$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa File: 626acb6f-a9f2-3ded-95e5-811dd7647975.roa (raw, json) Hash identifier: Z6RdfW9spMYr3UbOluBKjYA3TCFtOmIUgpA3B5U3A74= Subject key identifier: A3:D1:89:DC:C4:A6:1A:31:82:8A:15:43:60:4C:C9:85:25:BE:53:FF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858472835F9E451A143FA9E8ACA00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa Signing time: Mon 09 Sep 2024 13:00:41 +0000 ROA not before: Mon 09 Sep 2024 13:00:41 +0000 ROA not after: Sun 08 Dec 2024 14:00:41 +0000 asID: 54359 IP address blocks: 209.52.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:28:35:f9:e4:51:a1:43:fa:9e:8a:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 9 13:00:41 2024 GMT Not After : Dec 8 14:00:41 2024 GMT Subject: CN=9b1c9d8a-ccbe-4ef4-afc3-6fefe3d6a9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:61:94:85:7a:d7:4d:f4:f6:38:f6:f5:4e: f5:43:d1:2b:5d:a8:52:ef:43:5d:f7:01:97:de:77: c1:a6:17:cd:14:5c:b4:a4:f2:ec:cc:82:12:ed:ee: ad:ad:e9:76:82:16:e7:3c:28:7e:b0:a8:1b:12:e2: 30:82:ce:d1:ef:8b:a4:46:ba:3a:d2:9d:74:b1:b8: d3:29:f4:07:5d:c6:e4:8e:35:df:07:ed:99:a9:f1: 5c:3e:a1:1a:97:b8:49:f1:1a:e0:5a:28:60:01:1b: 92:98:17:eb:dc:e7:c4:28:4a:05:3e:4a:5d:4b:42: 04:c6:63:80:c4:68:23:32:74:8a:e6:7b:34:58:70: 72:b6:f8:54:73:3b:c1:f0:28:4e:6c:9c:31:a5:51: 62:c4:92:ba:61:81:dc:69:18:ec:b9:31:a7:16:96: 84:12:1c:59:9d:18:c9:2d:e3:7a:00:35:5b:d1:14: 83:a1:1b:3d:39:5d:14:89:e1:26:12:8b:21:a1:1c: ac:18:d3:2d:a7:84:a9:7b:6d:89:98:a5:06:03:3d: a0:fb:a8:db:53:3b:55:08:18:f1:42:a2:40:43:6b: bf:c7:e1:65:a9:b8:26:b4:e0:3f:40:4d:e3:d8:03: b2:d0:03:90:f4:59:25:bb:e2:76:b7:15:c1:90:58: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D1:89:DC:C4:A6:1A:31:82:8A:15:43:60:4C:C9:85:25:BE:53:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f5:be:ac:c8:aa:21:bf:cd:47:d9:67:8f:ce:29:eb:2c:dc:13: f4:4e:01:66:6f:39:45:61:cf:95:a7:01:f5:e9:da:8b:6f:01: f5:59:17:bb:87:a5:94:dd:d2:20:60:71:32:2e:90:25:0e:a7: 5f:87:48:33:97:28:ec:a4:c5:33:b9:af:31:6a:26:a1:f8:54: 81:1a:34:f1:ce:cf:e4:9a:7b:8a:84:9d:b3:0b:22:5b:9c:6e: 1e:b4:4e:92:37:5d:94:67:5b:a6:c1:91:a8:58:cd:2f:39:57: 1f:15:50:e2:13:6e:09:97:ff:b6:47:48:a5:98:4b:27:7a:7d: 5c:86:2a:05:03:09:9a:8f:78:5f:d2:61:1f:5a:ee:f7:32:95: 2b:c3:26:66:13:b5:c8:1f:89:60:f4:01:86:c3:86:7d:1b:4f: b4:80:b2:a7:77:bd:fa:08:df:3e:78:ca:5a:fe:6c:03:34:84: f6:00:37:7f:c6:70:f4:5e:39:e6:11:10:54:c8:60:5d:e9:a2: 15:35:27:ee:22:83:0c:bf:e1:60:27:57:68:00:ee:10:47:d9: 75:53:c1:0a:3d:79:c0:72:c5:c2:06:fa:8c:f3:0b:18:67:8b: 59:da:47:19:ab:5d:1b:68:c6:4d:3b:71:9d:80:2c:05:e8:68: c1:ef:2d:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcoNfnkUaFD+p6KygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDkwOTEzMDA0MVoXDTI0MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OWIxYzlkOGEtY2NiZS00ZWY0LWFmYzMtNmZlZmUzZDZhOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPJhlIV610309jj29U71Q9ErXahS70Nd9wGX 3nfBphfNFFy0pPLszIIS7e6trel2ghbnPCh+sKgbEuIwgs7R74ukRro60p10sbjT KfQHXcbkjjXfB+2ZqfFcPqEal7hJ8RrgWihgARuSmBfr3OfEKEoFPkpdS0IExmOA xGgjMnSK5ns0WHBytvhUczvB8ChObJwxpVFixJK6YYHcaRjsuTGnFpaEEhxZnRjJ LeN6ADVb0RSDoRs9OV0UieEmEoshoRysGNMtp4Spe22JmKUGAz2g+6jbUztVCBjx QqJAQ2u/x+FlqbgmtOA/QE3j2AOy0AOQ9Fklu+J2txXBkFgVVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPRidzEphoxgooVQ2BMyYUlvlP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjI2YWNiNmYtYTlmMi0z ZGVkLTk1ZTUtODExZGQ3NjQ3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPW+rMiqIb/NR9lnj84p6yzcE/ROAWZvOUVhz5WnAfXp2otvAfVZF7uH pZTd0iBgcTIukCUOp1+HSDOXKOykxTO5rzFqJqH4VIEaNPHOz+Sae4qEnbMLIluc bh60TpI3XZRnW6bBkahYzS85Vx8VUOITbgmX/7ZHSKWYSyd6fVyGKgUDCZqPeF/S YR9a7vcylSvDJmYTtcgfiWD0AYbDhn0bT7SAsqd3vfoI3z54ylr+bAM0hPYAN3/G cPReOeYREFTIYF3pohU1J+4igwy/4WAnV2gA7hBH2XVTwQo9ecByxcIG+ozzCxhn i1naRxmrXRtoxk07cZ2ALAXoaMHvLSo= -----END CERTIFICATE-----Generated at Mon Nov 25 13:51:10 2024 by rpki-client on console-ams.rpki-client.org