$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa File: 78b046ad-708c-347f-a46d-fd7dd43f4f00.roa (raw, json) Hash identifier: nwDihI6RQGeYOLJahmAT+QINiJcxGOWQOrqwu4a81eI= Subject key identifier: 37:C9:FB:81:48:98:85:BF:2B:4E:85:A5:B7:EB:35:24:CE:EE:F4:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CA3F89805551046421AB3EA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 32787 IP address blocks: 209.200.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:89:80:55:51:04:64:21:ab:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=fcf19e95-4507-4aee-9a5f-a878516c773a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a0:a9:22:1e:46:19:08:50:3f:20:60:09:21: 00:11:73:35:97:9f:b0:6e:98:2c:aa:28:37:18:7b: 1e:46:bb:6f:3d:b5:e6:95:de:ee:73:7a:fe:c3:9d: 92:1f:25:c4:5c:85:f0:99:f3:43:81:4e:f6:17:15: 1f:07:f5:e7:98:fb:21:66:85:e5:2c:f4:d6:de:c3: 2b:ed:1d:cf:07:82:0e:c8:e5:79:49:54:14:32:43: ae:14:a6:3f:fb:c3:7b:79:cb:ec:b3:e3:6a:9a:6e: 88:be:50:db:24:b1:4a:ed:1c:ee:e6:9f:15:6e:20: ae:c7:2b:dd:c6:4f:8c:14:a5:6f:b3:f3:f9:b8:66: 2b:23:9d:c1:ad:51:a1:34:a3:6d:eb:45:2d:1f:5e: 5d:68:7a:93:df:3b:94:ed:96:dc:11:43:e6:63:96: a9:00:c5:a8:84:99:a9:70:d0:e2:41:28:3f:cd:27: 66:26:44:63:ea:00:a8:68:9d:ef:c3:5a:c9:15:87: b4:5b:ff:d1:e9:60:23:7d:85:a5:1f:46:82:44:78: c5:b4:02:70:1c:03:8f:58:31:cf:15:fa:e9:a7:3e: 9c:54:80:a1:d6:3e:e9:3f:ae:77:c4:8c:43:31:01: 73:d4:a9:a6:c3:9d:f8:f4:a3:c8:d1:70:5a:56:c8: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C9:FB:81:48:98:85:BF:2B:4E:85:A5:B7:EB:35:24:CE:EE:F4:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ae:a0:c4:8d:d0:6c:c9:2d:14:b8:d5:70:e1:07:d2:72:b7: d8:8b:33:f2:55:15:7b:41:46:7e:2d:20:88:a2:58:b8:e4:de: 49:6c:a8:55:90:d1:00:ec:03:ae:ef:62:2f:fe:2e:6a:9c:c3: 8b:f7:46:ae:aa:19:b8:30:bd:98:da:27:53:7a:c6:67:b1:a2: 60:17:bd:77:a7:9e:3d:74:05:0e:fc:7c:6c:6c:ab:f5:4f:cc: 09:62:90:bc:a6:fd:44:cd:8c:a0:84:71:70:e5:a6:46:cc:28: a6:2f:bb:9c:1c:5f:4c:71:8b:32:59:d9:a7:a1:a8:c7:53:b2: 9f:0b:0e:65:c0:28:da:d5:69:7d:1f:7d:48:70:cc:dc:4f:11: c9:50:a0:32:78:9a:35:95:6a:1b:9f:fe:85:9a:19:61:48:09: bb:e2:f0:92:33:5c:9b:58:77:c6:02:08:a4:29:5a:d3:4c:3c: c7:99:2c:58:2c:cd:75:57:04:2a:22:8d:d8:6e:8b:a6:40:ed: cc:2a:19:f1:12:6c:1a:da:51:93:60:e6:a1:d6:6c:02:dd:14: 91:d9:ae:53:4e:36:d3:74:e1:70:e5:b5:c6:75:0d:9d:e2:e6: 7a:75:3b:f4:5a:a8:2d:ba:30:cc:ad:ab:77:a0:4f:50:db:6a: 98:a4:6b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4mAVVEEZCGrPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmNmMTllOTUtNDUwNy00YWVlLTlhNWYtYTg3ODUxNmM3NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaCpIh5GGQhQPyBgCSEAEXM1l5+wbpgsqig3 GHseRrtvPbXmld7uc3r+w52SHyXEXIXwmfNDgU72FxUfB/XnmPshZoXlLPTW3sMr 7R3PB4IOyOV5SVQUMkOuFKY/+8N7ecvss+Nqmm6IvlDbJLFK7Rzu5p8VbiCuxyvd xk+MFKVvs/P5uGYrI53BrVGhNKNt60UtH15daHqT3zuU7ZbcEUPmY5apAMWohJmp cNDiQSg/zSdmJkRj6gCoaJ3vw1rJFYe0W//R6WAjfYWlH0aCRHjFtAJwHAOPWDHP Ffrppz6cVICh1j7pP653xIxDMQFz1Kmmw5349KPI0XBaVsi8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfJ+4FImIW/K06FpbfrNSTO7vRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzhiMDQ2YWQtNzA4Yy0z NDdmLWE0NmQtZmQ3ZGQ0M2Y0ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHquoMSN0GzJLRS41XDhB9Jyt9iLM/JVFXtBRn4tIIiiWLjk3klsqFWQ 0QDsA67vYi/+Lmqcw4v3Rq6qGbgwvZjaJ1N6xmexomAXvXennj10BQ78fGxsq/VP zAlikLym/UTNjKCEcXDlpkbMKKYvu5wcX0xxizJZ2aehqMdTsp8LDmXAKNrVaX0f fUhwzNxPEclQoDJ4mjWVahuf/oWaGWFICbvi8JIzXJtYd8YCCKQpWtNMPMeZLFgs zXVXBCoijdhui6ZA7cwqGfESbBraUZNg5qHWbALdFJHZrlNONtN04XDltcZ1DZ3i 5np1O/RaqC26MMytq3egT1Dbapika0U= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:03 2024 by rpki-client on console-fra.rpki-client.org