$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fabe1ae-415e-3c46-9d4c-bb498e5d9568.roa File: 2fabe1ae-415e-3c46-9d4c-bb498e5d9568.roa (raw, json) Hash identifier: XKDF3gPMB8xciunAbvQUvgJ3I72SSoZuczuvU55uSE8= Subject key identifier: B7:79:8C:CB:BC:3D:A8:E9:6D:74:5E:5C:32:CB:96:85:A1:B9:79:36 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D6CF44510DFDE25C66C4EA80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fabe1ae-415e-3c46-9d4c-bb498e5d9568.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.89.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:44:51:0d:fd:e2:5c:66:c4:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=bedc0ddc-21fd-40b8-905e-7827d592c0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8d:fd:d6:95:91:54:2e:62:25:06:dc:f8:db: 34:28:55:0b:b6:cb:cc:03:61:ef:a8:b1:57:ff:42: 35:0e:b1:e9:b8:86:ce:5d:d1:4c:e8:1b:91:39:3a: 46:16:3f:d0:eb:4c:c9:d5:6a:91:f8:2a:6a:6d:9f: 2a:db:89:19:b0:b3:76:4b:36:e9:5e:37:03:0f:00: e3:59:3d:bb:13:f7:59:19:e8:8d:81:db:e1:cd:a1: 64:3f:f1:8d:12:4c:af:a5:fd:7a:14:06:06:b2:17: da:43:ef:4a:43:c5:37:5a:7a:52:d8:b1:3f:8d:4f: 62:b8:01:46:c2:21:7f:13:d8:49:16:ba:f1:18:24: 93:16:1a:cd:59:22:a5:40:e3:62:f7:fc:16:06:87: 62:17:a9:46:a7:63:52:8d:19:a3:17:5f:f4:47:99: 88:39:98:d8:59:34:86:03:c1:41:37:c5:4e:fb:6a: 74:0b:f8:77:56:17:5e:a2:2f:c7:6a:41:29:ec:fb: d0:50:39:61:e9:b8:8f:0c:6a:9c:19:c0:54:ea:9a: 1d:82:51:73:2d:97:cd:25:2b:41:93:a1:17:c4:4d: 97:d1:48:26:ec:8a:32:6f:1f:4c:77:c3:87:ff:51: 53:61:e6:06:70:b8:5b:50:a4:41:c7:4e:da:b6:fa: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:79:8C:CB:BC:3D:A8:E9:6D:74:5E:5C:32:CB:96:85:A1:B9:79:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fabe1ae-415e-3c46-9d4c-bb498e5d9568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ee:95:63:eb:05:7b:39:1f:3a:f9:ef:91:e1:1b:fe:f4:d1:e8: 7b:50:aa:49:1e:42:25:45:26:73:53:c5:91:c0:e9:49:a7:bc: ed:37:81:86:ca:02:bf:8a:a6:ad:82:63:2e:03:d4:c9:48:1f: 61:27:90:0f:ad:6f:5b:f0:f3:4b:15:35:01:f2:95:09:00:a5: e1:8e:a3:8b:c3:b3:7c:c8:cc:c6:89:4d:9e:b8:38:17:ff:d4: ee:ee:b6:52:47:d8:84:12:6c:92:11:95:e0:37:0c:20:f6:8b: a5:b5:85:4c:f2:c2:ca:c7:8b:d9:57:ea:82:33:5e:50:86:73: 58:47:50:1a:53:fe:53:e9:ae:35:45:e1:28:f3:12:0c:83:10: 77:cb:21:a3:20:43:bf:f9:d4:64:bc:5e:dd:ba:1c:e9:ea:39: da:8e:f7:be:be:30:95:9e:72:c8:f3:4f:3e:cf:f3:a7:01:73: 19:f9:ac:72:26:d9:84:63:ab:f3:a0:e5:69:4d:87:34:69:75: df:90:78:25:1f:c8:2e:4b:9f:47:21:c7:90:e5:16:cd:59:c5: 1a:be:95:e0:c2:71:b2:69:4a:42:68:fe:42:7b:d3:23:65:ea: 14:e2:0f:83:c6:ee:c4:38:46:b7:85:22:5c:ad:81:02:e2:b4: 0b:fb:2b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0RRDf3iXGbE6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk YmVkYzBkZGMtMjFmZC00MGI4LTkwNWUtNzgyN2Q1OTJjMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4391pWRVC5iJQbc+Ns0KFULtsvMA2HvqLFX /0I1DrHpuIbOXdFM6BuROTpGFj/Q60zJ1WqR+CpqbZ8q24kZsLN2SzbpXjcDDwDj WT27E/dZGeiNgdvhzaFkP/GNEkyvpf16FAYGshfaQ+9KQ8U3WnpS2LE/jU9iuAFG wiF/E9hJFrrxGCSTFhrNWSKlQONi9/wWBodiF6lGp2NSjRmjF1/0R5mIOZjYWTSG A8FBN8VO+2p0C/h3Vhdeoi/HakEp7PvQUDlh6biPDGqcGcBU6podglFzLZfNJStB k6EXxE2X0Ugm7Ioybx9Md8OH/1FTYeYGcLhbUKRBx07atvr5mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd5jMu8PajpbXReXDLLloWhuXk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmZhYmUxYWUtNDE1ZS0z YzQ2LTlkNGMtYmI0OThlNWQ5NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VmLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO6VY+sFezkfOvnvkeEb/vTR6HtQqkkeQiVFJnNTxZHA6UmnvO03gYbK Ar+Kpq2CYy4D1MlIH2EnkA+tb1vw80sVNQHylQkApeGOo4vDs3zIzMaJTZ64OBf/ 1O7utlJH2IQSbJIRleA3DCD2i6W1hUzywsrHi9lX6oIzXlCGc1hHUBpT/lPprjVF 4SjzEgyDEHfLIaMgQ7/51GS8Xt26HOnqOdqO976+MJWecsjzTz7P86cBcxn5rHIm 2YRjq/Og5WlNhzRpdd+QeCUfyC5Ln0chx5DlFs1ZxRq+leDCcbJpSkJo/kJ70yNl 6hTiD4PG7sQ4RreFIlytgQLitAv7K3I= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:48 2024 by rpki-client on console-fra.rpki-client.org