$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa File: 40185669-7cfc-3465-8a11-d5521152b30e.roa (raw, json) Hash identifier: AjJylVmgmGpWNfWlaJ352NRmeae9YczGc8Blrc6MDBU= Subject key identifier: D3:84:14:62:23:06:1F:2F:A8:D0:E7:F8:E6:2B:E0:66:92:6A:66:9E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CA3F7FC5EBDDC36FE61F8680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 25668 IP address blocks: 209.53.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7f:c5:eb:dd:c3:6f:e6:1f:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=33d22746-9a98-47e1-93d0-19527598cf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:cf:4a:c9:bf:be:b5:5e:60:69:01:93:07: f8:d8:87:5f:3a:23:c4:7f:35:1f:62:b8:59:ce:e7: 27:c2:e2:fe:e0:33:1f:33:94:eb:ba:16:96:9a:5f: 88:90:80:65:d7:10:a8:1d:de:32:93:f4:13:85:a0: ef:19:fd:f7:c3:a6:d0:d3:72:b2:67:5c:95:4a:c1: 9a:bb:6d:ce:87:c7:12:76:b7:2e:71:83:46:5e:42: 72:af:96:c9:9c:df:36:53:43:cf:c7:ae:f9:2a:b6: fa:3b:a7:43:7b:5b:a4:12:f8:5f:65:1e:01:fa:d9: 67:b8:7c:eb:36:54:ef:b3:dd:ef:5a:40:83:21:04: 67:52:9d:7b:23:f0:c0:c0:d6:23:f6:75:b0:48:7d: 44:83:23:f4:02:83:17:25:3f:d0:05:7c:15:9a:4a: 6c:b7:7e:9e:cf:1c:69:7a:70:bc:71:e4:38:e3:ce: 5f:91:96:c6:21:f7:1a:22:02:18:b9:ee:1b:8e:cf: c1:ad:ff:9a:de:a8:68:89:81:57:d3:fe:7b:d1:3b: 21:19:fe:1a:2c:a1:de:09:1e:53:e9:ab:7c:36:05: 07:30:bf:70:8e:23:ab:2f:67:de:81:09:ec:18:79: 23:2f:7e:ce:89:80:dd:17:5e:18:c1:30:d7:2a:d8: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:14:62:23:06:1F:2F:A8:D0:E7:F8:E6:2B:E0:66:92:6A:66:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:88:7e:f4:b7:3e:3a:43:1a:f5:f3:dd:cd:3c:a5:be:a8:a8: 33:7b:41:36:b8:2d:90:0b:94:38:08:10:74:e9:ee:4e:6a:0b: 31:44:db:96:4a:80:69:13:f5:7a:51:49:cf:23:19:85:f4:10: b0:14:71:e1:c5:31:a8:67:e7:9d:35:de:43:f5:ab:4b:89:6e: 6b:8b:79:20:cf:55:82:1b:95:71:29:e9:9b:1b:5c:4a:bd:af: ab:5d:fd:06:a9:97:8e:cd:38:cd:d0:ec:cc:88:f5:5a:c3:5f: 39:11:58:93:b0:fa:61:ce:8a:25:5a:4c:71:78:68:21:53:06: e5:1f:a1:8a:b5:11:66:8b:57:dc:2a:a4:bb:22:11:08:66:76: 0a:1a:dd:38:a4:48:f6:bb:bc:0f:fc:96:cb:95:e1:e8:32:00: 75:ee:b1:f6:9c:e1:a6:84:89:7c:d3:e0:ac:29:2a:17:e4:e6: 96:35:38:16:f8:a8:ae:f0:c8:14:f4:e0:d3:61:5f:3e:7d:dd: de:7d:06:89:36:be:55:83:1a:1b:17:30:41:94:2c:a5:75:f7: a1:e4:32:5f:24:9c:01:ac:1f:0c:68:e1:50:4d:10:57:9a:e3: 30:6d:53:aa:38:36:6b:da:aa:1f:93:bc:4f:49:db:58:f7:b8: 6d:1c:cc:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3/F693Db+YfhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzNkMjI3NDYtOWE5OC00N2UxLTkzZDAtMTk1Mjc1OThjZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU7PSsm/vrVeYGkBkwf42IdfOiPEfzUfYrhZ zucnwuL+4DMfM5TruhaWml+IkIBl1xCoHd4yk/QThaDvGf33w6bQ03KyZ1yVSsGa u23Oh8cSdrcucYNGXkJyr5bJnN82U0PPx675Krb6O6dDe1ukEvhfZR4B+tlnuHzr NlTvs93vWkCDIQRnUp17I/DAwNYj9nWwSH1EgyP0AoMXJT/QBXwVmkpst36ezxxp enC8ceQ4485fkZbGIfcaIgIYue4bjs/Brf+a3qhoiYFX0/570TshGf4aLKHeCR5T 6at8NgUHML9wjiOrL2fegQnsGHkjL37OiYDdF14YwTDXKtinfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOEFGIjBh8vqNDn+OYr4GaSamaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDAxODU2NjktN2NmYy0z NDY1LThhMTEtZDU1MjExNTJiMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOIfvS3PjpDGvXz3c08pb6oqDN7QTa4LZALlDgIEHTp7k5qCzFE25ZK gGkT9XpRSc8jGYX0ELAUceHFMahn55013kP1q0uJbmuLeSDPVYIblXEp6ZsbXEq9 r6td/Qapl47NOM3Q7MyI9VrDXzkRWJOw+mHOiiVaTHF4aCFTBuUfoYq1EWaLV9wq pLsiEQhmdgoa3TikSPa7vA/8lsuV4egyAHXusfac4aaEiXzT4KwpKhfk5pY1OBb4 qK7wyBT04NNhXz593d59Bok2vlWDGhsXMEGULKV196HkMl8knAGsHwxo4VBNEFea 4zBtU6o4Nmvaqh+TvE9J21j3uG0czPQ= -----END CERTIFICATE-----Generated at Fri Nov 22 17:28:06 2024 by rpki-client on console-ams.rpki-client.org