$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa File: 3ea01a12-51e0-3054-9e81-937b97f56eb0.roa (raw, json) Hash identifier: H8H1qgZW254oaSK46CxespQJFpBxg4uwireHQqmTGDE= Subject key identifier: 8D:31:0E:0C:C3:F6:F5:9E:60:30:E9:88:04:92:EA:65:C2:31:E8:36 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D6CF3C94B8D34214F6531FF4 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.52.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:3c:94:b8:d3:42:14:f6:53:1f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=0f62ef3c-fa4c-4f00-a1f0-bf667118a862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:30:49:6a:db:c0:ae:cb:71:8c:dc:c8:48: be:d2:40:b2:d4:d9:31:dd:86:1a:86:c5:2c:6f:fb: dd:2f:1a:a3:75:be:65:c9:d3:a2:ea:57:c2:3f:99: 57:35:74:c5:4d:02:05:34:39:4c:14:2f:05:5d:a9: 99:84:dd:08:2d:87:31:a1:25:6e:f3:81:ca:c7:76: 98:21:5c:23:0e:04:46:69:7f:c5:58:f3:b0:40:64: a2:41:bb:c6:41:2f:28:b8:21:b6:55:69:7c:2b:06: cb:74:ec:cf:dc:39:eb:3c:36:82:e4:29:7d:c3:a7: b1:02:91:71:a0:b6:03:b8:e9:bb:59:0f:94:b9:dc: 1c:7a:bd:19:cd:6b:f8:b0:aa:85:b0:7a:1e:7a:34: c5:d8:e0:55:a6:0a:07:84:0e:dc:da:5c:a2:ca:a5: 7f:2d:c9:37:7c:7a:8c:97:ac:4d:21:6a:fe:d7:a9: 8c:6c:7f:33:c6:9e:96:7e:4d:07:e1:74:11:44:5e: e1:bd:1a:66:9e:00:ee:2d:a7:98:66:1d:6b:8b:e4: 3a:1e:13:90:80:26:e4:7b:f0:70:fa:3e:2d:af:b3: 85:e7:10:91:ac:c2:29:83:8d:02:44:89:27:b9:4f: 5b:db:3c:5d:da:fb:f6:ba:61:21:b2:dd:8f:82:1d: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:0E:0C:C3:F6:F5:9E:60:30:E9:88:04:92:EA:65:C2:31:E8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ad:6a:81:c3:95:84:ff:39:44:67:59:c8:5f:68:3b:85:72: 87:65:f6:68:b3:38:69:eb:8e:45:69:eb:da:94:26:7e:7a:64: d6:85:db:36:14:7c:f8:91:64:db:87:55:6a:a4:14:ef:91:5e: 5f:3c:a7:90:7d:9c:c5:e5:75:fe:3d:d9:89:23:5d:30:99:0d: 85:3a:ec:9c:4d:cc:00:dd:b1:ac:78:a8:2b:9f:f0:fe:7e:3d: da:59:de:49:3b:28:f5:67:0a:54:51:32:e9:df:7e:6d:e4:c4: 1f:0c:2d:85:9c:88:57:b6:68:94:cc:5f:af:43:f1:b2:df:d7: 51:84:73:17:8f:d7:f0:09:d6:ed:09:c0:33:b9:b2:5e:2b:7e: ae:c7:8c:3b:d0:9c:95:8d:8b:55:6c:90:a2:80:d9:6a:8c:e4: ae:cf:59:22:5e:83:5b:ec:23:43:62:a4:27:c1:4e:62:13:38: 23:82:76:ca:f2:db:a4:23:92:e6:44:5e:fa:0d:d7:24:4d:cf: 50:f3:20:7d:af:fa:db:5d:62:fd:ea:e1:9f:0a:de:35:96:87: 82:3b:5c:43:a2:e0:14:db:18:0c:95:2a:1c:8a:bd:65:b4:18: 96:1a:be:89:c1:fc:20:53:9d:ca:41:1b:97:97:0b:c5:7f:30: f1:04:72:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWzzyUuNNCFPZTH/QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk MGY2MmVmM2MtZmE0Yy00ZjAwLWExZjAtYmY2NjcxMThhODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8IwSWrbwK7LcYzcyEi+0kCy1Nkx3YYahsUs b/vdLxqjdb5lydOi6lfCP5lXNXTFTQIFNDlMFC8FXamZhN0ILYcxoSVu84HKx3aY IVwjDgRGaX/FWPOwQGSiQbvGQS8ouCG2VWl8KwbLdOzP3DnrPDaC5Cl9w6exApFx oLYDuOm7WQ+Uudwcer0ZzWv4sKqFsHoeejTF2OBVpgoHhA7c2lyiyqV/Lck3fHqM l6xNIWr+16mMbH8zxp6Wfk0H4XQRRF7hvRpmngDuLaeYZh1ri+Q6HhOQgCbke/Bw +j4tr7OF5xCRrMIpg40CRIknuU9b2zxd2vv2umEhst2Pgh23hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0xDgzD9vWeYDDpiASS6mXCMeg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2VhMDFhMTItNTFlMC0z MDU0LTllODEtOTM3Yjk3ZjU2ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGtaoHDlYT/OURnWchfaDuFcodl9mizOGnrjkVp69qUJn56ZNaF2zYU fPiRZNuHVWqkFO+RXl88p5B9nMXldf492YkjXTCZDYU67JxNzADdsax4qCuf8P5+ PdpZ3kk7KPVnClRRMunffm3kxB8MLYWciFe2aJTMX69D8bLf11GEcxeP1/AJ1u0J wDO5sl4rfq7HjDvQnJWNi1VskKKA2WqM5K7PWSJeg1vsI0NipCfBTmITOCOCdsry 26QjkuZEXvoN1yRNz1DzIH2v+ttdYv3q4Z8K3jWWh4I7XEOi4BTbGAyVKhyKvWW0 GJYavonB/CBTncpBG5eXC8V/MPEEcog= -----END CERTIFICATE-----Generated at Fri Nov 22 08:04:10 2024 by rpki-client on console-ams.rpki-client.org