$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a319d602-a131-3901-9f4e-2e323336cb6f.roa File: a319d602-a131-3901-9f4e-2e323336cb6f.roa (raw, json) Hash identifier: XmpmdEyhBE3OJp4Y1Y2q+DWxjTX9GzbIG+c8UdZDhHs= Subject key identifier: E7:44:48:7E:A7:97:4E:14:7E:C0:EC:0E:12:CD:A5:ED:B2:31:5C:41 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F432858479D76B11A48623AE6E4CC2DC0 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a319d602-a131-3901-9f4e-2e323336cb6f.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 207990 IP address blocks: 209.242.223.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b1:1a:48:62:3a:e6:e4:cc:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=c471cf48-0a17-4e98-a0f3-b56be34c9994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4f:5b:20:af:82:a8:15:db:54:e7:dc:42:3d: b5:7f:f4:2f:2c:a0:5d:65:c2:96:06:a0:49:14:dc: 55:77:dd:8b:4b:f6:8c:2b:2d:fa:02:34:dd:2a:5e: 26:24:08:2f:54:f5:1a:d6:ac:2c:c3:40:ae:95:ca: d6:fb:da:9b:db:5b:79:f0:90:43:4a:83:3d:6b:b6: 74:23:6e:48:75:9c:43:57:37:8a:62:7e:83:73:1c: e4:dc:b5:a1:4b:01:8c:a2:97:83:65:23:e9:8e:0c: b5:f7:a8:72:07:c9:f4:6e:94:a9:c6:6f:8d:a6:78: f3:f1:9b:c6:f4:a7:20:02:25:8b:a9:75:92:7a:c0: db:1c:9c:b2:4c:35:0b:99:ef:12:d0:fe:4c:ef:2c: 02:43:a7:9e:43:64:45:e4:5c:90:aa:89:29:7c:8f: f4:a0:be:5e:a7:d0:59:98:1d:75:f7:23:e4:f9:ab: 5f:d1:c4:6e:bd:d0:6d:e4:12:5a:8c:86:2e:8e:eb: fd:d7:fa:5a:6c:5e:b8:f8:90:b7:b5:f7:fc:bb:5e: b3:c2:2d:0a:4f:28:43:be:63:16:51:7c:98:cb:cd: 3e:8a:3c:f4:af:6e:37:13:eb:53:4e:87:3d:df:17: 2b:41:e6:62:26:26:f0:f6:1a:dd:7d:90:57:65:21: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:44:48:7E:A7:97:4E:14:7E:C0:EC:0E:12:CD:A5:ED:B2:31:5C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/a319d602-a131-3901-9f4e-2e323336cb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 209.242.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2e:54:e1:bb:53:ad:9f:c3:96:f9:5d:05:ef:28:3e:72:66: 2b:8a:41:20:33:e4:5e:12:ea:7d:71:50:99:f9:61:d8:aa:41: d8:60:29:f3:c8:42:23:fb:de:c2:6a:2c:96:79:4c:00:37:69: 41:a3:a9:3d:a0:6e:ac:0f:6d:c2:36:45:a1:70:78:63:a5:4b: be:cb:e2:6f:61:8e:65:70:7b:6b:df:f0:9a:c6:93:8c:01:3f: 54:a8:e0:ed:62:09:15:8d:58:0b:45:90:94:07:c6:fb:c6:d4: 1b:95:0c:eb:f5:30:03:d1:6a:ce:1a:e5:57:c2:2b:e0:87:f7: 38:f8:7b:a0:c3:92:01:14:88:1d:91:34:a3:aa:53:8b:70:6a: 74:77:3e:b0:ef:2f:ea:02:b0:7f:60:12:e8:d7:07:69:a7:a7: 01:90:21:4d:b6:cd:2f:e3:a5:e7:ca:da:65:89:4a:a4:60:df: fe:3c:3d:ed:d2:46:a5:7d:67:ef:75:bc:dd:2f:2a:2e:f1:27: 7e:2e:be:9c:c8:bc:c4:92:fe:8a:41:90:6f:dd:36:d5:a2:cc: 03:9f:04:96:23:43:3f:bc:b9:c9:c1:30:66:77:59:2d:1e:c2: 8c:ca:a5:17:fa:13:f6:a3:8b:75:fe:4a:4d:f7:57:b5:76:41: 0c:b9:8f:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrEaSGI65uTMLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk YzQ3MWNmNDgtMGExNy00ZTk4LWEwZjMtYjU2YmUzNGM5OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk9bIK+CqBXbVOfcQj21f/QvLKBdZcKWBqBJ FNxVd92LS/aMKy36AjTdKl4mJAgvVPUa1qwsw0CulcrW+9qb21t58JBDSoM9a7Z0 I25IdZxDVzeKYn6Dcxzk3LWhSwGMopeDZSPpjgy196hyB8n0bpSpxm+Npnjz8ZvG 9KcgAiWLqXWSesDbHJyyTDULme8S0P5M7ywCQ6eeQ2RF5FyQqokpfI/0oL5ep9BZ mB119yPk+atf0cRuvdBt5BJajIYujuv91/pabF64+JC3tff8u16zwi0KTyhDvmMW UXyYy80+ijz0r243E+tTToc93xcrQeZiJibw9hrdfZBXZSFHHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdESH6nl04UfsDsDhLNpe2yMVxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYTMxOWQ2MDItYTEzMS0z OTAxLTlmNGUtMmUzMjMzMzZjYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsuVOG7U62fw5b5XQXvKD5yZiuKQSAz5F4S6n1xUJn5YdiqQdhgKfPI QiP73sJqLJZ5TAA3aUGjqT2gbqwPbcI2RaFweGOlS77L4m9hjmVwe2vf8JrGk4wB P1So4O1iCRWNWAtFkJQHxvvG1BuVDOv1MAPRas4a5VfCK+CH9zj4e6DDkgEUiB2R NKOqU4twanR3PrDvL+oCsH9gEujXB2mnpwGQIU22zS/jpefK2mWJSqRg3/48Pe3S RqV9Z+91vN0vKi7xJ34uvpzIvMSS/opBkG/dNtWizAOfBJYjQz+8ucnBMGZ3WS0e wozKpRf6E/aji3X+Sk33V7V2QQy5j4M= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:01 2024 by rpki-client on console-ams.rpki-client.org