$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa File: 243cb8c9-f327-32cd-ae01-b4a75520d28d.roa (raw, json) Hash identifier: SU4Ddrdy2Tu3WUJSQ0LCGbM/aOPgicZkSuGZpeb3pe0= Subject key identifier: 62:5B:2F:CD:D9:C9:FB:98:5D:86:97:FE:51:15:6D:F7:61:B7:9D:71 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DF2F4DABA54653517BFBD700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:4d:ab:a5:46:53:51:7b:fb:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=31dce893-aacc-4d7e-a4fb-b9e97328c3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:8d:28:ca:df:56:17:f1:49:27:05:07:ff: 7f:da:00:54:63:78:8f:ad:52:6e:9f:02:0f:50:14: 2d:90:17:da:48:4d:f8:e9:d4:23:ff:d0:67:83:6d: e9:03:06:f7:c2:a0:41:e3:26:dc:d6:10:5e:84:93: cf:3b:31:86:51:c1:de:f1:5e:a2:55:34:8f:03:2c: 95:b2:a7:81:0f:19:45:0e:39:14:2b:cc:7a:4f:65: 02:80:2b:8a:11:7c:75:54:6f:ad:e7:24:f8:85:f8: 66:aa:a6:d6:ac:db:12:4c:14:1e:37:b6:d6:97:eb: 74:7e:d8:5d:f2:46:cd:a9:54:94:46:94:f8:0a:ac: bb:c4:18:a2:8b:98:93:be:cc:45:bc:b9:ed:f4:a4: 87:f2:05:a7:81:bc:04:94:c3:1c:43:ba:10:90:bb: b7:13:a9:fe:b6:b4:6a:bf:01:61:f5:b2:eb:a1:5f: f3:a6:ba:de:24:f5:e6:c6:a4:f4:6f:12:df:da:8f: fe:26:15:8f:43:58:56:6a:8c:34:1d:a3:fe:02:09: 3c:31:92:b9:54:f6:e8:af:b6:d0:34:49:b4:91:a4: 37:75:b2:e6:ea:11:dd:ae:7e:86:34:4f:2b:7f:be: 17:10:10:ce:d2:21:82:fc:00:cb:c0:c9:e8:c1:0a: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5B:2F:CD:D9:C9:FB:98:5D:86:97:FE:51:15:6D:F7:61:B7:9D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:0c:c7:9f:05:fa:43:bf:e7:bd:3b:e8:94:88:a2:fe:70:3c: d0:ac:71:35:29:33:40:9e:f6:fc:7f:5c:0e:1a:ce:a9:59:d8: c6:34:26:12:c7:03:2c:71:9a:1d:fc:3e:2b:c9:d5:f6:fa:11: ee:f7:9a:d7:b0:39:78:ff:9c:41:66:7a:f9:3e:53:1c:8f:30: 5b:b5:d5:fa:59:f9:42:39:ac:45:58:14:42:eb:1a:63:c7:69: ab:ea:d2:c9:3f:3e:3c:c3:7c:5a:f0:6c:f9:af:89:72:cf:be: a4:36:83:f4:54:26:4c:78:d1:67:20:f7:62:1e:f0:4c:a8:d1: 95:06:3d:c6:9c:59:f7:c8:55:dc:66:6b:51:2f:a4:91:01:8b: 1a:10:24:93:a2:d3:54:8c:4e:a4:5e:df:fe:c3:2b:6e:db:3f: a3:6b:50:b8:98:3a:e7:30:cf:a2:34:1d:ee:e5:1d:6c:b5:41: fb:79:3c:04:4c:d9:c6:27:c7:87:eb:52:a1:01:da:07:55:c7: bd:2f:c2:e6:31:c5:83:aa:3b:4c:9e:fa:86:d4:5f:cb:1c:b0: 89:25:4b:de:8b:7c:70:05:82:b7:f7:64:5a:9e:22:53:1d:49: ce:2d:ec:d8:84:1f:85:bd:d3:2d:70:aa:1f:27:ac:92:69:80: d3:e6:a4:84 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEffL02rpUZTUXv71wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk MzFkY2U4OTMtYWFjYy00ZDdlLWE0ZmItYjllOTczMjhjM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOqNKMrfVhfxSScFB/9/2gBUY3iPrVJunwIP UBQtkBfaSE346dQj/9Bng23pAwb3wqBB4ybc1hBehJPPOzGGUcHe8V6iVTSPAyyV sqeBDxlFDjkUK8x6T2UCgCuKEXx1VG+t5yT4hfhmqqbWrNsSTBQeN7bWl+t0fthd 8kbNqVSURpT4Cqy7xBiii5iTvsxFvLnt9KSH8gWngbwElMMcQ7oQkLu3E6n+trRq vwFh9bLroV/zprreJPXmxqT0bxLf2o/+JhWPQ1hWaow0HaP+Agk8MZK5VPbor7bQ NEm0kaQ3dbLm6hHdrn6GNE8rf74XEBDO0iGC/ADLwMnowQr3OwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGJbL83ZyfuYXYaX/lEVbfdht51xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjQzY2I4YzktZjMyNy0z MmNkLWFlMDEtYjRhNzU1MjBkMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0VkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA4QzHnwX6Q7/nvTvolIii/nA80KxxNSkzQJ72/H9cDhrOqVnYxjQmEscD LHGaHfw+K8nV9voR7vea17A5eP+cQWZ6+T5THI8wW7XV+ln5QjmsRVgUQusaY8dp q+rSyT8+PMN8WvBs+a+Jcs++pDaD9FQmTHjRZyD3Yh7wTKjRlQY9xpxZ98hV3GZr US+kkQGLGhAkk6LTVIxOpF7f/sMrbts/o2tQuJg65zDPojQd7uUdbLVB+3k8BEzZ xifHh+tSoQHaB1XHvS/C5jHFg6o7TJ76htRfyxywiSVL3ot8cAWCt/dkWp4iUx1J zi3s2IQfhb3TLXCqHyeskmmA0+akhA== -----END CERTIFICATE-----Generated at Fri Nov 22 08:04:10 2024 by rpki-client on console-ams.rpki-client.org