$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa File: 24ee7603-c18e-3075-87a3-2e79abe90370.roa (raw, json) Hash identifier: BWR5QYB5k57BK1JthIQ0cR4Z+3yZtfHku2DSvX+/1dk= Subject key identifier: 41:F4:95:BF:F1:0F:2C:EF:9D:0F:54:A4:B3:E1:4D:BC:B8:BF:6B:8E Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584787212C6A458FE908B46DB680 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 14618 IP address blocks: 209.114.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:2c:6a:45:8f:e9:08:b4:6d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=38cd9d46-cd24-4f43-85e0-e841896a9111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:52:91:7b:cb:c3:d6:58:59:51:d9:24:94: 35:f3:9f:21:5c:47:d1:ca:23:14:ab:60:56:09:5d: d0:bd:63:e1:dc:76:cc:77:47:93:26:a0:ab:71:af: 5e:63:db:23:df:ef:00:07:85:09:ec:08:29:d8:e3: bd:95:0d:8c:40:cc:e3:35:f1:49:15:40:06:96:be: 9c:9a:8d:05:1a:c4:8a:83:c8:66:68:6a:fb:16:da: e7:43:81:40:49:16:00:c3:83:38:52:86:f0:34:b3: e2:c2:dc:a0:69:8b:ec:61:0d:83:88:eb:ce:7f:c1: 47:a3:84:53:b4:fc:2c:67:cc:54:5d:ae:f2:e6:16: 82:15:27:5b:c6:e4:71:6e:9f:b7:a9:5f:48:3d:d1: 9f:2f:56:77:79:d3:03:a4:52:ba:83:80:c6:e2:03: 93:e4:2f:8f:81:84:7e:8a:2e:f5:36:9c:35:f0:b1: b6:10:5a:46:48:d4:4e:dd:6c:ff:ac:97:bb:68:7e: 74:41:a5:22:71:af:e9:a6:f7:ca:44:d5:ea:0e:93: cc:d6:53:5d:6f:75:59:d6:1d:56:34:f0:75:98:f1: 7d:5f:0c:89:b0:11:49:fe:75:35:2a:80:af:88:3c: 26:a7:11:f9:fa:cc:c3:f2:b0:15:d6:ce:19:c8:d0: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F4:95:BF:F1:0F:2C:EF:9D:0F:54:A4:B3:E1:4D:BC:B8:BF:6B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:29:f4:bf:4d:30:a8:92:11:2b:a8:c1:73:e4:f4:64:80:9f: f3:aa:f4:9d:8d:05:66:c5:00:33:46:87:4d:83:82:87:91:1f: f1:30:e0:91:8c:68:f7:38:9d:78:ee:be:15:38:f0:81:ab:4f: b9:60:3d:53:45:31:8c:c6:b1:5b:e5:79:83:2a:e4:02:87:06: 16:cc:b9:2f:96:46:50:20:af:7d:df:e8:c5:e0:6f:4e:0a:ef: 74:8c:31:a4:18:ac:da:21:bb:45:db:b7:ec:53:14:7b:aa:15: d4:16:5a:69:ac:39:9a:5a:4c:99:3a:16:5f:6d:9d:e1:75:d4: 22:1f:df:b5:34:e8:88:9c:04:70:83:89:54:58:b0:eb:a5:5f: 01:99:c0:a9:7a:f8:b9:9c:b8:3b:72:6c:ed:2a:36:45:eb:21: 9f:ff:c7:c7:2b:a4:bd:15:e5:1a:43:a3:25:e5:33:37:1f:c7: bb:f1:5d:91:64:f5:65:26:83:6f:5e:cd:b2:39:8f:94:3c:2c: 07:71:da:cf:63:fd:4d:5d:0e:7f:5c:0c:1f:56:31:3b:75:87: 6e:34:2d:10:a6:98:ee:49:93:12:a9:5a:8a:35:ea:ab:d7:5a: b0:8e:d9:37:94:39:6a:be:fc:3f:2f:74:e4:e4:5e:29:31:ed: a9:0f:71:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHISxqRY/pCLRttoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk MzhjZDlkNDYtY2QyNC00ZjQzLTg1ZTAtZTg0MTg5NmE5MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2lSkXvLw9ZYWVHZJJQ1858hXEfRyiMUq2BW CV3QvWPh3HbMd0eTJqCrca9eY9sj3+8AB4UJ7Agp2OO9lQ2MQMzjNfFJFUAGlr6c mo0FGsSKg8hmaGr7FtrnQ4FASRYAw4M4UobwNLPiwtygaYvsYQ2DiOvOf8FHo4RT tPwsZ8xUXa7y5haCFSdbxuRxbp+3qV9IPdGfL1Z3edMDpFK6g4DG4gOT5C+PgYR+ ii71Npw18LG2EFpGSNRO3Wz/rJe7aH50QaUica/ppvfKRNXqDpPM1lNdb3VZ1h1W NPB1mPF9XwyJsBFJ/nU1KoCviDwmpxH5+szD8rAV1s4ZyNB4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH0lb/xDyzvnQ9UpLPhTby4v2uOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMjRlZTc2MDMtYzE4ZS0z MDc1LTg3YTMtMmU3OWFiZTkwMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsp9L9NMKiSESuowXPk9GSAn/Oq9J2NBWbFADNGh02DgoeRH/Ew4JGM aPc4nXjuvhU48IGrT7lgPVNFMYzGsVvleYMq5AKHBhbMuS+WRlAgr33f6MXgb04K 73SMMaQYrNohu0Xbt+xTFHuqFdQWWmmsOZpaTJk6Fl9tneF11CIf37U06IicBHCD iVRYsOulXwGZwKl6+LmcuDtybO0qNkXrIZ//x8crpL0V5RpDoyXlMzcfx7vxXZFk 9WUmg29ezbI5j5Q8LAdx2s9j/U1dDn9cDB9WMTt1h240LRCmmO5JkxKpWoo16qvX WrCO2TeUOWq+/D8vdOTkXikx7akPce8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:12 2024 by rpki-client on console-ams.rpki-client.org