$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: nB6ELtDgsiOqaxrxlLC46M7cUIUquV+ppbTzWZkehb8= Subject key identifier: 77:01:80:40:28:AE:21:0A:F3:88:B6:A2:55:0D:64:DB:6A:E2:B2:F7 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285847DF2F4C52D9F7832101E5389C Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 7018 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:4c:52:d9:f7:83:21:01:e5:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=a6ba3c5b-a713-48f3-9c06-337252869032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:2e:4a:b3:77:34:f0:ac:2e:78:41:98:11: 44:ea:d0:cc:7e:c4:40:a1:aa:97:97:45:62:42:de: 2a:59:e9:f5:f6:40:33:61:8b:4c:1a:f4:9d:6c:63: 0a:ec:55:6d:4f:82:f2:74:9b:35:07:05:67:ea:a8: ca:17:90:db:35:4a:c7:b2:0d:53:c7:31:a5:ba:02: c7:16:70:04:60:5a:7f:60:e8:46:ad:8a:8b:63:97: cc:ea:80:35:10:f3:0c:de:da:9a:da:2c:8b:79:8c: b6:0b:54:c8:98:e8:b5:8d:b3:1a:bd:4f:a1:05:ff: 3f:66:54:cf:21:9d:60:a1:55:2f:dd:94:b1:7b:68: 8b:a1:97:96:14:70:f7:5b:2e:35:7b:8b:a8:cb:ea: bf:29:62:8e:d3:a0:35:cd:49:c4:5b:ae:cd:94:2d: 96:2b:82:a5:6a:66:1c:7c:72:90:2a:ca:1f:ec:06: 6e:74:8a:e8:ab:00:e1:5c:c6:ab:b1:90:58:79:85: 59:b9:2d:83:e6:02:57:f4:36:45:9e:1f:af:a8:7c: 7c:1c:25:17:7e:c8:d5:a0:d1:f7:9c:89:9c:d0:44: 44:6a:66:6b:e7:f2:05:75:07:aa:86:25:50:2b:b5: ba:ce:26:59:0d:7f:df:53:f1:4a:d8:34:94:ed:0c: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:01:80:40:28:AE:21:0A:F3:88:B6:A2:55:0D:64:DB:6A:E2:B2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:66:97:46:4b:fb:19:5a:00:01:6c:ed:b6:0e:6c:71:f8:42: 5d:14:5f:d8:f5:5c:9b:f3:18:de:79:4d:95:ae:59:36:c6:e0: f9:d8:c2:bc:df:44:42:59:a8:48:2b:51:07:3e:38:e4:31:5f: bd:50:46:ae:66:24:8c:76:51:74:08:dd:71:44:e9:21:a2:2b: 04:1d:1c:97:07:e4:cf:30:44:18:a7:f2:db:b3:92:a5:a1:dd: 58:39:d2:22:09:8a:14:4e:dd:e6:e4:d5:67:7a:e8:a3:b3:af: 39:0b:06:56:1d:65:61:bc:ab:0d:f4:26:07:27:f7:e3:51:7e: 3d:6c:44:eb:e9:63:70:59:cf:c9:b1:92:d9:a7:00:b3:ae:0c: 8c:af:86:07:f0:3b:87:c8:13:6e:2a:65:15:f5:ae:1c:c5:67: c5:3a:97:d2:6a:be:23:18:88:a9:f3:c8:14:73:4f:97:b8:af: af:75:c7:29:a2:b7:b8:38:d4:5f:27:5f:47:37:b3:bc:af:6d: 51:d1:3f:27:44:d8:23:83:3e:c6:07:6a:83:b3:ab:89:24:68: 53:64:93:cf:25:2e:78:59:7c:6f:a9:56:63:e2:81:ba:db:6a: c9:19:7c:cf:23:6e:fa:d6:95:b9:13:70:8a:35:ef:3c:63:12: 7c:12:f1:98 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEffL0xS2feDIQHlOJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk YTZiYTNjNWItYTcxMy00OGYzLTljMDYtMzM3MjUyODY5MDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/kuSrN3NPCsLnhBmBFE6tDMfsRAoaqXl0Vi Qt4qWen19kAzYYtMGvSdbGMK7FVtT4LydJs1BwVn6qjKF5DbNUrHsg1TxzGlugLH FnAEYFp/YOhGrYqLY5fM6oA1EPMM3tqa2iyLeYy2C1TImOi1jbMavU+hBf8/ZlTP IZ1goVUv3ZSxe2iLoZeWFHD3Wy41e4uoy+q/KWKO06A1zUnEW67NlC2WK4KlamYc fHKQKsof7AZudIroqwDhXMarsZBYeYVZuS2D5gJX9DZFnh+vqHx8HCUXfsjVoNH3 nImc0EREamZr5/IFdQeqhiVQK7W6ziZZDX/fU/FK2DSU7Qzs1wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHcBgEAoriEK84i2olUNZNtq4rL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAuGaXRkv7GVoAAWzttg5scfhCXRRf2PVcm/MY3nlNla5Z Nsbg+djCvN9EQlmoSCtRBz445DFfvVBGrmYkjHZRdAjdcUTpIaIrBB0clwfkzzBE GKfy27OSpaHdWDnSIgmKFE7d5uTVZ3roo7OvOQsGVh1lYbyrDfQmByf341F+PWxE 6+ljcFnPybGS2acAs64MjK+GB/A7h8gTbiplFfWuHMVnxTqX0mq+IxiIqfPIFHNP l7ivr3XHKaK3uDjUXydfRzezvK9tUdE/J0TYI4M+xgdqg7OriSRoU2STzyUueFl8 b6lWY+KButtqyRl8zyNu+taVuRNwijXvPGMSfBLxmA== -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:39 2024 by rpki-client on console-fra.rpki-client.org