$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa File: 72de5635-1343-3d96-9a79-e23be9d45b85.roa (raw, json) Hash identifier: CBAer4a0jxQk+hcSwLU6diihR3WCMty7oslgVRTGiaM= Subject key identifier: 3B:52:75:63:76:63:AE:A7:B5:B8:2A:66:B7:10:97:C9:FD:37:BE:4B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DC649D3C1533751308CF1780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 852 IP address blocks: 209.115.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:9d:3c:15:33:75:13:08:cf:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=181b1e67-cc05-4dcb-84d7-0d00bb5d3fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:c4:ff:9a:a8:df:d4:27:5f:1c:fc:f3:75: e7:73:6c:94:2c:6d:15:1f:0b:f7:33:95:2b:69:86: df:74:56:e2:ff:15:00:f7:0e:2d:c0:87:2d:a4:86: f3:69:0f:bb:d8:6b:43:a9:26:67:d5:3e:c3:39:ce: d9:24:6e:d2:c6:83:93:62:79:89:c9:f6:8d:d1:ca: 34:f6:28:5b:a6:16:f2:5b:3d:ea:ae:56:b1:81:0e: bb:f9:86:e0:a2:d0:07:8b:42:2a:a5:61:aa:c2:a2: 86:7c:14:4e:2f:bc:2b:59:c0:f0:62:f2:97:d1:25: aa:2a:06:ac:eb:2c:d8:40:c7:fb:e5:c6:73:e1:a8: 5f:24:25:75:4f:5a:79:28:c8:e5:77:86:df:81:17: b2:d4:31:4f:7e:af:04:61:18:e8:f8:8f:6a:36:d5: 16:1c:fe:55:00:92:cd:24:5c:69:e0:a6:6f:cf:f4: 04:c3:8a:1c:27:b6:ac:74:ee:84:70:ab:a8:35:b7: 84:43:40:51:25:22:1f:7c:2f:e1:c0:00:70:ed:da: 96:a4:9e:37:76:c2:bc:eb:58:03:37:5c:82:a0:30: 6f:eb:f9:e5:0a:2d:aa:3c:38:a4:e5:c1:af:7f:90: 24:67:a2:00:15:fd:bb:ce:45:63:c3:56:36:9a:0c: 5c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:52:75:63:76:63:AE:A7:B5:B8:2A:66:B7:10:97:C9:FD:37:BE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.115.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:27:ef:ad:7d:3d:f8:05:ad:f3:ee:45:41:29:88:af:de:e4: 01:66:88:16:30:ce:c8:4f:29:88:06:d4:aa:d8:52:b2:bf:1a: 8a:22:fc:79:35:b1:01:0b:52:eb:7d:5f:8d:94:b9:ee:91:12: cb:4b:c8:44:1f:17:f8:ae:3d:ba:8b:61:5b:cb:32:2e:73:a0: 46:fe:15:ac:ef:4a:f7:10:02:b0:8c:0e:f0:fa:4f:6e:42:87: 3a:ce:62:19:11:dc:5f:5a:b7:69:75:4f:70:48:13:d4:03:c3: 81:a1:5b:5c:c2:30:d4:b0:12:c9:76:78:b9:a8:2d:e9:5d:24: 97:fa:a1:f4:73:96:ba:42:c0:57:d1:bc:02:ca:01:6a:b1:ae: 88:3b:b9:64:7a:b7:56:a6:b2:10:bc:2c:73:c8:23:89:ed:60: 01:c6:4f:13:79:e2:16:dd:85:7d:e6:2a:22:5d:52:92:9c:a1: 8f:ae:a1:98:e4:ce:78:01:9d:37:a0:88:82:99:a5:4a:6d:89: 1e:d8:ef:a8:2b:57:58:47:4b:9c:f1:c4:93:ec:b6:be:8f:99: 15:ba:5d:36:df:ab:c0:c4:1c:68:52:0a:ac:90:77:7b:00:6e: 47:21:70:e7:58:07:83:e7:f8:44:02:14:3f:46:3b:f8:2e:c9: 6a:0b:82:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZJ08FTN1EwjPF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk MTgxYjFlNjctY2MwNS00ZGNiLTg0ZDctMGQwMGJiNWQzZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc7E/5qo39QnXxz883Xnc2yULG0VHwv3M5Ur aYbfdFbi/xUA9w4twIctpIbzaQ+72GtDqSZn1T7DOc7ZJG7SxoOTYnmJyfaN0co0 9ihbphbyWz3qrlaxgQ67+YbgotAHi0IqpWGqwqKGfBROL7wrWcDwYvKX0SWqKgas 6yzYQMf75cZz4ahfJCV1T1p5KMjld4bfgRey1DFPfq8EYRjo+I9qNtUWHP5VAJLN JFxp4KZvz/QEw4ocJ7asdO6EcKuoNbeEQ0BRJSIffC/hwABw7dqWpJ43dsK861gD N1yCoDBv6/nlCi2qPDik5cGvf5AkZ6IAFf27zkVjw1Y2mgxcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtSdWN2Y66ntbgqZrcQl8n9N75LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzJkZTU2MzUtMTM0My0z ZDk2LTlhNzktZTIzYmU5ZDQ1Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0XOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcn7619PfgFrfPuRUEpiK/e5AFmiBYwzshPKYgG1KrYUrK/Gooi/Hk1 sQELUut9X42Uue6REstLyEQfF/iuPbqLYVvLMi5zoEb+FazvSvcQArCMDvD6T25C hzrOYhkR3F9at2l1T3BIE9QDw4GhW1zCMNSwEsl2eLmoLeldJJf6ofRzlrpCwFfR vALKAWqxrog7uWR6t1amshC8LHPII4ntYAHGTxN54hbdhX3mKiJdUpKcoY+uoZjk zngBnTegiIKZpUptiR7Y76grV1hHS5zxxJPstr6PmRW6XTbfq8DEHGhSCqyQd3sA bkchcOdYB4Pn+EQCFD9GO/guyWoLghE= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:48 2024 by rpki-client on console-fra.rpki-client.org