$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa File: 1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa (raw, json) Hash identifier: h2EvMusw3hH7fekLreu3Ozts6GouMTVvmuhHPRpNEAc= Subject key identifier: B5:F9:88:E8:3B:79:57:B1:AE:41:F0:1E:F7:06:83:69:51:B5:59:B3 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584734C88A304D5B356315130540 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 20940 IP address blocks: 209.8.112.0/24 maxlen: 24 209.8.115.0/24 maxlen: 24 209.8.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c8:8a:30:4d:5b:35:63:15:13:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=785837f3-7ecb-488d-9d59-06af23c8502a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:8c:97:da:c1:59:61:4c:8a:7e:20:bd:66: ff:3b:4d:08:e7:40:ba:1a:31:b8:78:b6:49:c8:c5: ec:9b:8e:4b:bf:44:7f:32:55:a9:5a:8f:bf:64:c0: 22:c9:dc:38:a6:5b:4b:c5:67:4c:03:3f:60:37:a3: ca:d4:3a:03:71:4c:90:fa:1e:e9:6e:89:3e:d1:77: bc:95:0d:10:3f:48:49:ff:41:4a:20:b7:f9:33:aa: 48:a3:04:f0:67:81:c3:53:bb:0a:0f:60:ea:c3:4c: a2:c9:4e:eb:cc:dc:22:f1:22:3c:ff:83:75:40:75: 8d:62:78:55:fc:77:5c:e7:55:dc:e7:97:86:69:85: fc:7d:54:e1:7a:b9:17:d5:37:a6:37:fd:56:29:5c: 75:a6:cd:cc:51:b1:c7:c1:5c:c3:1b:32:08:5a:52: 2c:a9:e4:4d:72:3f:bb:0d:1d:a6:d2:2a:ff:46:67: 4b:e4:f7:1c:18:2b:f1:62:5e:50:0c:e3:d5:1a:1d: 10:03:9b:85:9c:6d:8f:a0:24:a7:2e:24:1f:a0:78: d8:94:57:ad:4c:6a:17:ea:21:89:d7:9a:d0:6e:36: 41:24:d9:96:37:dc:2b:49:c6:08:c4:49:8e:a5:5e: 51:e7:18:ae:26:d3:5a:29:fe:fa:7c:7c:49:45:ea: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F9:88:E8:3B:79:57:B1:AE:41:F0:1E:F7:06:83:69:51:B5:59:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1d76a00b-5726-3dd4-9132-9abacfa2fff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.112.0/24 209.8.115.0/24 209.8.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:3c:69:65:1b:14:f8:68:52:f4:5d:fe:75:d6:e2:64:9d:8b: 5c:c7:d3:db:74:7d:03:47:29:59:7d:0f:a3:15:fc:e7:7f:90: 14:b6:86:12:72:0e:15:71:be:06:44:de:14:99:f7:fe:d9:da: a1:97:d9:fd:e8:bb:29:97:54:3c:ea:4d:41:01:c7:6e:25:c3: 26:e8:e0:47:02:9d:74:33:90:b0:39:18:3b:ef:44:1a:32:8d: 5f:5b:64:f7:33:c8:81:e1:45:41:30:33:88:2c:1d:ad:c3:23: dd:ee:ad:63:47:8d:94:b3:42:e8:aa:78:c9:51:af:20:2a:a7: 64:6e:9b:db:dc:61:9f:f0:e5:d5:d0:bf:0a:06:23:a8:ce:0e: 5c:79:f0:a0:5a:3a:6e:13:cd:2d:fd:a2:26:5e:f0:82:93:f7: ff:6b:b1:fd:db:9c:4e:fb:45:5d:5f:06:0a:c4:01:4f:7e:a2: 4c:79:7e:4d:0f:4e:81:ca:ad:13:a6:b0:7d:15:a5:c6:7a:ec: 8f:20:1a:ae:05:47:ba:5e:f6:a4:f6:bf:07:7e:53:cf:37:02: d7:fc:81:2b:09:53:e0:32:a5:30:ee:68:57:08:ed:4c:65:e8: dc:d1:5b:fb:7d:6a:16:1d:b6:51:e9:52:5e:48:2a:cb:1f:9b: 5c:87:54:cc -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEc0yIowTVs1YxUTBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk Nzg1ODM3ZjMtN2VjYi00ODhkLTlkNTktMDZhZjIzYzg1MDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbWMl9rBWWFMin4gvWb/O00I50C6GjG4eLZJ yMXsm45Lv0R/MlWpWo+/ZMAiydw4pltLxWdMAz9gN6PK1DoDcUyQ+h7pbok+0Xe8 lQ0QP0hJ/0FKILf5M6pIowTwZ4HDU7sKD2Dqw0yiyU7rzNwi8SI8/4N1QHWNYnhV /Hdc51Xc55eGaYX8fVTherkX1TemN/1WKVx1ps3MUbHHwVzDGzIIWlIsqeRNcj+7 DR2m0ir/RmdL5PccGCvxYl5QDOPVGh0QA5uFnG2PoCSnLiQfoHjYlFetTGoX6iGJ 15rQbjZBJNmWN9wrScYIxEmOpV5R5xiuJtNaKf76fHxJReoDHwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLX5iOg7eVexrkHwHvcGg2lRtVmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMWQ3NmEwMGItNTcyNi0z ZGQ0LTkxMzItOWFiYWNmYTJmZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0QhwAwQA 0QhzAwQA0Qh2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALU8aWUbFPhoUvRd/nXW4mSdi1zH09t0fQNHKVl9 D6MV/Od/kBS2hhJyDhVxvgZE3hSZ9/7Z2qGX2f3ouymXVDzqTUEBx24lwybo4EcC nXQzkLA5GDvvRBoyjV9bZPczyIHhRUEwM4gsHa3DI93urWNHjZSzQuiqeMlRryAq p2Rum9vcYZ/w5dXQvwoGI6jODlx58KBaOm4TzS39oiZe8IKT9/9rsf3bnE77RV1f BgrEAU9+okx5fk0PToHKrROmsH0VpcZ67I8gGq4FR7pe9qT2vwd+U883Atf8gSsJ U+AypTDuaFcI7Uxl6NzRW/t9ahYdtlHpUl5IKssfm1yHVMw= -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:56 2024 by rpki-client on console-fra.rpki-client.org