$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa File: 938a1a8b-5d4c-3f95-8273-2135590b1d77.roa (raw, json) Hash identifier: KmEMZfeVXahA03py6XJ3jo/entnLDpCSNoIzCtEIGWg= Subject key identifier: 5D:4E:C0:A8:92:FE:EE:B9:1E:7C:6B:E6:9F:69:EF:1C:92:50:36:F8 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F43285847DC64AFE50E8209A2F1653240 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 0 IP address blocks: 204.9.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:af:e5:0e:82:09:a2:f1:65:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=72906c9e-cc1b-4fd8-958a-f7a0cbe500fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:94:ab:1d:5c:1d:15:52:99:ff:90:68:65: cc:27:8a:7e:ff:60:27:44:55:0d:50:55:82:32:38: 33:a9:14:08:e2:91:70:eb:a2:e1:8f:f3:fa:53:c1: 62:97:2f:8b:8f:b3:b2:b4:6e:96:62:82:43:24:bb: b2:5d:70:9d:55:3f:d5:66:5e:77:2a:a5:64:39:57: 97:f9:a5:7b:04:2c:7d:47:a9:f8:44:c2:d8:e3:53: 52:84:b7:44:95:a4:50:6e:8a:74:39:ba:85:15:43: 1e:34:5f:9c:e9:02:89:dc:78:21:d0:08:4d:8c:ac: d9:52:92:a9:1c:d6:0c:e2:a8:ef:26:32:8f:1d:6d: 9a:65:4f:de:8e:98:8a:3b:0d:32:d6:f0:e5:11:1d: ee:37:ea:d5:0b:ed:26:7d:dc:10:88:ea:6c:30:1f: af:d2:f7:19:da:c6:b6:55:76:18:c8:71:d6:10:e6: 87:8b:8b:74:27:d7:dd:8f:b7:d0:89:80:3b:0b:03: 63:08:68:0b:4b:57:7f:2a:c2:4b:17:6c:93:17:2d: c1:ca:04:14:a2:a0:bc:d9:6c:7c:22:4a:71:d8:9c: 4c:f2:c3:de:65:4a:08:2f:f7:19:08:c4:d8:da:bf: 45:2f:87:bd:05:09:5c:66:32:8a:90:87:43:66:c7: 3e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:C0:A8:92:FE:EE:B9:1E:7C:6B:E6:9F:69:EF:1C:92:50:36:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/938a1a8b-5d4c-3f95-8273-2135590b1d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 204.9.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:48:40:82:f3:09:e1:eb:7a:3c:90:8d:8a:45:ab:2a:5d:4d: e9:4d:ca:f4:6b:46:2c:fe:c5:c8:b0:d3:44:d2:76:4d:6b:e1: e9:a3:09:ac:88:1c:b5:b6:60:19:28:70:15:ce:e1:48:55:55: d2:3a:50:9f:14:d6:5c:90:bb:99:1e:65:4b:9e:30:e1:1f:2e: 87:6f:ba:68:83:e1:d6:2f:16:55:26:74:e8:71:4a:a9:ba:ab: 5e:9f:ea:b3:81:cf:ab:5a:d6:1d:ca:14:28:57:b0:34:63:e8: 48:4a:27:db:67:f8:40:a3:dc:4f:ef:cb:53:3e:2e:fc:9e:a4: 6a:37:56:c9:b4:39:b8:b6:e8:5b:5a:6e:7d:d7:9c:dc:43:c7: 6c:2c:ad:c7:df:80:e5:9b:66:dc:9f:d6:42:9a:cf:da:07:dc: 61:17:09:9f:d9:d7:24:28:58:a1:e1:f0:cd:35:65:ad:e6:be: 55:db:75:31:fd:82:63:88:37:b9:91:4c:2d:37:a7:93:11:f5: 0e:41:cd:e6:36:a9:0c:63:d8:9f:ba:1f:7c:58:9b:d9:1d:91: 8c:22:57:25:ef:4b:d5:de:f1:02:ec:a0:c0:3d:c0:ea:32:24: e7:e3:4b:24:56:03:cd:96:2a:28:21:84:4e:64:02:a8:2d:67: 0d:c6:f6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZK/lDoIJovFlMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk NzI5MDZjOWUtY2MxYi00ZmQ4LTk1OGEtZjdhMGNiZTUwMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYSUqx1cHRVSmf+QaGXMJ4p+/2AnRFUNUFWC MjgzqRQI4pFw66Lhj/P6U8Fily+Lj7OytG6WYoJDJLuyXXCdVT/VZl53KqVkOVeX +aV7BCx9R6n4RMLY41NShLdElaRQbop0ObqFFUMeNF+c6QKJ3Hgh0AhNjKzZUpKp HNYM4qjvJjKPHW2aZU/ejpiKOw0y1vDlER3uN+rVC+0mfdwQiOpsMB+v0vcZ2sa2 VXYYyHHWEOaHi4t0J9fdj7fQiYA7CwNjCGgLS1d/KsJLF2yTFy3BygQUoqC82Wx8 Ikpx2JxM8sPeZUoIL/cZCMTY2r9FL4e9BQlcZjKKkIdDZsc+uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1OwKiS/u65Hnxr5p9p7xySUDb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvOTM4YTFhOGItNWQ0Yy0z Zjk1LTgyNzMtMjEzNTU5MGIxZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJIQILzCeHrejyQjYpFqypdTelNyvRrRiz+xciw00TSdk1r4emjCayI HLW2YBkocBXO4UhVVdI6UJ8U1lyQu5keZUueMOEfLodvumiD4dYvFlUmdOhxSqm6 q16f6rOBz6ta1h3KFChXsDRj6EhKJ9tn+ECj3E/vy1M+LvyepGo3Vsm0Obi26Fta bn3XnNxDx2wsrcffgOWbZtyf1kKaz9oH3GEXCZ/Z1yQoWKHh8M01Za3mvlXbdTH9 gmOIN7mRTC03p5MR9Q5BzeY2qQxj2J+6H3xYm9kdkYwiVyXvS9Xe8QLsoMA9wOoy JOfjSyRWA82WKighhE5kAqgtZw3G9gg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:49 2024 by rpki-client on console-ams.rpki-client.org