$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa File: e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa (raw, json) Hash identifier: OBKDUVEFaSHWhTmWgjN9fo+igDXl/KS6CWxnU9nOnB4= Subject key identifier: D3:70:E8:64:27:5D:6A:C8:D9:05:8F:41:5C:80:1D:DB:0C:5A:7F:75 Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Certificate serial: 010D0C9F4328584746A992A0C49C84AD2C810780 Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa Signing time: Fri 20 Sep 2024 10:48:12 +0000 ROA not before: Fri 20 Sep 2024 10:48:12 +0000 ROA not after: Thu 19 Dec 2024 11:48:12 +0000 asID: 13631 IP address blocks: 209.95.156.0/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:46:a9:92:a0:c4:9c:84:ad:2c:81:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Validity Not Before: Sep 20 10:48:12 2024 GMT Not After : Dec 19 11:48:12 2024 GMT Subject: CN=3112c233-31c5-44c9-8a50-8ac5a1cc6a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:0b:f7:b3:e8:78:33:8c:9f:30:73:e2:51: 5a:48:31:28:cc:88:61:c7:a6:a0:27:3b:36:94:25: 02:f4:0e:b2:f7:54:90:01:ef:c5:62:10:6c:43:a0: 45:59:97:1d:a8:af:97:a9:6f:0e:df:44:e5:cf:2d: 36:43:66:8a:ef:4d:bf:32:e0:f0:36:ea:6c:aa:d3: dc:d4:57:16:11:40:31:9a:a8:90:ae:c5:9a:b0:cc: 58:20:a3:a2:94:5e:a3:c7:f7:6f:07:c1:7c:0f:d0: 61:ee:de:d0:21:1d:90:92:0f:80:61:c0:3d:48:77: 0b:a1:73:bf:42:3a:34:86:d0:9f:9c:8a:52:53:79: 68:8a:6b:c0:88:e9:97:7a:34:51:4c:b5:8b:5e:ba: dc:b7:46:90:61:d4:d5:f5:80:76:06:eb:26:55:a8: 5b:b1:b2:50:df:45:e7:ba:17:f7:68:8c:50:1e:78: 61:f0:65:a4:38:ef:98:fe:82:cf:5e:89:7c:72:69: ad:a8:88:7e:82:25:12:52:b1:7b:6d:18:e5:57:02: cf:19:6f:28:46:d9:b0:d6:d3:28:62:cb:26:e7:e3: a0:04:a0:fd:a6:55:33:34:27:ff:12:5d:02:fe:28: 11:93:e9:23:41:cc:fc:74:03:79:e6:45:58:a8:f4: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:E8:64:27:5D:6A:C8:D9:05:8F:41:5C:80:1D:DB:0C:5A:7F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/e31f4202-6ea6-3e14-94a6-eac351a1e3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl X509v3 Authority Key Identifier: keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer sbgp-ipAddrBlock: critical IPv4: 209.95.156.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:17:0a:11:76:58:d6:ac:44:62:a6:9f:d6:6e:bf:2a:bc:8a: f3:e2:4b:01:94:2c:f9:c7:20:95:c2:32:10:66:26:d4:84:5d: c8:a7:f2:66:89:3f:ca:a5:17:0b:f6:31:cd:fb:0c:98:68:c6: 38:c2:80:f7:2c:3e:31:45:12:1f:fa:e7:55:d5:7e:a6:fd:9a: ed:78:60:13:a2:9c:3b:03:58:d7:d2:0a:00:4d:d5:43:cf:d3: b3:89:99:6d:1e:f1:51:3d:1a:c9:d9:96:ff:b0:dd:81:3b:d9: e1:84:4f:ff:d0:78:69:1f:47:3c:72:5b:34:51:99:76:45:f4: 3f:cd:0c:35:2c:a5:e9:be:1a:cf:72:73:3e:85:2b:e1:c2:85: 0e:9c:0c:23:3c:bd:2a:48:9d:ae:b4:bb:17:ce:7b:46:17:d0: 9b:16:09:e3:0b:dd:d2:f7:77:c3:a2:4d:25:91:e3:cb:5f:1a: 8b:67:f1:96:8d:ac:0a:95:f5:f5:5d:b5:18:ec:33:76:d3:da: 39:84:3d:21:c0:cb:97:31:17:6e:c8:ff:d2:d4:9e:7c:0a:de: e4:38:c5:50:cc:be:d6:fb:f1:67:14:ff:d6:e1:ec:5d:3b:bc: 07:e8:df:2d:3d:99:73:30:b9:35:cd:67:df:6d:a3:cc:01:69: d7:de:61:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdGqZKgxJyErSyBB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMjliNDQtOGY1Yy00NDYyLWJiMTMtZDcyYjRlMTVl MjBkMB4XDTI0MDkyMDEwNDgxMloXDTI0MTIxOTExNDgxMlowLzEtMCsGA1UEAxMk MzExMmMyMzMtMzFjNS00NGM5LThhNTAtOGFjNWExY2M2YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsToL97PoeDOMnzBz4lFaSDEozIhhx6agJzs2 lCUC9A6y91SQAe/FYhBsQ6BFWZcdqK+XqW8O30Tlzy02Q2aK702/MuDwNupsqtPc 1FcWEUAxmqiQrsWasMxYIKOilF6jx/dvB8F8D9Bh7t7QIR2Qkg+AYcA9SHcLoXO/ Qjo0htCfnIpSU3loimvAiOmXejRRTLWLXrrct0aQYdTV9YB2BusmVahbsbJQ30Xn uhf3aIxQHnhh8GWkOO+Y/oLPXol8cmmtqIh+giUSUrF7bRjlVwLPGW8oRtmw1tMo Yssm5+OgBKD9plUzNCf/El0C/igRk+kjQcz8dAN55kVYqPQaxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNNw6GQnXWrI2QWPQVyAHdsMWn91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Y2Iy OWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJiNGUxNWUyMGQvZTMxZjQyMDItNmVhNi0z ZTE0LTk0YTYtZWFjMzUxYTFlM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGNiMjliNDQtOGY1Yy00NDYyLWJi MTMtZDcyYjRlMTVlMjBkLzhjYjI5YjQ0LThmNWMtNDQ2Mi1iYjEzLWQ3MmI0ZTE1 ZTIwZC5jcmwwHwYDVR0jBBgwFoAUkt30C92YmGTsWtzg9MAgG7Bke3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Y2IyOWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJi NGUxNWUyMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0V+cADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+FwoRdljWrERipp/Wbr8qvIrz4ksBlCz5xyCVwjIQZibUhF3Ip/Jm iT/KpRcL9jHN+wyYaMY4woD3LD4xRRIf+udV1X6m/ZrteGATopw7A1jX0goATdVD z9OziZltHvFRPRrJ2Zb/sN2BO9nhhE//0HhpH0c8cls0UZl2RfQ/zQw1LKXpvhrP cnM+hSvhwoUOnAwjPL0qSJ2utLsXzntGF9CbFgnjC93S93fDok0lkePLXxqLZ/GW jawKlfX1XbUY7DN209o5hD0hwMuXMRduyP/S1J58Ct7kOMVQzL7W+/FnFP/W4exd O7wH6N8tPZlzMLk1zWffbaPMAWnX3mFu -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:22 2024 by rpki-client on console-fra.rpki-client.org