$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa File: c8effb7c-3ff5-367a-9768-2bfe031beb26.roa (raw, json) Hash identifier: Tm5N75WSJZi0r8JPnbLR90yHoYnSlvxpwi1f7ZTJokc= Subject key identifier: EC:B0:1D:3F:C9:2D:2C:16:97:77:0F:AE:52:00:8B:E0:DF:5B:AE:C5 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F432858473095E4EA6DFA545EF5F49180 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 6639 IP address blocks: 209.27.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:e4:ea:6d:fa:54:5e:f5:f4:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=c0925317-a7e5-49f4-9085-806ba18383de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:39:02:d5:c2:d2:8e:a2:1c:10:d8:4f:94: 0d:b8:74:fb:c9:54:7c:81:f2:ba:c6:ab:8b:cf:10: cf:bb:34:f0:07:05:bc:25:c2:64:d4:b1:23:99:17: 02:c8:95:5e:62:ca:a5:fc:fc:ef:bc:bc:03:12:c4: 78:7a:8c:3e:d5:32:15:90:9f:2e:e1:9a:b4:87:98: c5:8e:2b:8c:a0:2d:e5:62:52:43:ba:66:aa:c7:98: a9:8d:1b:db:14:8d:c4:41:8a:78:5f:38:a4:cb:44: 21:78:b6:ec:bb:8a:1d:ef:ab:dc:ff:43:7f:00:9f: ff:8c:40:06:53:09:a6:df:ae:33:29:47:dd:2f:28: b0:ff:61:14:bd:e5:1a:63:0c:12:8a:22:02:29:9a: ca:46:f1:10:e0:77:3a:6f:44:9f:96:ad:63:5f:51: 71:96:ec:0d:e0:58:95:4a:a0:5f:3e:43:11:58:39: 62:43:5a:3b:92:42:97:0a:39:f9:91:30:0b:05:1a: ce:d4:8d:1f:0c:22:39:38:f5:3a:d1:f7:5b:8a:03: c4:f5:35:e0:04:cd:4b:b5:b7:91:b0:8a:b8:b5:fc: 73:c8:6b:c5:f6:1a:9a:ee:59:ea:5c:81:47:89:42: b1:44:e1:e3:6a:2b:04:fe:e8:be:4d:a2:b2:46:83: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B0:1D:3F:C9:2D:2C:16:97:77:0F:AE:52:00:8B:E0:DF:5B:AE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 209.27.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c7:82:49:54:57:4c:9c:df:cd:6c:0f:14:93:8b:c1:7c:d7: c2:b1:a9:57:ed:b9:54:40:26:54:2f:e5:34:0d:22:71:36:67: bd:be:f1:63:1c:7a:4f:3f:bb:f8:49:bb:49:ee:e6:89:1b:dc: e3:c0:ca:c0:fe:04:df:50:78:20:43:29:a6:79:07:f0:ab:83: 6f:67:46:dc:94:fe:34:75:66:50:52:05:b7:85:73:d9:2b:45: d1:ee:7b:ce:5b:ce:55:5b:4a:f5:02:f0:06:b1:3c:b6:01:e8: 4e:06:0e:9a:75:7e:a5:0c:93:4e:2d:6f:0b:24:5e:8c:e1:7a: cd:7f:1d:71:96:d6:08:d1:e9:e6:f0:b3:5f:65:7d:c7:31:df: 77:ee:ad:9d:85:48:bd:2f:b0:46:a8:68:15:8e:54:1f:6a:c4: c2:8e:84:7d:eb:d9:1a:3e:1d:b0:a3:af:9f:1c:e1:f8:9b:4f: 37:e3:37:d0:8c:bd:b2:66:63:d9:92:44:01:48:b7:20:fc:29: a5:b7:d1:2b:da:80:a6:6c:42:b2:60:41:85:ae:df:5d:18:8a: ad:5a:11:15:e1:a3:4c:21:17:00:75:2b:01:4a:91:eb:df:30: d8:73:f9:7b:21:12:56:59:85:ad:f1:ca:27:89:5d:73:5c:df: a7:21:fe:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwleTqbfpUXvX0kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk YzA5MjUzMTctYTdlNS00OWY0LTkwODUtODA2YmExODM4M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDU5AtXC0o6iHBDYT5QNuHT7yVR8gfK6xquL zxDPuzTwBwW8JcJk1LEjmRcCyJVeYsql/PzvvLwDEsR4eow+1TIVkJ8u4Zq0h5jF jiuMoC3lYlJDumaqx5ipjRvbFI3EQYp4Xziky0QheLbsu4od76vc/0N/AJ//jEAG Uwmm364zKUfdLyiw/2EUveUaYwwSiiICKZrKRvEQ4Hc6b0Sflq1jX1FxluwN4FiV SqBfPkMRWDliQ1o7kkKXCjn5kTALBRrO1I0fDCI5OPU60fdbigPE9TXgBM1LtbeR sIq4tfxzyGvF9hqa7lnqXIFHiUKxROHjaisE/ui+TaKyRoOLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOywHT/JLSwWl3cPrlIAi+DfW67FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvYzhlZmZiN2MtM2ZmNS0z NjdhLTk3NjgtMmJmZTAzMWJlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Rs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvHgklUV0yc381sDxSTi8F818KxqVftuVRAJlQv5TQNInE2Z72+8WMc ek8/u/hJu0nu5okb3OPAysD+BN9QeCBDKaZ5B/Crg29nRtyU/jR1ZlBSBbeFc9kr RdHue85bzlVbSvUC8AaxPLYB6E4GDpp1fqUMk04tbwskXozhes1/HXGW1gjR6ebw s19lfccx33furZ2FSL0vsEaoaBWOVB9qxMKOhH3r2Ro+HbCjr58c4fibTzfjN9CM vbJmY9mSRAFItyD8KaW30SvagKZsQrJgQYWu310Yiq1aERXho0whFwB1KwFKkevf MNhz+XshElZZha3xyieJXXNc36ch/iE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org