$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa File: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (raw, json) Hash identifier: tKZ22OR+cdl0nwzTbVC4gpqz7wSQs8GhTmrW70G54os= Subject key identifier: 2D:B6:49:74:B9:5A:64:33:DD:E0:C7:11:D4:0C:F8:1C:E1:1E:9C:C1 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F432858478E1BBC81E32DE97A363F2A00 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 21803 IP address blocks: 209.140.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:bc:81:e3:2d:e9:7a:36:3f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=5a5a8c13-2e13-4b91-ab82-aef6364c6d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:c1:0e:cf:19:a2:4b:2a:46:b8:5b:07:d2: da:9f:db:7c:5c:58:3d:06:f9:dc:bd:73:b6:75:1a: b8:8b:c4:e6:22:0e:24:d6:b1:42:f5:8b:41:4e:66: b1:62:89:f2:9d:eb:aa:17:a6:02:9d:88:36:3d:c8: 39:d4:a3:de:76:b2:1f:14:6d:7f:3d:20:b6:59:87: fc:64:30:cf:07:b6:6b:ae:a8:6f:e1:28:c4:8b:a5: 9a:1c:7f:fb:ee:73:82:b1:98:ef:b7:09:a7:70:b8: 18:04:da:aa:36:42:d1:b5:ce:11:f5:03:2f:b4:0e: 3a:39:41:c7:5b:43:fa:ff:4b:e0:d5:0f:82:85:8c: aa:92:61:c4:24:52:34:34:bd:a1:a9:34:35:7d:cb: 47:dc:37:cd:06:fc:10:31:1d:1a:07:e9:0d:c8:06: a7:f5:46:e4:cd:4f:d8:7b:bf:5a:32:73:e1:26:d1: 46:ad:b7:29:3e:15:c5:f5:97:2c:3a:0f:f9:9a:76: c0:82:62:6e:1e:76:03:02:84:be:e1:2b:1a:10:02: 6b:d3:d1:5f:a6:22:67:61:25:a7:82:97:73:30:4b: 60:bb:35:3b:75:83:24:f9:c3:87:04:09:ee:ee:40: 51:de:90:3f:ae:c1:8a:d0:d6:7f:8b:01:80:b1:3b: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:49:74:B9:5A:64:33:DD:E0:C7:11:D4:0C:F8:1C:E1:1E:9C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5c:39:c1:8d:de:5c:7c:c6:72:42:33:8a:bb:a4:60:8f:54: be:7a:f6:7a:e8:bd:58:7f:cb:3f:9a:f8:39:a4:71:00:0e:db: 11:c8:12:86:5f:e9:35:de:80:fe:da:33:91:f1:d1:9c:f0:1f: f1:a4:da:b4:44:26:24:eb:f1:56:28:63:a1:7e:30:36:9b:58: 6d:64:84:c3:ac:25:72:41:ec:15:1b:8d:4b:e6:8f:29:35:a3: b0:36:42:33:4a:69:ad:b2:ae:a7:7b:c6:e0:2b:0f:2d:85:63: f7:80:45:5e:73:80:1a:8f:01:ff:e7:35:91:c2:40:d8:6b:e5: 72:ed:3f:a6:52:95:d7:6a:84:5b:b3:59:d1:26:09:23:96:ec: 7c:d1:b7:e1:70:ef:b7:7e:07:bb:eb:f2:49:28:15:8a:09:95: 87:5f:2b:94:0d:fd:9d:17:7e:65:7a:72:ec:b0:42:7d:65:ba: a9:2c:86:65:d6:b6:bc:64:92:04:0c:0f:c2:fc:5f:31:2d:95: 7b:04:4f:05:57:94:dc:2b:6b:2a:c8:4c:66:41:15:ff:df:60: f4:ee:71:49:e5:eb:5c:c4:10:5a:3f:04:27:fe:34:b7:e4:34: 03:18:f4:57:ad:54:52:42:11:e6:69:71:56:7c:f6:66:1a:13: ec:ba:ad:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG7yB4y3pejY/KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk NWE1YThjMTMtMmUxMy00YjkxLWFiODItYWVmNjM2NGM2ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljzBDs8ZoksqRrhbB9Lan9t8XFg9BvncvXO2 dRq4i8TmIg4k1rFC9YtBTmaxYonyneuqF6YCnYg2Pcg51KPedrIfFG1/PSC2WYf8 ZDDPB7Zrrqhv4SjEi6WaHH/77nOCsZjvtwmncLgYBNqqNkLRtc4R9QMvtA46OUHH W0P6/0vg1Q+ChYyqkmHEJFI0NL2hqTQ1fctH3DfNBvwQMR0aB+kNyAan9UbkzU/Y e79aMnPhJtFGrbcpPhXF9ZcsOg/5mnbAgmJuHnYDAoS+4SsaEAJr09FfpiJnYSWn gpdzMEtguzU7dYMk+cOHBAnu7kBR3pA/rsGK0NZ/iwGAsTsk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC22SXS5WmQz3eDHEdQM+BzhHpzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZGI1NzMzZGUtZDllZS0z MTVhLWI0ZWUtNDliYjQ3M2VlMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0YwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpcOcGN3lx8xnJCM4q7pGCPVL569nrovVh/yz+a+DmkcQAO2xHIEoZf 6TXegP7aM5Hx0ZzwH/Gk2rREJiTr8VYoY6F+MDabWG1khMOsJXJB7BUbjUvmjyk1 o7A2QjNKaa2yrqd7xuArDy2FY/eARV5zgBqPAf/nNZHCQNhr5XLtP6ZSlddqhFuz WdEmCSOW7HzRt+Fw77d+B7vr8kkoFYoJlYdfK5QN/Z0XfmV6cuywQn1luqkshmXW trxkkgQMD8L8XzEtlXsETwVXlNwrayrITGZBFf/fYPTucUnl61zEEFo/BCf+NLfk NAMY9FetVFJCEeZpcVZ89mYaE+y6raA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:32:30 2024 by rpki-client on console-fra.rpki-client.org