$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json) Hash identifier: BGMhAGcbXJRzL1dnw4d7KYtJIGtU/phJCPFgP2G3lo0= Subject key identifier: 69:D3:F6:14:AA:EB:D3:B5:74:AE:FB:E4:DC:38:8C:E4:7F:6A:AA:07 Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Certificate serial: 010D0C9F432858474251C0420DB9B2B81EF98080 Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa Signing time: Wed 18 Sep 2024 21:28:01 +0000 ROA not before: Wed 18 Sep 2024 21:28:01 +0000 ROA not after: Tue 17 Dec 2024 22:28:01 +0000 asID: 394875 IP address blocks: 52.144.25.0/24 maxlen: 24 2620:f9:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:51:c0:42:0d:b9:b2:b8:1e:f9:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Validity Not Before: Sep 18 21:28:01 2024 GMT Not After : Dec 17 22:28:01 2024 GMT Subject: CN=f7207fa2-2b68-415d-938f-20269b574d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:9f:f5:81:25:7a:a6:bf:3f:55:49:31:91: 96:ca:37:7e:d0:32:6a:2e:70:a8:16:26:de:aa:9b: 9b:f7:70:71:e3:76:91:7a:e9:2f:d3:03:7d:bc:86: 9f:3f:b3:d7:6d:98:5a:7f:fc:23:72:1d:d6:d0:12: 69:ab:69:4d:e4:65:76:a8:4b:ca:61:94:58:1b:1d: b0:1b:01:75:99:55:50:b1:84:13:6c:10:ec:f8:71: 3e:ad:db:06:c2:2f:1e:05:4d:85:6e:f4:0c:02:44: df:45:ce:4c:b8:39:2b:9a:ba:37:e8:23:ec:df:84: 81:93:8f:ca:63:e2:d0:96:c8:f4:0f:3f:9e:bf:a9: 8b:26:62:f2:17:d6:a5:56:7f:3d:ec:fe:62:34:73: 40:fe:85:58:78:d0:0e:79:96:bd:70:0a:63:81:b2: 3a:cb:86:3b:15:3a:1f:56:8e:fd:c4:c1:78:01:24: 7b:db:c5:10:47:7d:92:6b:5b:a1:84:5b:be:04:ce: 8d:c6:7a:d4:d2:1f:9e:c4:d9:8a:ce:02:7a:08:fb: 57:7d:db:e4:f8:07:f7:1b:92:87:d2:e7:90:a7:dd: d9:56:0b:ae:07:dd:bb:e7:5e:02:a4:ab:6a:b2:4f: a7:3f:11:17:e2:d0:d9:7b:a6:b4:c6:43:d9:bc:11: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D3:F6:14:AA:EB:D3:B5:74:AE:FB:E4:DC:38:8C:E4:7F:6A:AA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl X509v3 Authority Key Identifier: keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer sbgp-ipAddrBlock: critical IPv4: 52.144.25.0/24 IPv6: 2620:f9:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2c:5a:85:fc:ab:33:97:30:e9:70:94:10:7f:97:59:f2:34: ff:05:d2:e0:e8:bc:75:49:b9:fc:51:d4:f4:75:a5:dc:d4:e1: 9f:d0:ef:5c:9f:86:11:14:5d:43:41:62:df:de:27:3d:dc:d1: 52:db:9d:29:a0:d7:82:c8:0d:57:d4:c1:c2:58:85:dc:42:4a: 9e:54:0f:08:88:14:39:c0:8a:77:2c:f3:f6:71:a4:9f:6e:34: 42:47:d2:74:b6:a9:ea:9d:9b:14:89:ac:d2:a9:64:55:ae:b8: 19:bc:78:6b:76:16:d4:b2:99:81:20:99:4e:ab:08:ab:69:69: 55:79:3f:63:c6:3f:c7:1d:be:e1:b4:f3:4c:47:78:96:ab:36: 87:53:df:32:fa:a6:1b:60:87:d7:e0:ce:b1:7f:9c:c6:fe:51: 51:c7:5c:b7:a9:56:4d:8f:9d:0c:70:91:3f:03:bf:a3:8c:84: e0:83:46:d6:d0:74:8d:d0:39:88:de:67:ad:60:6f:f2:df:28: d4:1a:2f:51:e8:f5:55:55:3b:ce:dd:e5:26:5d:f4:7b:c8:e3: d8:29:f4:1d:57:b6:21:08:fc:de:17:8e:62:ad:fd:42:70:3a: 58:a8:98:79:20:fc:7c:ab:a8:65:d5:1f:de:b0:7b:bc:db:71: f8:a4:05:e7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEdCUcBCDbmyuB75gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MDMzNmItNGIzYy00OWViLWJmZDctZDk4MDNmN2Jh ZDZiMB4XDTI0MDkxODIxMjgwMVoXDTI0MTIxNzIyMjgwMVowLzEtMCsGA1UEAxMk ZjcyMDdmYTItMmI2OC00MTVkLTkzOGYtMjAyNjliNTc0ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu32f9YEleqa/P1VJMZGWyjd+0DJqLnCoFibe qpub93Bx43aReukv0wN9vIafP7PXbZhaf/wjch3W0BJpq2lN5GV2qEvKYZRYGx2w GwF1mVVQsYQTbBDs+HE+rdsGwi8eBU2FbvQMAkTfRc5MuDkrmro36CPs34SBk4/K Y+LQlsj0Dz+ev6mLJmLyF9alVn897P5iNHNA/oVYeNAOeZa9cApjgbI6y4Y7FTof Vo79xMF4ASR728UQR32Sa1uhhFu+BM6NxnrU0h+exNmKzgJ6CPtXfdvk+Af3G5KH 0ueQp93ZVguuB927514CpKtqsk+nPxEX4tDZe6a0xkPZvBEzKQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGnT9hSq69O1dK775Nw4jOR/aqoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYw MzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgwM2Y3YmFkNmIvNGNlZDYzODYtNGRhMS0z ZTRiLWE5MjctZGI0NGE5YWQyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MDMzNmItNGIzYy00OWViLWJm ZDctZDk4MDNmN2JhZDZiLzhkNjAzMzZiLTRiM2MtNDllYi1iZmQ3LWQ5ODAzZjdi YWQ2Yi5jcmwwHwYDVR0jBBgwFoAUhr5+KeF+Vnlp76h7dzy4ixjTKaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYwMzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgw M2Y3YmFkNmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQANJAZMA8E AgACMAkDBwAmIAD5QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAESxahfyrM5cw6XCUEH+XWfI0/wXS4Oi8 dUm5/FHU9HWl3NThn9DvXJ+GERRdQ0Fi394nPdzRUtudKaDXgsgNV9TBwliF3EJK nlQPCIgUOcCKdyzz9nGkn240QkfSdLap6p2bFIms0qlkVa64Gbx4a3YW1LKZgSCZ TqsIq2lpVXk/Y8Y/xx2+4bTzTEd4lqs2h1PfMvqmG2CH1+DOsX+cxv5RUcdct6lW TY+dDHCRPwO/o4yE4ING1tB0jdA5iN5nrWBv8t8o1BovUej1VVU7zt3lJl30e8jj 2Cn0HVe2IQj83heOYq39QnA6WKiYeSD8fKuoZdUf3rB7vNtx+KQF5w== -----END CERTIFICATE-----Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org