$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa File: 301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json) Hash identifier: OczfJ/weDRf7xW7iGtwrcr/rZb/Qum4e/9gW80euxgw= Subject key identifier: FF:34:C2:66:DE:A8:57:C2:2D:74:96:C9:4F:04:A2:69:E3:F1:DB:C5 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285847299B2B2DE1AC3723A891BF80 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 14618 IP address blocks: 209.114.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:2b:2d:e1:ac:37:23:a8:91:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=ea63325f-660f-455f-9713-96e6eee58354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:79:ab:01:4f:b6:25:47:37:78:65:96:8f: 70:89:05:aa:fb:21:2e:49:86:ba:97:7d:c5:6c:1c: 8a:46:09:2d:dd:31:23:50:16:6b:8e:d8:14:64:ed: 94:57:63:00:00:7b:f0:e0:65:07:df:8c:54:9e:7a: 6a:09:7b:4b:ec:40:91:72:93:69:20:09:7a:ac:16: 16:e3:a4:8c:7c:ba:07:a8:23:6e:fe:ec:e8:71:6f: 58:8a:17:0d:e0:22:60:a6:e2:63:bb:53:6d:6d:04: f3:bf:58:a7:9f:29:19:ce:5c:be:fa:db:1c:27:0d: e6:c2:df:67:19:de:f3:16:52:4c:c2:8b:93:6a:6d: 1e:26:3d:75:73:91:88:8d:ba:51:4b:fe:fc:95:16: b1:a8:f2:1f:b9:3d:f1:e8:68:50:fe:55:bd:a6:c8: e1:52:72:f3:55:03:b5:a3:57:78:c4:d9:11:f4:29: 73:01:07:6b:96:9b:a6:cf:f4:7d:51:72:9c:ef:ad: ee:dc:2f:54:73:56:51:b9:90:ca:1b:7c:d0:37:21: 70:cf:76:db:2a:94:49:3e:dd:75:50:b3:4e:94:d9: 8d:37:28:af:4f:d1:fa:79:b8:48:ad:fd:62:bd:d4: 66:49:4f:f3:03:11:40:8d:67:36:7d:f6:15:70:a6: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:34:C2:66:DE:A8:57:C2:2D:74:96:C9:4F:04:A2:69:E3:F1:DB:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:fb:90:d0:e6:19:a9:ca:d9:72:8e:cf:20:06:1d:c0:4e:b6: c0:ed:79:d1:ef:bd:f4:ff:39:84:dc:c7:27:e7:57:c1:e5:1e: f2:aa:24:ec:94:22:4f:27:d1:4a:a5:9c:7c:63:9d:42:29:3f: ee:4f:64:65:cf:47:3d:86:7c:eb:72:72:3e:a9:de:24:da:a0: c6:2d:6a:7e:b7:dc:33:0c:71:83:bc:6c:c0:da:e0:84:7d:4d: f2:14:72:d1:53:b9:5b:85:38:41:0d:6c:d4:62:be:32:eb:db: 07:62:5c:5f:db:8a:ed:20:c3:3a:a3:62:f4:35:75:3a:bf:4c: 4b:3c:ff:de:73:4d:a7:f1:4d:77:ec:91:f0:fd:eb:27:bc:fa: 9e:ff:ce:79:13:27:68:32:3e:43:c6:26:f2:7a:2a:b0:a4:df: 0c:67:1b:54:db:66:51:16:e5:23:7a:30:09:cc:e8:cd:4d:94: 71:1e:d1:c4:91:e2:e4:4c:50:69:1a:ca:a4:6d:e5:80:0b:83: fa:ed:e1:27:a1:32:8b:a1:40:5c:57:6f:55:9f:de:94:9a:a7: 37:f6:aa:a1:bc:58:e3:2a:c9:21:7a:90:8c:17:ac:ac:bd:78: 8b:e1:ce:ee:b5:b0:ab:fc:d8:30:19:08:00:91:ba:d1:c0:44: 7b:f8:a6:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyst4aw3I6iRv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZWE2MzMyNWYtNjYwZi00NTVmLTk3MTMtOTZlNmVlZTU4MzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17l5qwFPtiVHN3hllo9wiQWq+yEuSYa6l33F bByKRgkt3TEjUBZrjtgUZO2UV2MAAHvw4GUH34xUnnpqCXtL7ECRcpNpIAl6rBYW 46SMfLoHqCNu/uzocW9YihcN4CJgpuJju1NtbQTzv1innykZzly++tscJw3mwt9n Gd7zFlJMwouTam0eJj11c5GIjbpRS/78lRaxqPIfuT3x6GhQ/lW9psjhUnLzVQO1 o1d4xNkR9ClzAQdrlpumz/R9UXKc763u3C9Uc1ZRuZDKG3zQNyFwz3bbKpRJPt11 ULNOlNmNNyivT9H6ebhIrf1ivdRmSU/zAxFAjWc2ffYVcKZcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP80wmbeqFfCLXSWyU8Eomnj8dvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvMzAxNjg1ZjktZWIzMC0z NDZkLWE5OGMtNmY2NTMxNDEyMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMf7kNDmGanK2XKOzyAGHcBOtsDtedHvvfT/OYTcxyfnV8HlHvKqJOyU Ik8n0UqlnHxjnUIpP+5PZGXPRz2GfOtycj6p3iTaoMYtan633DMMcYO8bMDa4IR9 TfIUctFTuVuFOEENbNRivjLr2wdiXF/biu0gwzqjYvQ1dTq/TEs8/95zTafxTXfs kfD96ye8+p7/znkTJ2gyPkPGJvJ6KrCk3wxnG1TbZlEW5SN6MAnM6M1NlHEe0cSR 4uRMUGkayqRt5YALg/rt4SehMouhQFxXb1Wf3pSapzf2qqG8WOMqySF6kIwXrKy9 eIvhzu61sKv82DAZCACRutHARHv4pjI= -----END CERTIFICATE-----Generated at Sun Nov 24 17:22:40 2024 by rpki-client on console-fra.rpki-client.org