT3lFttE8c pQApTazDoFLvcG+LQRiH6LfUAcalYQNJYyoRKeqgid3+rmh1Q+fJc0Qoaj8GEDgw kRfQQdhSVy96C7wsd6bdviE3dk46HSC+C6ecydiFsFNjQjluB6Mw/xgex8mnhn+t 1a5douVciDS2J/ncU8EclVDcK9GihJgvqzkDVuXB4uIaxhbMuYLJMukizLiI3Pyf l8FXvKqOMyrULTLWOKNIEs+B/HZcCebzvPIIrrc8xVKGhxvnawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmZHd5qtBEUlwXuR7EDSav9RCXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3 YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJjNGJhOGUvNWE4ZWVjNTUtN2Y2ZS0z Y2FiLWJmZGQtNGVlOGFjZWM1N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWMxN2MxZDEtNzU5NS00NzdlLWFh Y2ItZjhlZjQyYzRiYThlLzFjMTdjMWQxLTc1OTUtNDc3ZS1hYWNiLWY4ZWY0MmM0 YmE4ZS5jcmwwHwYDVR0jBBgwFoAUrdb8+NnwMdRS4Kltj/uxs2B7j14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVm NDJjNGJhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+a3Eiq6bjuC15aa8LxBwAbJf53EGIS0Pnqqrk74ZAPV4vny8J4bJuJ oSPVMcr5W4yPWN8tRFvupog/G0PZ/DLD9jyVglZxZHaOvL5dEfLrwWAacnYzVDna x1LsjRI2bpA/+sU+fBn3EV4BHowyaq6h3v4eYLX/BvVWkSW11nH9MyWia2L25iyQ S3jaXzAxE+n6RZ2looRPdESHIALrBhPbcjoGWsHYJvvZXBis/woq6NkWKGoDtJ09 eHoOc+2xEbpf6/MIctvBjUmSOYxCICvdX8ckJrUmMP2BwXXsABKQcBcsWTkAvET6 FPhTwlTgvvfO//BNP65WD0rcux+OVEg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:06 2024 by rpki-client on console-ams.rpki-client.org