$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa File: cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa (raw, json) Hash identifier: 95Xkzu+j9V22VmnbL79dfvV2XVjMcrGlSJQMrd0xuIc= Subject key identifier: 98:56:CC:99:B0:2E:D4:43:B4:71:B7:B1:FE:31:0F:8C:A1:AD:A0:A1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858475910C84606407F74A9907580 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 13576 IP address blocks: 209.151.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:c8:46:06:40:7f:74:a9:90:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=a50d546d-2648-4eca-a31a-1c141967db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:92:e0:ce:aa:c6:91:70:28:85:76:c3:09: f3:83:cd:c8:54:24:63:61:06:ca:40:ed:62:33:3d: 77:f8:23:e2:5e:c5:db:b7:48:81:43:11:68:63:35: db:e4:62:a6:3e:47:44:bc:cf:17:5f:4a:74:fa:20: e3:4c:2a:33:31:3f:7f:2d:4c:93:ac:95:21:09:a1: 62:38:91:16:78:e7:aa:12:88:69:ed:22:44:24:99: 01:9f:f3:3b:2f:14:c4:4f:b0:91:f0:c7:e9:b8:b4: 78:5d:ed:36:e1:bb:6f:d3:81:6e:e4:0c:25:82:08: 97:fb:be:b9:a5:de:a8:e6:c3:7b:01:04:73:04:92: c3:c0:7f:d0:91:8d:07:3c:f1:19:3d:0a:21:2d:0c: e1:03:95:5d:91:11:98:7d:21:07:42:0d:d7:cb:a7: d8:41:f6:cb:f7:d2:06:c2:c1:fa:ac:24:90:01:65: 6f:f0:f9:4c:53:32:6b:22:a4:64:ac:61:2a:8c:28: 4a:1d:b8:0b:33:6f:9c:56:6f:29:98:ee:71:11:35: 19:c5:7a:92:1e:86:d6:ce:df:67:19:db:2f:5a:21: 4b:0d:f2:b1:d0:b6:fd:b6:36:de:31:5d:f1:6d:7e: 62:88:77:48:30:35:96:62:08:1f:9d:10:ae:c6:ca: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:56:CC:99:B0:2E:D4:43:B4:71:B7:B1:FE:31:0F:8C:A1:AD:A0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:00:18:74:e7:9b:b9:ba:d2:6f:5c:93:82:64:53:1f:9e:bb: 84:4a:6d:cc:b8:6f:ef:ff:46:7c:47:23:b0:03:18:bc:ee:73: fd:24:c8:78:dc:52:5b:d7:0c:69:0c:a2:c4:da:74:3c:9e:1d: f7:55:49:e1:68:92:e4:c2:7d:14:3b:de:2c:99:b7:93:d9:a4: 3a:da:c8:e8:20:15:8b:52:c3:e8:83:b6:79:af:ca:69:6e:5d: 53:f7:84:d9:ea:3c:24:2e:fc:02:5e:c6:3f:4a:d5:a4:1e:1c: 5d:6c:81:a1:f8:17:72:1a:7c:6d:9f:80:07:e9:e5:46:aa:19: 81:f8:20:af:43:b8:d0:0f:ed:36:98:b9:d8:62:ae:6c:b3:9c: ab:3e:c9:f0:b9:03:51:6e:32:df:85:31:95:bc:5d:e1:4b:23: 27:7b:0f:85:1d:2e:a6:00:15:a2:4f:30:62:d0:92:9b:8b:49: c9:03:4d:96:1f:db:cb:63:fb:64:c6:25:8c:34:d3:23:fd:9c: 21:be:61:29:7b:b3:70:cb:1e:66:d5:aa:e6:f3:4a:7e:97:89: eb:71:5e:c5:e8:e9:0c:e8:db:6c:19:aa:40:9b:3c:e8:23:b7: f5:02:0f:61:0f:07:60:48:2a:1a:2d:24:dd:a1:24:43:b2:47: e0:b3:6c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMhGBkB/dKmQdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk YTUwZDU0NmQtMjY0OC00ZWNhLWEzMWEtMWMxNDE5NjdkYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkeS4M6qxpFwKIV2wwnzg83IVCRjYQbKQO1i Mz13+CPiXsXbt0iBQxFoYzXb5GKmPkdEvM8XX0p0+iDjTCozMT9/LUyTrJUhCaFi OJEWeOeqEohp7SJEJJkBn/M7LxTET7CR8MfpuLR4Xe024btv04Fu5AwlggiX+765 pd6o5sN7AQRzBJLDwH/QkY0HPPEZPQohLQzhA5VdkRGYfSEHQg3Xy6fYQfbL99IG wsH6rCSQAWVv8PlMUzJrIqRkrGEqjChKHbgLM2+cVm8pmO5xETUZxXqSHobWzt9n GdsvWiFLDfKx0Lb9tjbeMV3xbX5iiHdIMDWWYggfnRCuxsrlZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhWzJmwLtRDtHG3sf4xD4yhraChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2ZiMjU5MzgtMWZlOC0z ZmVmLThkMzctYjdkMWNkZGFmYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ze1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoAGHTnm7m60m9ck4JkUx+eu4RKbcy4b+//RnxHI7ADGLzuc/0kyHjc UlvXDGkMosTadDyeHfdVSeFokuTCfRQ73iyZt5PZpDrayOggFYtSw+iDtnmvymlu XVP3hNnqPCQu/AJexj9K1aQeHF1sgaH4F3IafG2fgAfp5UaqGYH4IK9DuNAP7TaY udhirmyznKs+yfC5A1FuMt+FMZW8XeFLIyd7D4UdLqYAFaJPMGLQkpuLSckDTZYf 28tj+2TGJYw00yP9nCG+YSl7s3DLHmbVqubzSn6XietxXsXo6Qzo22wZqkCbPOgj t/UCD2EPB2BIKhotJN2hJEOyR+CzbFA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:35 2024 by rpki-client on console-ams.rpki-client.org