$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa File: 1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa (raw, json) Hash identifier: ZCZaH3xFoWaJX1hg9qWQDXeLg0LX74Kjb1AW7cjMXro= Subject key identifier: 70:65:7D:25:46:9F:F3:D2:A1:CA:81:7E:FB:3C:AC:AB:49:E1:B2:9E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D999F0FCBEC11F9BD143DC70 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f0:fc:be:c1:1f:9b:d1:43:dc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=9e937091-7f07-4d78-b444-3797d615def1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:d9:92:c3:d9:cb:d0:c2:66:e4:9d:19:da: 22:30:1c:a3:89:49:89:72:31:2a:91:9d:e5:60:cf: 09:e6:98:51:ec:bc:56:98:63:18:91:f0:91:27:6b: 15:6b:af:1c:f9:5e:39:6f:13:8b:11:24:de:3a:70: 0a:1e:8e:cb:42:a9:74:c8:0a:0e:75:08:c9:65:72: fe:78:39:ed:98:3a:6b:9a:a5:51:ea:77:c1:11:4e: 54:b3:7d:44:cb:b2:79:c6:81:8d:ec:9e:7a:c5:98: 6d:8d:fe:86:7f:d4:15:a2:4b:5d:bb:74:dc:50:2e: f8:e6:51:87:ad:6e:ab:32:eb:3a:64:d7:c0:ee:34: bc:75:ff:94:b7:1c:58:6f:f8:bc:f8:56:06:32:e7: dd:47:e9:69:06:44:28:7e:1f:13:10:8f:18:92:c2: 31:0d:2d:9d:94:35:27:d8:1e:13:a1:44:76:9a:5e: e4:69:f5:69:96:f7:da:e3:fd:a4:05:65:29:d7:b0: 71:06:7a:e9:a4:9e:49:d9:d6:1b:1a:77:af:17:f7: a9:87:80:50:27:1b:4f:ff:56:16:8e:67:7b:ee:f0: d9:01:33:3f:1a:72:64:39:71:be:7f:45:01:fa:4d: b2:00:3f:f9:5f:81:06:c5:83:b9:f7:d1:ac:ce:6c: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:7D:25:46:9F:F3:D2:A1:CA:81:7E:FB:3C:AC:AB:49:E1:B2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:0e:fb:53:f4:72:a6:41:5e:87:c6:13:41:6a:b0:69:0f:20: 2b:6e:00:d6:5a:fc:49:ca:64:56:04:49:cd:62:1b:ac:7d:0b: 3c:09:86:f3:97:68:e1:04:20:e3:4d:d2:d4:51:6d:6e:3b:83: c4:e1:30:d5:02:51:87:a9:25:ec:12:1b:ec:31:84:5a:79:eb: 82:e6:c9:4b:35:11:a5:5a:c4:fe:d0:08:e7:89:79:f5:8a:d1: 99:bf:de:b9:7d:9d:20:0b:70:c2:f8:3a:6c:f7:b6:53:85:b7: fc:6b:ee:d6:19:52:0a:9c:21:67:a7:db:a8:2a:1a:9a:05:51: fe:34:3c:b6:99:d5:03:5f:ac:df:48:49:bf:54:ee:4c:a4:97: a4:d0:d1:66:83:8b:df:22:2b:ed:96:85:49:1e:51:f8:1a:d4: 01:e3:34:d5:db:60:d4:ea:fa:ea:d7:5b:27:3f:ab:81:18:24: c3:eb:ef:a2:55:c7:ff:7c:5e:07:5b:64:4e:13:9c:1f:c6:64: 98:c5:df:5b:86:2f:17:ac:d1:86:4c:22:cd:a5:4c:1a:dd:14: 46:d4:ce:31:c2:c2:42:32:54:b1:1b:86:14:5e:6f:cc:9b:3b: cb:df:eb:3b:5c:70:cc:da:da:96:ab:12:14:ff:5f:b6:f5:13: 3c:1a:b0:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfD8vsEfm9FD3HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk OWU5MzcwOTEtN2YwNy00ZDc4LWI0NDQtMzc5N2Q2MTVkZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNbZksPZy9DCZuSdGdoiMByjiUmJcjEqkZ3l YM8J5phR7LxWmGMYkfCRJ2sVa68c+V45bxOLESTeOnAKHo7LQql0yAoOdQjJZXL+ eDntmDprmqVR6nfBEU5Us31Ey7J5xoGN7J56xZhtjf6Gf9QVoktdu3TcUC745lGH rW6rMus6ZNfA7jS8df+UtxxYb/i8+FYGMufdR+lpBkQofh8TEI8YksIxDS2dlDUn 2B4ToUR2ml7kafVplvfa4/2kBWUp17BxBnrppJ5J2dYbGnevF/eph4BQJxtP/1YW jmd77vDZATM/GnJkOXG+f0UB+k2yAD/5X4EGxYO599GszmztVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBlfSVGn/PSocqBfvs8rKtJ4bKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJlZWJlYWYtMWYwZS0z MTlkLWE3NmQtYWExMTBmYWRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANwO+1P0cqZBXofGE0FqsGkPICtuANZa/EnKZFYESc1iG6x9CzwJhvOX aOEEIONN0tRRbW47g8ThMNUCUYepJewSG+wxhFp564LmyUs1EaVaxP7QCOeJefWK 0Zm/3rl9nSALcML4Omz3tlOFt/xr7tYZUgqcIWen26gqGpoFUf40PLaZ1QNfrN9I Sb9U7kykl6TQ0WaDi98iK+2WhUkeUfga1AHjNNXbYNTq+urXWyc/q4EYJMPr76JV x/98XgdbZE4TnB/GZJjF31uGLxes0YZMIs2lTBrdFEbUzjHCwkIyVLEbhhReb8yb O8vf6ztccMza2parEhT/X7b1EzwasOY= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:31 2024 by rpki-client on console-ams.rpki-client.org