$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa File: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (raw, json) Hash identifier: xpDNjY82bSBgoKIezsyOVbihaMSzY4mGZ7G30zJVFTg= Subject key identifier: 43:7C:89:5C:9C:22:3C:9B:6A:8D:9E:8C:7B:31:67:12:1B:25:EB:38 Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F432858478E1BB59A1537ED965BA6A000 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 26258 IP address blocks: 144.29.0.0/16 maxlen: 24 144.29.0.0/17 maxlen: 24 144.29.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:b5:9a:15:37:ed:96:5b:a6:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=3294dcf5-8729-48dc-b729-7dbe854caac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:91:61:54:4d:ab:e7:bf:f9:63:f0:a2:37: d4:9c:84:b8:05:01:39:d2:94:fc:fa:69:25:5f:db: 1d:c1:06:de:70:3f:d0:5f:29:39:fa:d2:4a:f9:0b: 30:bd:fa:22:58:23:ca:e8:c5:85:6e:01:98:da:74: 3e:c1:bc:dd:01:97:5b:87:90:e8:27:47:ea:d8:a6: f4:92:a2:5f:e2:15:9c:e7:25:d0:72:34:4a:ab:3e: a2:ff:d9:1c:81:73:00:39:29:a7:d3:a0:0e:c0:62: 83:3c:81:69:48:60:b1:2f:ec:66:10:47:30:90:20: ec:ac:37:2d:3f:e6:18:83:3a:83:55:7f:d0:62:86: a8:34:05:bf:cb:43:5b:5b:3b:b8:72:d5:f2:e9:5b: b9:4f:a9:6b:34:c2:c1:51:43:e2:3b:28:fe:3a:b4: 4f:b4:27:c5:67:b0:da:d2:29:27:96:9d:cf:70:a6: 2e:a0:6d:59:07:ae:6a:0c:4d:e0:ee:a5:25:f3:9a: a4:63:47:ab:86:fc:3e:01:67:b9:bf:bf:30:55:7c: 3e:0f:54:9a:2c:d3:db:d5:a5:c0:8e:6d:68:e7:3d: 61:92:0d:53:11:94:df:75:dc:b4:76:d2:b7:70:0b: 78:3a:23:0d:f9:74:58:e8:22:ed:a5:2f:f6:0a:fe: 63:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7C:89:5C:9C:22:3C:9B:6A:8D:9E:8C:7B:31:67:12:1B:25:EB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:66:de:c6:87:a1:87:7d:3e:02:db:1f:ee:2d:84:0e:3c:c1: 09:44:12:e6:b9:fb:21:95:4a:f8:97:38:7f:6d:5f:86:8c:b7: eb:32:f1:df:39:5e:9d:07:47:a6:64:d3:eb:f7:6c:55:f8:b9: c5:b0:8e:1f:c6:f0:25:7c:a6:57:77:68:a8:b8:25:19:e4:e4: 85:4b:b8:62:d5:59:75:3d:e6:63:b9:d8:81:4c:3c:b1:97:eb: 69:ab:2e:f6:6d:75:33:31:e8:1b:26:10:16:88:bd:80:0e:5b: 7c:7a:58:34:42:78:8e:98:19:3d:1e:e9:92:4c:65:ff:4a:8e: d2:46:c7:47:46:40:88:1b:38:c6:f9:8b:d6:bf:f1:2b:39:db: 49:eb:f0:eb:b3:fb:e4:ad:21:99:23:10:f3:20:04:0f:cf:0d: 14:61:ae:ec:d3:7d:48:a9:cc:ba:fd:1a:a2:86:93:e2:8a:81: b3:d4:e4:40:54:52:8e:0b:03:96:57:ba:10:43:fc:3e:86:6a: 03:3b:18:a2:43:63:6e:42:7d:8b:66:32:2f:bb:59:55:e1:b6: ff:cb:0d:73:7e:5a:0e:b5:7a:77:02:f2:12:72:84:a1:dd:36: c2:4f:ce:6b:76:18:8e:db:e3:5f:42:64:52:21:9a:f1:3f:16: 4e:71:b9:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEeOG7WaFTftllumoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk MzI5NGRjZjUtODcyOS00OGRjLWI3MjktN2RiZTg1NGNhYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySyRYVRNq+e/+WPwojfUnIS4BQE50pT8+mkl X9sdwQbecD/QXyk5+tJK+QswvfoiWCPK6MWFbgGY2nQ+wbzdAZdbh5DoJ0fq2Kb0 kqJf4hWc5yXQcjRKqz6i/9kcgXMAOSmn06AOwGKDPIFpSGCxL+xmEEcwkCDsrDct P+YYgzqDVX/QYoaoNAW/y0NbWzu4ctXy6Vu5T6lrNMLBUUPiOyj+OrRPtCfFZ7Da 0iknlp3PcKYuoG1ZB65qDE3g7qUl85qkY0erhvw+AWe5v78wVXw+D1SaLNPb1aXA jm1o5z1hkg1TEZTfddy0dtK3cAt4OiMN+XRY6CLtpS/2Cv5jGQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEN8iVycIjybao2ejHsxZxIbJes4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNTNjY2FlMDYtNGVhYy0z MzA5LThkZTItMjRmNjI2MjRmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAq2bexoehh30+Atsf7i2EDjzBCUQS5rn7IZVK+Jc4f21fhoy36zLx3zle nQdHpmTT6/dsVfi5xbCOH8bwJXymV3doqLglGeTkhUu4YtVZdT3mY7nYgUw8sZfr aasu9m11MzHoGyYQFoi9gA5bfHpYNEJ4jpgZPR7pkkxl/0qO0kbHR0ZAiBs4xvmL 1r/xKznbSevw67P75K0hmSMQ8yAED88NFGGu7NN9SKnMuv0aooaT4oqBs9TkQFRS jgsDlle6EEP8PoZqAzsYokNjbkJ9i2YyL7tZVeG2/8sNc35aDrV6dwLyEnKEod02 wk/Oa3YYjtvjX0JkUiGa8T8WTnG5dA== -----END CERTIFICATE-----Generated at Fri Nov 22 01:37:26 2024 by rpki-client on console-ams.rpki-client.org