$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa File: f666512f-be5f-3abc-95ac-f35622b56179.roa (raw, json) Hash identifier: 98HMNxRCLnBhSWTNzgd69pJb9vtPaqLe/sB9mqdQ51Q= Subject key identifier: 19:28:BE:A9:71:62:B9:62:45:C6:51:AF:6E:94:D8:1D:8E:32:B2:81 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F43285847802DA7FEB3C2852B06EA8A00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa Signing time: Fri 11 Oct 2024 01:15:25 +0000 ROA not before: Fri 11 Oct 2024 01:15:25 +0000 ROA not after: Thu 09 Jan 2025 02:15:25 +0000 asID: 2152 IP address blocks: 209.129.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:2d:a7:fe:b3:c2:85:2b:06:ea:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Oct 11 01:15:25 2024 GMT Not After : Jan 9 02:15:25 2025 GMT Subject: CN=7e13a90e-9383-4db5-8fd3-a5ff4684d129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:ba:de:fb:dd:d0:dc:26:0f:1c:16:2b:9e: 44:68:33:fc:04:e9:ed:25:53:32:dd:b2:8b:d2:b6: 72:16:c2:75:2f:5d:1a:e1:02:55:48:17:1b:70:a1: ac:cc:aa:b4:24:a1:9a:48:19:85:23:15:7b:f5:2d: 02:86:08:27:d2:08:d8:62:39:72:fb:5b:dc:52:50: 05:ec:1d:57:c6:5c:67:c1:13:0c:49:4c:57:92:08: 34:9a:e8:91:97:f1:00:78:9d:c2:10:ec:fd:35:12: 77:ae:46:e0:5f:48:5e:f4:8e:eb:76:8e:88:a4:ed: 7b:92:6f:65:79:77:8f:cd:8c:62:1f:2f:c9:91:08: cf:45:e7:93:60:e5:8b:06:ce:08:8e:1d:2c:08:d3: fd:f0:b3:6a:18:8a:89:f9:85:fc:4c:01:6d:ab:09: 1e:07:12:97:4c:98:75:00:01:94:f2:cb:91:56:f5: 6f:91:54:3e:55:57:9d:9d:58:7e:6b:f5:4f:e9:0d: c6:7d:fa:9a:a3:a3:e7:f9:61:73:da:65:c5:21:a0: 8d:c3:5e:24:d4:c1:14:e5:bd:7c:31:e6:63:94:ea: ed:33:29:c7:01:ac:f9:5c:ed:68:40:6f:28:46:1b: 94:ce:99:da:8d:6a:88:ec:4b:18:82:55:68:b5:b2: a9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:28:BE:A9:71:62:B9:62:45:C6:51:AF:6E:94:D8:1D:8E:32:B2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1b:25:e5:c0:43:20:7f:31:bf:b1:fd:fe:c3:7f:ee:77:b0: 06:b0:b5:8a:f0:9c:6a:24:5e:7e:be:ab:71:ee:87:1c:ae:e1: f1:9d:a7:53:cb:19:8c:90:62:b3:7b:92:01:a3:60:ef:eb:29: 91:19:00:0b:7d:99:2e:d3:be:5e:07:00:73:a3:bf:1e:4b:e3: 9b:a8:d8:dc:9f:7e:ea:6d:7b:49:72:88:cb:e5:46:8c:b0:02: 6c:20:48:9e:c4:e9:22:a0:84:0b:f5:0b:22:32:4f:39:ec:eb: f2:12:24:ed:70:4d:0b:e6:22:03:5c:05:7b:1f:1d:16:ce:75: f3:55:7e:c0:a9:9d:c2:c6:80:91:86:9c:b7:1e:0c:30:6c:d8: c8:be:55:4a:32:ff:dc:9f:69:b9:60:3a:70:b7:e4:f7:07:d8: 7c:90:04:18:79:d0:0e:9c:74:7d:3c:67:ec:e7:77:5a:55:57: 53:3c:60:03:58:26:fc:49:7e:14:44:41:87:ee:f8:72:7b:8f: ea:ca:ad:23:55:13:b2:12:76:05:d1:7e:90:e8:6b:02:40:4e: b5:d3:61:30:bc:ed:8f:9b:05:92:22:a5:d0:36:dd:74:7d:59: f6:3d:5b:5f:a0:1b:18:d7:5f:3c:93:b4:bf:ea:68:a0:9f:cc: 4f:20:1d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeALaf+s8KFKwbqigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI0MTAxMTAxMTUyNVoXDTI1MDEwOTAyMTUyNVowLzEtMCsGA1UEAxMk N2UxM2E5MGUtOTM4My00ZGI1LThmZDMtYTVmZjQ2ODRkMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o263vvd0NwmDxwWK55EaDP8BOntJVMy3bKL 0rZyFsJ1L10a4QJVSBcbcKGszKq0JKGaSBmFIxV79S0Chggn0gjYYjly+1vcUlAF 7B1XxlxnwRMMSUxXkgg0muiRl/EAeJ3CEOz9NRJ3rkbgX0he9I7rdo6IpO17km9l eXePzYxiHy/JkQjPReeTYOWLBs4Ijh0sCNP98LNqGIqJ+YX8TAFtqwkeBxKXTJh1 AAGU8suRVvVvkVQ+VVednVh+a/VP6Q3Gffqao6Pn+WFz2mXFIaCNw14k1MEU5b18 MeZjlOrtMynHAaz5XO1oQG8oRhuUzpnajWqI7EsYglVotbKpGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkovqlxYrliRcZRr26U2B2OMrKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZjY2NjUxMmYtYmU1Zi0z YWJjLTk1YWMtZjM1NjIyYjU2MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0bJeXAQyB/Mb+x/f7Df+53sAawtYrwnGokXn6+q3Huhxyu4fGdp1PL GYyQYrN7kgGjYO/rKZEZAAt9mS7Tvl4HAHOjvx5L45uo2Nyffupte0lyiMvlRoyw AmwgSJ7E6SKghAv1CyIyTzns6/ISJO1wTQvmIgNcBXsfHRbOdfNVfsCpncLGgJGG nLceDDBs2Mi+VUoy/9yfablgOnC35PcH2HyQBBh50A6cdH08Z+znd1pVV1M8YANY JvxJfhREQYfu+HJ7j+rKrSNVE7ISdgXRfpDoawJATrXTYTC87Y+bBZIipdA23XR9 WfY9W1+gGxjXXzyTtL/qaKCfzE8gHXs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org