$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa File: 234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json) Hash identifier: mInDNG+ivGZ8vjJvTpe4cK8QrVfJ/w7qMFleMD7iFmA= Subject key identifier: 64:05:C1:67:9D:F0:9B:0E:D8:CB:74:78:00:C3:8A:83:D5:11:76:7B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D6CF3FC5B042091885C71F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:3f:c5:b0:42:09:18:85:c7:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=9d10e7aa-0cf4-4466-9087-12afbeb660e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:9a:bc:f7:2f:eb:d3:c9:f3:73:57:33:e8: 39:7a:b7:7d:d0:de:f0:08:9d:5e:71:38:96:77:e2: 6a:eb:ef:c2:9f:56:53:1e:57:44:ca:46:a7:8a:0d: 63:90:27:6a:79:aa:67:2c:69:f6:85:7c:66:30:24: 95:a0:b9:7e:db:00:f5:22:dd:de:6b:5d:bf:f2:b9: b5:c0:00:bb:ea:d9:52:a2:ba:92:4c:d5:e3:77:69: 25:11:d7:94:9e:fe:92:6e:9e:81:bb:5c:a5:37:06: 92:73:1a:88:a4:b8:86:ca:3a:1a:3f:14:8a:de:ee: d0:d4:8f:8a:6d:0a:ca:b7:1d:00:2e:64:be:2c:a7: ef:f3:58:b3:33:1f:ba:c5:1d:c6:49:c9:9d:fe:14: 81:2d:9b:1b:99:6b:90:62:8b:29:bc:c9:62:5b:be: 11:f8:41:f4:c2:a0:4a:7a:9c:4a:db:47:38:38:87: 1e:0e:3c:53:bd:27:c8:2d:4a:2b:66:32:2e:66:92: 30:9e:6a:b9:e9:e1:89:9b:c7:96:0a:a7:b4:ce:3d: 56:df:52:cf:69:69:41:4f:30:b0:b0:57:33:60:24: 1d:2c:12:25:99:bf:7b:dc:8e:11:8b:bd:2d:5f:bb: 06:6d:ff:8a:1f:27:e4:4f:e3:95:12:0d:79:f1:ff: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:05:C1:67:9D:F0:9B:0E:D8:CB:74:78:00:C3:8A:83:D5:11:76:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d3:2b:e9:53:96:72:22:26:e5:46:93:de:05:0c:1c:d8:7b: de:3d:52:59:14:9e:cf:a6:c9:59:67:87:28:09:be:39:66:31: e6:af:95:21:6c:d0:be:dd:69:20:bc:4a:c0:38:87:b4:96:1c: b3:0d:fe:12:bc:9d:e2:fe:6a:59:a2:69:1e:0b:ce:1d:7d:07: fe:b3:d5:e8:91:e0:97:f4:c1:43:b1:39:b9:d0:2b:fd:8f:e8: c4:37:ef:ac:0b:b6:5a:e9:55:53:87:dc:33:a6:55:e0:d3:5c: 6d:8f:ae:40:9b:f8:8b:9d:1e:15:0f:4b:a9:2f:3d:9e:1c:14: a8:d1:5d:5c:1f:32:8d:e4:45:64:9f:4c:df:5d:83:f0:60:86: a9:93:1d:b2:7f:f3:78:af:38:a4:d8:9b:38:14:af:c0:0d:96: c9:87:23:e9:57:29:e5:c7:03:41:9e:c3:c1:46:14:ac:33:cf: f6:e3:2a:26:d6:bf:a0:34:3c:fa:a6:c7:1b:0a:a5:2b:ca:1e: e1:58:24:e3:ca:6c:72:b2:51:95:3a:2a:e9:36:0c:ec:3d:9e: ff:d3:25:67:5b:c1:55:76:b9:0f:df:cb:e7:85:55:1d:6f:1a: b6:dd:44:bf:f3:d6:f8:47:60:89:69:d7:a0:12:b2:f9:1f:41: f1:19:06:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWzz/FsEIJGIXHHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk OWQxMGU3YWEtMGNmNC00NDY2LTkwODctMTJhZmJlYjY2MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN2avPcv69PJ83NXM+g5erd90N7wCJ1ecTiW d+Jq6+/Cn1ZTHldEykanig1jkCdqeapnLGn2hXxmMCSVoLl+2wD1It3ea12/8rm1 wAC76tlSorqSTNXjd2klEdeUnv6Sbp6Bu1ylNwaScxqIpLiGyjoaPxSK3u7Q1I+K bQrKtx0ALmS+LKfv81izMx+6xR3GScmd/hSBLZsbmWuQYospvMliW74R+EH0wqBK epxK20c4OIceDjxTvSfILUorZjIuZpIwnmq56eGJm8eWCqe0zj1W31LPaWlBTzCw sFczYCQdLBIlmb973I4Ri70tX7sGbf+KHyfkT+OVEg158f/IWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQFwWed8JsO2Mt0eADDioPVEXZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0YTRkN2MtMTZlOC0z N2Y0LWFjMDYtMWRkY2M0NTI4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvTK+lTlnIiJuVGk94FDBzYe949UlkUns+myVlnhygJvjlmMeavlSFs 0L7daSC8SsA4h7SWHLMN/hK8neL+almiaR4Lzh19B/6z1eiR4Jf0wUOxObnQK/2P 6MQ376wLtlrpVVOH3DOmVeDTXG2PrkCb+IudHhUPS6kvPZ4cFKjRXVwfMo3kRWSf TN9dg/BghqmTHbJ/83ivOKTYmzgUr8ANlsmHI+lXKeXHA0Gew8FGFKwzz/bjKibW v6A0PPqmxxsKpSvKHuFYJOPKbHKyUZU6Kuk2DOw9nv/TJWdbwVV2uQ/fy+eFVR1v GrbdRL/z1vhHYIlp16ASsvkfQfEZBqM= -----END CERTIFICATE-----Generated at Fri Nov 22 08:04:10 2024 by rpki-client on console-ams.rpki-client.org