$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e9976d8-9799-3f1a-becf-28082d954585.roa File: 0e9976d8-9799-3f1a-becf-28082d954585.roa (raw, json) Hash identifier: VaETWVwA/ysZMQBzZVxpQxIhfbB7nAwc/RQ27v1sbdE= Subject key identifier: F8:30:8C:CD:A4:E2:5C:95:61:25:22:86:4E:7D:5F:B7:E4:14:5C:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CE6F3FA8CC8454F398A165A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e9976d8-9799-3f1a-becf-28082d954585.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 32787 IP address blocks: 209.200.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:3f:a8:cc:84:54:f3:98:a1:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=f83a6ade-f75e-43e8-a411-30c636456d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:00:a5:a0:54:62:17:45:01:cb:35:49:8d: 7c:46:28:52:68:da:16:41:02:9a:0c:e3:32:de:c4: ed:14:12:be:12:20:17:22:fc:59:ed:b6:ab:f3:ce: 8f:2b:8a:90:e7:21:88:1e:9f:b5:0d:0f:fc:94:1b: 7f:e1:25:5e:19:03:6d:08:ab:95:da:11:90:cf:e4: f8:f6:69:77:f9:8a:a8:77:ef:69:40:fe:b3:3b:39: d2:f2:f9:59:6e:91:0a:7b:71:4f:65:4d:e8:87:55: e8:79:d4:a0:60:cd:b4:5b:de:6c:58:d5:1c:2b:1f: ca:a4:6d:9f:ce:3c:25:6e:7d:05:c4:ee:53:22:51: b4:12:1c:27:16:68:61:48:7f:a7:6d:31:a9:94:74: fe:a8:b8:a8:be:8e:6d:e3:f8:3a:ec:2d:32:2d:79: cc:7b:d8:a1:e4:48:ed:f3:ec:aa:61:86:4c:08:db: dd:0c:84:0e:28:52:cb:7a:51:77:49:fa:e0:07:2a: 7c:84:35:ac:a0:ad:16:03:75:8c:39:f8:14:c7:06: fd:4f:84:08:3b:47:69:7b:13:a2:1c:28:b2:0d:a3: 15:47:e1:4b:fc:cb:d0:48:00:9d:38:16:5e:3d:3d: f3:cb:de:7b:5d:87:67:42:83:e3:97:d2:23:2f:7d: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:30:8C:CD:A4:E2:5C:95:61:25:22:86:4E:7D:5F:B7:E4:14:5C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e9976d8-9799-3f1a-becf-28082d954585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:10:b6:ac:cb:2b:a9:e8:ee:0e:8d:ed:95:eb:48:14:aa:24: 2b:f3:f1:82:84:b0:2f:a1:7e:1e:cb:9f:b4:77:ef:63:a0:69: 8b:1e:28:52:27:bf:e2:66:32:c3:80:3f:c5:4e:f7:da:4b:b2: 55:7c:03:48:b8:e1:c9:94:c9:16:79:79:17:6c:39:1d:d3:dd: 77:0a:27:5a:50:33:63:4d:30:ec:de:95:30:c6:7e:a5:a2:01: 21:b7:ef:7d:a5:7d:bc:5b:7e:97:84:6d:31:4c:f9:a6:17:10: fa:78:93:9a:9f:5a:ed:89:f8:02:f8:c7:dc:4e:3f:d4:70:4f: 87:3b:a7:76:dd:cb:ef:7c:fe:82:8d:c6:f9:ec:e5:5a:b0:87: 2b:b1:24:00:aa:55:7d:70:f2:06:93:8e:26:8b:79:c0:c0:30: 56:de:52:93:43:b0:21:cf:25:bf:e4:b7:8b:b6:e7:65:14:28: 33:2b:cc:29:af:5b:aa:c3:96:e6:83:04:de:54:e2:6d:2d:50: d2:c0:91:f0:08:69:11:f8:c1:40:3d:6d:eb:ce:c1:2c:29:f2: 14:64:c8:c4:aa:31:ba:b9:53:e7:5d:5b:fb:b4:7e:83:aa:4b: eb:4e:f4:3a:29:d8:9c:63:cc:52:ab:ce:1d:8c:47:1d:4c:75: ea:1f:13:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObz+ozIRU85ihZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZjgzYTZhZGUtZjc1ZS00M2U4LWE0MTEtMzBjNjM2NDU2ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5kApaBUYhdFAcs1SY18RihSaNoWQQKaDOMy 3sTtFBK+EiAXIvxZ7bar886PK4qQ5yGIHp+1DQ/8lBt/4SVeGQNtCKuV2hGQz+T4 9ml3+Yqod+9pQP6zOznS8vlZbpEKe3FPZU3oh1XoedSgYM20W95sWNUcKx/KpG2f zjwlbn0FxO5TIlG0EhwnFmhhSH+nbTGplHT+qLiovo5t4/g67C0yLXnMe9ih5Ejt 8+yqYYZMCNvdDIQOKFLLelF3SfrgByp8hDWsoK0WA3WMOfgUxwb9T4QIO0dpexOi HCiyDaMVR+FL/MvQSACdOBZePT3zy957XYdnQoPjl9IjL315WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgwjM2k4lyVYSUihk59X7fkFFzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU5OTc2ZDgtOTc5OS0z ZjFhLWJlY2YtMjgwODJkOTU0NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcQtqzLK6no7g6N7ZXrSBSqJCvz8YKEsC+hfh7Ln7R372OgaYseKFIn v+JmMsOAP8VO99pLslV8A0i44cmUyRZ5eRdsOR3T3XcKJ1pQM2NNMOzelTDGfqWi ASG3732lfbxbfpeEbTFM+aYXEPp4k5qfWu2J+AL4x9xOP9RwT4c7p3bdy+98/oKN xvns5VqwhyuxJACqVX1w8gaTjiaLecDAMFbeUpNDsCHPJb/kt4u252UUKDMrzCmv W6rDluaDBN5U4m0tUNLAkfAIaRH4wUA9bevOwSwp8hRkyMSqMbq5U+ddW/u0foOq S+tO9Dop2JxjzFKrzh2MRx1MdeofEyc= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:18 2024 by rpki-client on console-fra.rpki-client.org