$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa File: 4a8f44c2-2408-33dc-84a6-dcc034360053.roa (raw, json) Hash identifier: T+FxcFxYeS2ZTkgrJJ36ORBk1cWWG43sQRpOGVrPS3U= Subject key identifier: F4:11:70:F2:8B:4C:58:52:DB:0A:0E:4B:E4:AD:4F:17:55:46:08:3E Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F43285847B3CC167338C6B4A44EA80B80 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 12119 IP address blocks: 209.128.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:16:73:38:c6:b4:a4:4e:a8:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=8e2c1ad8-99a2-4ad9-a2f5-231f9dcf5782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:d9:f9:1d:0f:8e:7d:92:73:ef:23:96:18: 84:71:29:e5:80:ef:49:55:cc:3e:39:df:0f:45:df: 81:b4:cf:e9:f7:44:d7:b9:b4:24:24:8c:fc:67:ed: 16:62:3a:41:ff:ab:db:11:c3:5b:5d:d1:23:bd:4b: a6:6a:59:1e:cb:05:f4:8f:39:c7:02:37:08:83:3b: 09:25:9e:bc:8f:f5:86:dc:8d:a0:89:33:b7:50:1c: d5:bd:e1:4e:ba:67:4f:11:0e:44:bc:d5:27:a7:f9: 52:75:59:44:e0:e8:66:15:97:27:54:f0:41:cc:f9: 47:3d:41:35:5a:ae:38:a5:14:88:e5:cb:e8:d4:af: 52:da:8f:15:11:36:bb:03:4a:d1:3f:7b:ca:05:f8: e6:b4:4e:0a:59:fb:6d:bc:8a:a2:9b:33:46:a5:24: d9:d0:ba:09:64:cd:cd:b6:57:55:67:9b:1e:fe:cc: 92:a7:ac:d8:17:29:2b:98:93:66:33:9b:8b:5f:a6: a7:b3:ec:7c:f0:87:8f:02:76:61:01:40:1f:fa:31: 3c:79:b3:64:12:07:b2:52:26:f4:8f:af:e1:68:7c: 75:ba:c1:25:98:ec:ad:86:32:59:d4:b9:9d:7c:56: 87:a4:5e:f4:86:f2:49:03:01:d4:f0:a9:8f:01:2b: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:11:70:F2:8B:4C:58:52:DB:0A:0E:4B:E4:AD:4F:17:55:46:08:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 209.128.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:de:a6:b3:24:4f:2c:8d:3c:d1:8d:ab:b4:11:f3:02:c3:4e: d8:94:2b:54:6c:a7:24:3f:51:e1:91:9f:65:ce:a4:5b:c6:4b: a5:b8:f6:58:33:9a:c3:bf:42:1b:bd:c8:cc:9e:fa:4d:5a:61: 56:c3:07:4d:05:30:22:8d:e2:5c:aa:81:5a:7b:e4:6c:7c:72: cc:2d:29:95:10:12:eb:34:43:53:f4:e5:4e:46:aa:76:46:90: c0:bf:36:4d:93:7c:94:83:c1:aa:9c:e9:a7:b1:bc:74:52:03: 46:65:3a:e2:c7:54:51:c3:30:5c:f2:11:3e:62:95:71:3e:f5: 93:2f:24:e6:05:81:b7:8c:f3:87:c9:c1:c7:dc:da:33:c4:0f: 14:dd:f5:5a:40:7d:34:94:d8:d1:5a:78:35:de:78:8c:0f:a5: 5d:a9:84:b0:40:cd:fc:b8:7b:1c:f2:2b:2e:51:07:39:c0:5d: f2:58:8b:50:0e:a7:64:4e:21:d0:b4:57:03:dd:ff:15:2c:12: a8:de:87:db:94:67:dd:06:a2:9a:df:74:f3:9a:2e:82:fc:69: 6f:54:4d:55:f7:09:1a:13:30:2d:07:7d:e8:cc:bc:e2:5a:dc: bd:03:11:86:de:02:6b:94:cb:37:a3:cb:37:1d:7d:6b:25:6f: 9e:b7:66:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBZzOMa0pE6oC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk OGUyYzFhZDgtOTlhMi00YWQ5LWEyZjUtMjMxZjlkY2Y1NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5DZ+R0Pjn2Sc+8jlhiEcSnlgO9JVcw+Od8P Rd+BtM/p90TXubQkJIz8Z+0WYjpB/6vbEcNbXdEjvUumalkeywX0jznHAjcIgzsJ JZ68j/WG3I2giTO3UBzVveFOumdPEQ5EvNUnp/lSdVlE4OhmFZcnVPBBzPlHPUE1 Wq44pRSI5cvo1K9S2o8VETa7A0rRP3vKBfjmtE4KWfttvIqimzNGpSTZ0LoJZM3N tldVZ5se/sySp6zYFykrmJNmM5uLX6ans+x88IePAnZhAUAf+jE8ebNkEgeyUib0 j6/haHx1usElmOythjJZ1LmdfFaHpF70hvJJAwHU8KmPASsxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQRcPKLTFhS2woOS+StTxdVRgg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNGE4ZjQ0YzItMjQwOC0z M2RjLTg0YTYtZGNjMDM0MzYwMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPeprMkTyyNPNGNq7QR8wLDTtiUK1RspyQ/UeGRn2XOpFvGS6W49lgz msO/Qhu9yMye+k1aYVbDB00FMCKN4lyqgVp75Gx8cswtKZUQEus0Q1P05U5GqnZG kMC/Nk2TfJSDwaqc6aexvHRSA0ZlOuLHVFHDMFzyET5ilXE+9ZMvJOYFgbeM84fJ wcfc2jPEDxTd9VpAfTSU2NFaeDXeeIwPpV2phLBAzfy4exzyKy5RBznAXfJYi1AO p2ROIdC0VwPd/xUsEqjeh9uUZ90GoprfdPOaLoL8aW9UTVX3CRoTMC0HfejMvOJa 3L0DEYbeAmuUyzejyzcdfWslb563Zmk= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:33 2024 by rpki-client on console-fra.rpki-client.org