$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa File: 3d97d649-dd61-39e8-94b1-2e5a345cf305.roa (raw, json) Hash identifier: IBeMTJ6DxMLLYkO6K99Fk6NLqHXYWfdNBHmrSI5la24= Subject key identifier: 3B:69:25:78:91:69:A3:BE:B2:89:89:0A:F5:23:A8:9C:87:7A:9A:94 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F432858473095FC4BBBB5617B410F7CA0 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 11775 IP address blocks: 192.149.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:fc:4b:bb:b5:61:7b:41:0f:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=0ec6fa5f-191a-4c0a-8a92-53195dc2f0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:66:cc:e1:3a:32:34:07:5c:df:9c:60:21: 67:44:16:cb:7e:d4:9f:34:e5:06:06:04:bd:a4:82: dc:49:94:32:95:da:6f:42:24:87:0b:bc:95:38:50: f5:8f:8c:d1:cd:cd:90:aa:95:7e:c7:43:9b:e3:f5: a7:64:3f:ce:7e:a4:50:07:46:f9:c2:e0:16:7d:00: a6:5f:99:5f:ff:ef:e1:5e:84:a0:27:ef:4b:d7:42: 0c:2e:b5:3b:60:60:99:12:6d:59:f7:7f:27:2a:22: 0e:6a:ec:6e:c0:a4:24:4f:0b:a6:f9:43:ec:63:dd: 3b:0c:5c:0f:1e:39:71:f2:10:eb:47:db:28:f3:3e: c8:94:11:19:9d:c5:fe:14:3f:55:11:4a:cb:64:ed: f8:81:88:c9:c1:9a:c1:ca:a8:31:53:f7:29:f5:b1: ca:0c:74:c0:b6:87:7a:83:15:6e:4b:2d:30:5b:d9: 79:8f:5c:93:b8:0f:78:ab:1d:35:8b:a5:08:8b:cd: 3b:12:15:88:e1:22:72:e4:a7:0d:54:5c:64:b5:ec: a1:90:24:58:fc:5f:19:03:bf:4d:02:18:b3:ff:9b: ec:74:a3:80:5f:10:64:8b:27:35:f5:aa:aa:84:e6: d5:af:1f:05:79:86:75:fb:fc:07:28:cc:f9:d6:60: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:69:25:78:91:69:A3:BE:B2:89:89:0A:F5:23:A8:9C:87:7A:9A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 192.149.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:18:67:39:e4:f6:d9:b5:b3:c7:5e:82:44:a9:79:68:56:c8: 54:b1:6d:a7:91:89:4f:b5:81:11:59:2b:8f:41:1a:df:0e:b7: 3e:51:3b:f3:e0:e3:b5:57:b2:be:a9:f5:ff:0f:a1:5b:15:92: 64:21:9d:98:e1:ae:23:47:92:21:bc:e4:54:1b:88:fc:09:00: 2e:70:6f:1c:5d:94:15:e6:7b:d6:3a:bf:89:0b:31:85:91:71: a1:9e:91:40:43:48:ed:34:3a:b9:1f:4c:66:fa:98:23:a7:ec: a1:c2:24:18:f3:bb:0e:39:18:55:c4:64:af:d7:65:7b:b7:42: d7:68:83:f2:d0:74:eb:37:c5:19:85:9b:e0:34:4b:a5:77:6f: bc:5f:2c:55:c1:a7:6d:93:a8:04:18:55:1e:15:11:68:81:66: 7d:f1:b5:6f:7d:51:ee:0e:6e:65:05:87:a6:92:bc:36:35:fe: 92:a2:a1:04:a8:28:b9:25:04:24:da:56:b4:9a:38:de:67:a9: 4c:be:ca:fa:3c:c1:37:ce:17:6d:ef:9d:ac:48:14:ba:e3:ee: bf:a6:bd:97:14:65:22:6e:a8:e9:e9:d0:a9:a9:22:4f:08:e4: 0f:59:ec:3c:4c:f3:50:b4:48:ca:de:53:33:13:9e:62:62:46: 7f:92:ba:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlfxLu7Vhe0EPfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk MGVjNmZhNWYtMTkxYS00YzBhLThhOTItNTMxOTVkYzJmMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnhmzOE6MjQHXN+cYCFnRBbLftSfNOUGBgS9 pILcSZQyldpvQiSHC7yVOFD1j4zRzc2QqpV+x0Ob4/WnZD/OfqRQB0b5wuAWfQCm X5lf/+/hXoSgJ+9L10IMLrU7YGCZEm1Z938nKiIOauxuwKQkTwum+UPsY907DFwP Hjlx8hDrR9so8z7IlBEZncX+FD9VEUrLZO34gYjJwZrByqgxU/cp9bHKDHTAtod6 gxVuSy0wW9l5j1yTuA94qx01i6UIi807EhWI4SJy5KcNVFxkteyhkCRY/F8ZA79N Ahiz/5vsdKOAXxBkiyc19aqqhObVrx8FeYZ1+/wHKMz51mBxBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtpJXiRaaO+somJCvUjqJyHepqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvM2Q5N2Q2NDktZGQ2MS0z OWU4LTk0YjEtMmU1YTM0NWNmMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMYZznk9tm1s8degkSpeWhWyFSxbaeRiU+1gRFZK49BGt8Otz5RO/Pg 47VXsr6p9f8PoVsVkmQhnZjhriNHkiG85FQbiPwJAC5wbxxdlBXme9Y6v4kLMYWR caGekUBDSO00OrkfTGb6mCOn7KHCJBjzuw45GFXEZK/XZXu3Qtdog/LQdOs3xRmF m+A0S6V3b7xfLFXBp22TqAQYVR4VEWiBZn3xtW99Ue4ObmUFh6aSvDY1/pKioQSo KLklBCTaVrSaON5nqUy+yvo8wTfOF23vnaxIFLrj7r+mvZcUZSJuqOnp0KmpIk8I 5A9Z7DxM81C0SMreUzMTnmJiRn+Sugc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:29 2024 by rpki-client on console-ams.rpki-client.org