$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a01a7685-6174-3d67-828b-f6987652b9fd.roa File: a01a7685-6174-3d67-828b-f6987652b9fd.roa (raw, json) Hash identifier: 0rI00JHFMvIgXfIpCTCA9DAb4bNv8AVVNwLIWwvHJ70= Subject key identifier: 97:8A:25:38:9F:23:06:D5:FE:B7:7B:FD:FB:DF:95:8A:8B:25:2C:51 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F43285847A99894A6DE8FC1A91C624F00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a01a7685-6174-3d67-828b-f6987652b9fd.roa Signing time: Fri 25 Oct 2024 21:19:00 +0000 ROA not before: Fri 25 Oct 2024 21:19:00 +0000 ROA not after: Thu 23 Jan 2025 22:19:00 +0000 asID: 2153 IP address blocks: 209.129.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a9:98:94:a6:de:8f:c1:a9:1c:62:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Oct 25 21:19:00 2024 GMT Not After : Jan 23 22:19:00 2025 GMT Subject: CN=08eb8666-8c48-4950-b62c-3e75c19e90d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:9a:84:55:b3:3c:dd:17:c9:43:65:7e:75: 0d:ed:41:94:66:16:80:14:74:b1:ba:fd:de:7e:b0: b9:4b:eb:35:a2:85:fd:94:72:a2:14:14:4d:17:3d: 8d:12:64:27:df:8c:48:88:9d:63:5d:57:88:5f:ca: 00:c0:6b:90:0b:1d:2a:a3:b9:03:e5:6a:bc:84:e5: dd:d1:12:d8:4f:b8:24:36:3c:1f:74:fc:f2:85:ae: d7:84:d7:be:3e:55:3b:e4:bd:fd:fa:eb:da:57:86: 4e:64:18:60:8d:7f:0b:c7:bf:56:66:32:91:39:c2: 08:20:f4:3e:e4:0d:be:94:ac:cf:e3:4e:da:ec:20: 67:da:7d:ff:56:cf:32:df:56:4a:8d:16:5d:ea:2e: 06:0f:c4:8c:2d:41:c6:12:fc:84:8f:5c:92:00:73: 3c:9a:77:8a:0c:00:99:15:55:9d:b7:d6:21:f7:8f: 1b:4f:c8:4c:83:15:ff:ab:29:5b:b6:9e:0a:05:8e: f5:d4:47:d2:d6:d1:56:65:01:4e:d7:7c:d4:d6:df: a0:f2:f6:f4:1e:5b:26:ea:7d:6f:06:08:7c:73:ea: 16:d7:14:6e:9b:64:21:d4:89:6e:d2:15:0d:73:44: 2b:a6:b7:0c:90:2d:1c:48:5a:8f:59:05:02:ad:d5: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8A:25:38:9F:23:06:D5:FE:B7:7B:FD:FB:DF:95:8A:8B:25:2C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a01a7685-6174-3d67-828b-f6987652b9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5d:79:7b:e0:ea:4f:99:ca:9b:ee:b8:77:7c:ff:df:e6:fb: 3a:89:71:ae:ca:14:0c:54:f9:67:e9:1d:5d:b2:5b:3c:b3:9d: f4:a1:8b:47:86:9f:a4:6a:12:d0:88:c8:fd:fa:96:b0:8a:80: 76:3c:9a:f8:73:97:7c:c7:1b:d8:44:67:a0:64:e9:ff:43:d5: 08:15:e9:a1:fe:77:db:4e:80:ec:3e:9b:5e:a1:52:7a:71:89: 28:d6:e2:d1:23:7c:34:b9:d4:e3:d7:d3:69:2c:c9:bc:4b:e6: 88:f7:9a:89:8d:56:3a:e6:c6:80:57:81:42:30:a2:c9:31:f6: d5:e3:3d:33:e7:ee:af:7f:71:e5:01:31:f5:df:90:fc:26:a4: 55:46:b7:f9:40:22:ad:b7:bf:8e:d5:bc:b4:c9:ed:65:7a:1e: 90:3f:91:ff:bc:fe:5a:e5:b3:f2:ec:ec:32:d8:bc:f9:5a:64: bc:80:23:b3:28:f2:a5:f7:fa:82:d9:6d:36:44:9b:78:2d:8c: 3d:3e:a6:f0:18:8b:99:1e:8c:1d:28:9e:c4:b3:a9:b9:81:e9: 5b:e3:cd:7b:ad:32:78:0a:9c:9c:a9:94:53:fd:0c:97:f7:73: 80:56:be:7b:2b:8b:68:13:61:4d:b1:18:9e:93:e5:12:49:20: a4:27:09:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEepmJSm3o/BqRxiTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI0MTAyNTIxMTkwMFoXDTI1MDEyMzIyMTkwMFowLzEtMCsGA1UEAxMk MDhlYjg2NjYtOGM0OC00OTUwLWI2MmMtM2U3NWMxOWU5MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4GahFWzPN0XyUNlfnUN7UGUZhaAFHSxuv3e frC5S+s1ooX9lHKiFBRNFz2NEmQn34xIiJ1jXVeIX8oAwGuQCx0qo7kD5Wq8hOXd 0RLYT7gkNjwfdPzyha7XhNe+PlU75L39+uvaV4ZOZBhgjX8Lx79WZjKROcIIIPQ+ 5A2+lKzP407a7CBn2n3/Vs8y31ZKjRZd6i4GD8SMLUHGEvyEj1ySAHM8mneKDACZ FVWdt9Yh948bT8hMgxX/qylbtp4KBY711EfS1tFWZQFO13zU1t+g8vb0Hlsm6n1v Bgh8c+oW1xRum2Qh1Ilu0hUNc0QrprcMkC0cSFqPWQUCrdUKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeKJTifIwbV/rd7/fvflYqLJSxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYTAxYTc2ODUtNjE3NC0z ZDY3LTgyOGItZjY5ODc2NTJiOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBdeXvg6k+ZypvuuHd8/9/m+zqJca7KFAxU+WfpHV2yWzyznfShi0eG n6RqEtCIyP36lrCKgHY8mvhzl3zHG9hEZ6Bk6f9D1QgV6aH+d9tOgOw+m16hUnpx iSjW4tEjfDS51OPX02ksybxL5oj3momNVjrmxoBXgUIwoskx9tXjPTPn7q9/ceUB MfXfkPwmpFVGt/lAIq23v47VvLTJ7WV6HpA/kf+8/lrls/Ls7DLYvPlaZLyAI7Mo 8qX3+oLZbTZEm3gtjD0+pvAYi5kejB0onsSzqbmB6VvjzXutMngKnJyplFP9DJf3 c4BWvnsri2gTYU2xGJ6T5RJJIKQnCVY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org