$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa File: d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa (raw, json) Hash identifier: op0MTw3yVWq0jIZM3T02Uuqk5nxy3i/Nbar8eGVVpBY= Subject key identifier: 51:DD:0C:90:7F:EA:60:D9:7A:C9:32:E0:4C:A5:44:D2:B3:09:60:97 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F432858473D25F6E2EA2E0E53013C0C80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 198148 IP address blocks: 209.8.144.0/22 maxlen: 24 209.9.2.0/23 maxlen: 24 209.9.72.0/22 maxlen: 24 209.9.104.0/21 maxlen: 24 209.9.112.0/21 maxlen: 24 209.9.128.0/21 maxlen: 24 209.9.208.0/21 maxlen: 24 209.9.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:f6:e2:ea:2e:0e:53:01:3c:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=ca1a5e85-1bff-468e-a5ac-80d13a88b342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:14:ad:3b:c6:57:66:1f:56:7f:4d:3f:ba: 0e:3f:2a:80:6c:2a:f6:9d:83:dd:ce:eb:95:70:1f: 73:9a:5a:88:ce:40:a7:19:45:76:3f:ac:96:d9:33: 54:97:96:3f:19:2d:fa:5a:7f:33:1a:8c:d9:47:ee: 93:cf:26:86:69:ac:17:c8:c5:e5:c8:3f:b3:ef:2f: a7:5d:70:49:ba:0d:32:62:59:e2:14:a0:6b:d4:35: f2:26:61:a4:b1:42:99:9d:36:65:53:b6:a7:53:c3: 4d:d6:47:9a:2b:bb:e2:5c:84:df:f8:65:5c:37:c0: 19:90:7f:88:bf:aa:8f:dd:03:78:a5:54:42:d0:53: 60:41:36:0e:5c:ec:cc:7f:25:ae:2d:ed:4b:be:31: 33:f0:d8:79:d7:d7:9c:98:e7:4b:94:ed:21:6d:88: 30:4d:14:1e:f8:6e:fe:ea:80:e8:aa:55:14:3e:6e: 35:27:49:78:52:eb:8e:a5:c8:96:08:66:24:f3:5e: af:65:6d:fc:1f:b5:15:2f:22:44:69:2b:b3:84:69: 5c:d7:cd:e3:8a:b0:ae:44:85:e0:43:72:f8:8d:13: 12:9f:0f:8a:89:65:d9:fc:57:93:e2:3d:ab:c4:b0: df:89:4d:e6:6c:4d:22:63:e0:32:b4:ea:72:01:71: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DD:0C:90:7F:EA:60:D9:7A:C9:32:E0:4C:A5:44:D2:B3:09:60:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d57ed4d6-9953-3ee9-9ce1-5dc06d702c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.144.0/22 209.9.2.0/23 209.9.72.0/22 209.9.104.0-209.9.119.255 209.9.128.0/21 209.9.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:16:6b:44:35:f2:ec:09:7e:4f:da:16:56:8b:4e:b6:dd:bf: 8c:18:32:36:27:54:92:97:37:a5:a8:68:69:a2:ea:67:ab:43: 44:87:c6:a7:7b:3b:93:5a:85:3b:f6:47:d8:d8:aa:9b:c9:3f: dd:9f:f6:3b:c0:61:90:91:db:7c:ff:90:a3:47:0c:9d:56:dd: 56:1e:26:2d:7a:66:e4:63:fe:e0:42:4d:9c:42:5f:48:a2:67: 21:dd:fe:c2:5a:78:37:41:d4:ce:f1:0f:12:92:68:97:de:a7: 0d:db:40:a9:46:51:3f:13:a7:29:4d:7e:d9:0d:b2:52:e0:11: 91:28:cb:d9:3b:9f:7c:85:e8:4c:4c:ea:33:6a:73:58:ce:32: c1:5c:7a:12:55:29:72:f6:9a:c3:60:ef:7c:1b:3c:e6:70:7c: e0:dd:74:c3:c7:58:81:a0:5d:b8:a7:05:ce:1e:44:29:a1:cf: 32:cc:05:03:94:97:fd:68:6c:eb:34:02:eb:13:e7:da:c5:c8: 48:2c:22:56:34:90:02:fc:ee:ad:93:ad:ec:c9:2b:23:9b:20: 72:0c:22:a3:82:dd:a8:eb:74:18:f8:f2:29:a1:ef:f7:fb:f7: 2d:32:6e:77:de:1f:74:72:7b:96:3b:d2:c7:23:42:fc:0b:55: 1d:74:11:79 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEc9Jfbi6i4OUwE8DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk Y2ExYTVlODUtMWJmZi00NjhlLWE1YWMtODBkMTNhODhiMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH0UrTvGV2YfVn9NP7oOPyqAbCr2nYPdzuuV cB9zmlqIzkCnGUV2P6yW2TNUl5Y/GS36Wn8zGozZR+6TzyaGaawXyMXlyD+z7y+n XXBJug0yYlniFKBr1DXyJmGksUKZnTZlU7anU8NN1keaK7viXITf+GVcN8AZkH+I v6qP3QN4pVRC0FNgQTYOXOzMfyWuLe1LvjEz8Nh519ecmOdLlO0hbYgwTRQe+G7+ 6oDoqlUUPm41J0l4UuuOpciWCGYk816vZW38H7UVLyJEaSuzhGlc183jirCuRIXg Q3L4jRMSnw+KiWXZ/FeT4j2rxLDfiU3mbE0iY+AytOpyAXHqBwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFFHdDJB/6mDZesky4EylRNKzCWCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZDU3ZWQ0ZDYtOTk1My0z ZWU5LTljZTEtNWRjMDZkNzAyYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQC0QiQAwQB 0QkCAwQC0QlIMAwDBAPRCWgDBAPRCXADBAPRCYADBATRCdAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAuxZr RDXy7Al+T9oWVotOtt2/jBgyNidUkpc3pahoaaLqZ6tDRIfGp3s7k1qFO/ZH2Niq m8k/3Z/2O8BhkJHbfP+Qo0cMnVbdVh4mLXpm5GP+4EJNnEJfSKJnId3+wlp4N0HU zvEPEpJol96nDdtAqUZRPxOnKU1+2Q2yUuARkSjL2TuffIXoTEzqM2pzWM4ywVx6 ElUpcvaaw2DvfBs85nB84N10w8dYgaBduKcFzh5EKaHPMswFA5SX/Whs6zQC6xPn 2sXISCwiVjSQAvzurZOt7MkrI5sgcgwio4LdqOt0GPjyKaHv9/v3LTJud94fdHJ7 ljvSxyNC/AtVHXQReQ== -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org