$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa File: 5c6a2600-430c-3c39-a484-f05a9a811305.roa (raw, json) Hash identifier: FFewdbQAWVh/YSHl++efWL2ZJ6A7sSIKKWuFDg6pqFs= Subject key identifier: 03:32:A1:24:B7:26:C4:FC:5C:30:C7:E8:AA:A5:29:74:02:14:DF:8F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584782F1027EC66AC9B4CFB60080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa Signing time: Sat 12 Oct 2024 01:00:32 +0000 ROA not before: Sat 12 Oct 2024 01:00:32 +0000 ROA not after: Fri 10 Jan 2025 02:00:32 +0000 asID: 852 IP address blocks: 209.171.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:f1:02:7e:c6:6a:c9:b4:cf:b6:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 12 01:00:32 2024 GMT Not After : Jan 10 02:00:32 2025 GMT Subject: CN=4fd2fe8b-bcc5-4127-bde2-4e65aa3b2287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ed:80:99:d7:a0:c2:87:03:6b:32:26:17:3a: 8f:73:f9:d4:c7:64:06:e2:03:a3:37:ae:a0:22:5b: 3e:98:90:70:11:e3:7b:43:01:67:ef:16:f4:23:07: 7e:97:02:ef:36:ca:bb:fc:30:d2:62:0b:bf:9b:1b: 07:ad:90:3c:c4:b1:25:d9:eb:e3:e8:45:51:94:82: 00:36:fc:f6:74:f1:f5:20:15:cd:16:86:2b:92:5b: 36:8d:54:c3:2b:e8:7e:59:a5:d9:a5:65:b2:7a:2a: 40:c5:8d:92:ce:8c:b8:75:8d:f9:ad:a5:92:df:18: f7:4b:c2:b8:c2:3e:6f:8a:cb:00:a9:a6:c2:ab:32: 14:6e:36:31:fb:b0:4f:9f:6c:7c:02:97:e9:b1:4c: 65:67:a0:d3:cd:81:14:04:ca:32:98:c6:96:11:1b: 83:a4:06:04:e0:b9:fe:22:37:a9:cb:38:9d:ae:15: a4:1d:e8:b4:91:fa:48:1b:9c:b7:c2:12:73:d4:d5: a6:3c:d1:eb:6e:ae:c1:82:2b:ee:25:5b:f6:ec:61: 1f:7c:1f:76:78:66:36:34:02:67:50:3b:e7:de:5d: d8:99:fc:6e:3f:0d:56:3f:d1:f7:46:22:d6:e7:32: 96:3c:d8:db:06:33:de:b4:f0:c8:70:fe:df:cc:36: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:A1:24:B7:26:C4:FC:5C:30:C7:E8:AA:A5:29:74:02:14:DF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:21:6b:31:8f:3d:fd:d0:99:db:8a:a7:38:58:76:bd:fe:76: 6f:5e:a9:78:d3:ee:77:6f:0e:30:d2:b4:3b:8e:4c:7f:9c:33: b0:6c:f0:9e:19:7c:34:17:42:db:91:a7:01:cd:00:14:95:53: 7f:25:f8:da:c0:8b:c1:41:09:7b:97:c8:90:dd:97:e6:6a:d6: 7a:a5:e1:61:dd:9f:33:5f:02:15:4b:f1:42:89:c1:ad:7a:e8: ba:d4:5b:65:dc:9d:72:68:9e:0b:97:cc:b7:c2:cd:3c:63:d4: 28:79:cf:ce:e5:b6:7c:35:12:31:3c:78:43:9d:16:b0:f5:c7: 39:ed:48:36:2c:17:e8:51:29:dd:26:54:b4:05:d3:8a:1c:bd: 33:60:07:cf:fd:97:47:7d:93:f1:bb:12:d0:2a:b8:e7:b7:b8: b3:b5:2e:9f:e1:99:a3:a6:ad:56:78:0b:8a:a4:4a:7e:21:54: 42:43:10:d0:0c:de:1a:21:32:c1:e8:12:a2:ec:dc:84:c2:5b: b0:79:f9:0e:4b:57:d6:08:1c:cf:cd:0b:d6:63:5c:cf:bf:59: d8:ea:cf:d9:e7:47:71:63:4d:75:92:19:5d:82:32:32:b2:fe: ed:22:e1:fd:94:21:f6:c2:d9:d8:d8:4f:22:84:c9:f9:92:d7: 65:af:27:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeC8QJ+xmrJtM+2AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTAxMjAxMDAzMloXDTI1MDExMDAyMDAzMlowLzEtMCsGA1UEAxMk NGZkMmZlOGItYmNjNS00MTI3LWJkZTItNGU2NWFhM2IyMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu2AmdegwocDazImFzqPc/nUx2QG4gOjN66g Ils+mJBwEeN7QwFn7xb0Iwd+lwLvNsq7/DDSYgu/mxsHrZA8xLEl2evj6EVRlIIA Nvz2dPH1IBXNFoYrkls2jVTDK+h+WaXZpWWyeipAxY2Szoy4dY35raWS3xj3S8K4 wj5vissAqabCqzIUbjYx+7BPn2x8ApfpsUxlZ6DTzYEUBMoymMaWERuDpAYE4Ln+ IjepyzidrhWkHei0kfpIG5y3whJz1NWmPNHrbq7BgivuJVv27GEffB92eGY2NAJn UDvn3l3YmfxuPw1WP9H3RiLW5zKWPNjbBjPetPDIcP7fzDY8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMyoSS3JsT8XDDH6KqlKXQCFN+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWM2YTI2MDAtNDMwYy0z YzM5LWE0ODQtZjA1YTlhODExMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0atVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALchazGPPf3QmduKpzhYdr3+dm9eqXjT7ndvDjDStDuOTH+cM7Bs8J4Z fDQXQtuRpwHNABSVU38l+NrAi8FBCXuXyJDdl+Zq1nql4WHdnzNfAhVL8UKJwa16 6LrUW2XcnXJonguXzLfCzTxj1Ch5z87ltnw1EjE8eEOdFrD1xzntSDYsF+hRKd0m VLQF04ocvTNgB8/9l0d9k/G7EtAquOe3uLO1Lp/hmaOmrVZ4C4qkSn4hVEJDENAM 3hohMsHoEqLs3ITCW7B5+Q5LV9YIHM/NC9ZjXM+/Wdjqz9nnR3FjTXWSGV2CMjKy /u0i4f2UIfbC2djYTyKEyfmS12WvJ7I= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:34 2024 by rpki-client on console-ams.rpki-client.org