$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa File: f1d32fb4-228c-37d2-9751-57a3f0746694.roa (raw, json) Hash identifier: 2GUL6NZVN1aFvMT09x0aqQP33Dyl7gpRa94yx7Tvc8Q= Subject key identifier: 84:8E:62:B8:0A:1D:86:69:ED:0E:88:6C:41:52:7A:50:78:C9:CB:48 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F43285847A8A1534078E8C74562081A80 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 16509 IP address blocks: 209.114.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:53:40:78:e8:c7:45:62:08:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=fb39ebb2-295c-40bd-af0b-8335a7cb4894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:97:d6:42:fa:84:b0:ec:93:4f:97:68:80: 72:08:1f:be:4a:ca:f8:d7:79:56:d4:15:52:e5:55: 50:cc:16:1a:29:6e:5c:d6:fb:14:6f:c6:56:10:c4: 02:a2:8a:9b:e8:d8:56:25:4a:e9:52:b8:6b:2f:cf: c3:4f:55:e8:7b:da:57:59:df:84:a2:b1:6d:0f:e0: cb:b6:ea:ed:f7:3b:9c:98:fc:bc:01:2a:7e:6f:b9: 09:f2:47:bd:a0:7a:b3:4e:b1:a8:85:c5:28:86:48: 44:fe:46:f8:a0:71:cf:c0:4e:bc:79:29:69:be:37: df:24:15:db:6b:d7:a4:40:74:df:10:b9:01:36:84: 1b:e2:42:23:0a:d5:f3:32:e5:88:02:f8:28:0e:e3: 3b:1a:65:da:91:4e:21:6a:59:72:42:b4:54:b5:25: bc:a1:c8:ed:e0:2a:d7:05:c2:db:79:cd:b7:59:98: d6:b1:3b:a5:92:1b:f3:21:dd:af:83:c0:21:35:fb: 0f:e9:2a:08:05:2b:58:70:7a:2c:ea:64:1a:1d:20: e0:ea:bd:38:3c:df:a7:41:ee:63:7d:29:03:94:f4: ca:bf:d4:f2:0d:44:8a:fb:04:d1:c1:f2:6c:c1:c3: 3f:55:ca:d3:60:22:73:d0:23:86:08:10:18:9d:5a: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8E:62:B8:0A:1D:86:69:ED:0E:88:6C:41:52:7A:50:78:C9:CB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1d:12:6b:5f:9d:47:39:19:12:49:87:fa:2b:00:ad:43:fb: 43:11:ba:45:9a:f2:fd:85:bf:1b:4b:cc:49:42:28:0c:9a:d0: 73:5e:40:ac:1a:78:4f:d7:af:78:b8:cb:f9:0d:18:3c:02:74: db:f6:fd:0a:bd:5d:94:0e:d8:97:3b:86:22:81:13:72:6a:50: 2d:9a:37:34:ad:c8:a6:95:ca:da:93:b3:f6:07:2d:da:6f:82: 9b:35:5a:f2:25:23:b9:55:f8:b4:06:d1:b2:00:75:bb:92:5e: 56:23:6e:e3:2b:4e:19:04:e8:1b:b2:85:cd:0f:4d:b8:ff:f9: 31:30:ad:93:01:3a:6b:3f:a3:a2:f6:15:8c:35:f6:b0:82:c6: 3e:ae:71:75:0c:20:04:fd:8c:c1:f3:65:18:db:3b:20:ae:1a: 25:c1:a2:9d:d2:5d:6e:da:b0:32:9f:8d:37:cb:6b:4d:58:6c: 76:e0:cf:11:65:68:0b:92:91:30:f3:35:69:a4:35:88:be:ad: ec:d2:08:98:de:d3:62:84:85:a3:67:63:03:75:78:d7:df:97: d1:87:64:f2:b9:dd:28:c5:01:7d:2b:67:2b:a3:49:27:55:47: ff:b0:59:7a:81:46:4b:95:bb:1d:13:77:e2:fe:a7:0b:35:a1: f5:ca:4a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooVNAeOjHRWIIGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk ZmIzOWViYjItMjk1Yy00MGJkLWFmMGItODMzNWE3Y2I0ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyCX1kL6hLDsk0+XaIByCB++Ssr413lW1BVS 5VVQzBYaKW5c1vsUb8ZWEMQCooqb6NhWJUrpUrhrL8/DT1Xoe9pXWd+EorFtD+DL turt9zucmPy8ASp+b7kJ8ke9oHqzTrGohcUohkhE/kb4oHHPwE68eSlpvjffJBXb a9ekQHTfELkBNoQb4kIjCtXzMuWIAvgoDuM7GmXakU4hallyQrRUtSW8ocjt4CrX BcLbec23WZjWsTulkhvzId2vg8AhNfsP6SoIBStYcHos6mQaHSDg6r04PN+nQe5j fSkDlPTKv9TyDUSK+wTRwfJswcM/VcrTYCJz0COGCBAYnVqYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISOYrgKHYZp7Q6IbEFSelB4yctIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvZjFkMzJmYjQtMjI4Yy0z N2QyLTk3NTEtNTdhM2YwNzQ2Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMdEmtfnUc5GRJJh/orAK1D+0MRukWa8v2FvxtLzElCKAya0HNeQKwa eE/Xr3i4y/kNGDwCdNv2/Qq9XZQO2Jc7hiKBE3JqUC2aNzStyKaVytqTs/YHLdpv gps1WvIlI7lV+LQG0bIAdbuSXlYjbuMrThkE6Buyhc0PTbj/+TEwrZMBOms/o6L2 FYw19rCCxj6ucXUMIAT9jMHzZRjbOyCuGiXBop3SXW7asDKfjTfLa01YbHbgzxFl aAuSkTDzNWmkNYi+rezSCJje02KEhaNnYwN1eNffl9GHZPK53SjFAX0rZyujSSdV R/+wWXqBRkuVux0Td+L+pws1ofXKSmM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:12 2024 by rpki-client on console-ams.rpki-client.org