$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa File: 7365ab5e-2536-360e-9125-353c16dd4a7e.roa (raw, json) Hash identifier: BMpV+FM1kLTG3Rc9VJG4R8eTorI8+A2HMjZSscM1NKY= Subject key identifier: 49:E5:64:D1:33:CF:17:4D:79:EF:75:24:B4:20:B8:D5:61:14:03:62 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CE6F2CBFDABD4C7FA48C38C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 25668 IP address blocks: 209.53.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:2c:bf:da:bd:4c:7f:a4:8c:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=a2efb82b-9d74-47b9-bacb-a19eaa12cbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:45:4f:1a:42:aa:fb:b7:f0:e8:c5:6d:b2: 73:bc:52:f8:3f:5f:0b:73:74:b2:21:08:2c:6b:dd: 89:13:a2:3e:16:ae:07:ef:dc:76:f1:1f:f5:c6:67: 32:9f:e1:28:2e:58:89:14:5a:2a:13:48:85:5b:b9: 28:7f:78:9a:92:8b:32:ac:ec:bd:fd:26:64:ca:2f: 60:b6:a1:5a:58:8f:78:64:c6:d1:3e:a7:85:a3:5c: 76:53:6b:76:77:1e:57:47:9e:38:4f:7f:0a:bc:4f: 16:b1:63:07:91:46:85:35:35:bd:c4:ca:03:35:45: aa:f6:1e:cf:22:04:26:af:bd:48:c0:a6:ec:49:d5: b4:32:ab:b0:b1:07:16:0b:92:31:9f:17:13:70:9e: ce:b4:07:87:bd:90:db:96:ad:3e:24:6f:30:da:e0: a8:5c:91:97:7b:9f:73:83:14:be:12:77:b7:81:b7: 75:7b:d8:d9:95:e5:b6:44:e1:11:36:79:20:0c:34: c1:de:a2:8f:66:4d:23:0f:b9:8e:e2:0b:51:19:46: 6d:8c:ee:8d:64:3f:e7:b9:46:69:10:bb:53:4f:f3: 28:23:ef:69:77:a3:20:aa:0f:0c:43:1c:8d:d9:07: 1f:d0:1b:0d:7a:5c:cf:0e:1e:ba:8c:71:9c:44:1c: 6a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E5:64:D1:33:CF:17:4D:79:EF:75:24:B4:20:B8:D5:61:14:03:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:74:f1:91:3e:ce:ac:62:83:ae:23:87:58:b9:85:06:fa:84: 7e:40:29:89:37:95:2d:ac:3d:0f:4c:a6:d8:d3:0f:fb:cd:b9: cb:50:90:46:2e:a4:81:fa:02:50:2f:ef:6b:26:f4:7d:44:27: 1c:14:c0:52:96:a0:a2:67:8c:aa:28:d1:38:af:c4:c1:39:cb: 2b:09:e9:6b:a3:ae:60:be:68:e8:8b:af:52:f5:cb:f6:c6:91: ac:6d:1d:47:38:7b:00:38:bd:c6:74:f5:ca:93:d4:c8:e1:bc: 30:06:eb:e8:0d:f7:d5:1f:62:35:2e:bc:36:54:a9:12:82:29: 45:b9:77:78:6c:86:5f:e4:85:f4:79:fe:bc:7d:20:6e:bb:cc: 35:20:2b:f0:7e:8c:44:33:25:a2:cd:e2:58:dd:a8:59:8a:36: 7c:88:6b:18:26:d9:40:16:72:65:bc:20:84:0d:23:cf:4c:7e: e0:9f:da:20:64:39:cc:cc:c7:68:06:3b:ae:8f:b0:af:d5:ca: 14:b2:79:31:2a:1f:b3:f9:c6:a5:1c:d4:5e:11:3b:d0:7e:18: 41:dc:d2:71:70:ae:80:db:d1:66:89:24:5a:93:44:94:ce:7f: e2:24:40:ef:22:12:36:d7:22:96:f7:1a:08:36:89:e5:b6:22: 67:45:b2:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObyy/2r1Mf6SMOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk YTJlZmI4MmItOWQ3NC00N2I5LWJhY2ItYTE5ZWFhMTJjYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoFFTxpCqvu38OjFbbJzvFL4P18Lc3SyIQgs a92JE6I+Fq4H79x28R/1xmcyn+EoLliJFFoqE0iFW7kof3iakosyrOy9/SZkyi9g tqFaWI94ZMbRPqeFo1x2U2t2dx5XR544T38KvE8WsWMHkUaFNTW9xMoDNUWq9h7P IgQmr71IwKbsSdW0MquwsQcWC5IxnxcTcJ7OtAeHvZDblq0+JG8w2uCoXJGXe59z gxS+Ene3gbd1e9jZleW2ROERNnkgDDTB3qKPZk0jD7mO4gtRGUZtjO6NZD/nuUZp ELtTT/MoI+9pd6Mgqg8MQxyN2Qcf0BsNelzPDh66jHGcRBxqpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnlZNEzzxdNee91JLQguNVhFANiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzM2NWFiNWUtMjUzNi0z NjBlLTkxMjUtMzUzYzE2ZGQ0YTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0TXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMp08ZE+zqxig64jh1i5hQb6hH5AKYk3lS2sPQ9MptjTD/vNuctQkEYu pIH6AlAv72sm9H1EJxwUwFKWoKJnjKoo0TivxME5yysJ6WujrmC+aOiLr1L1y/bG kaxtHUc4ewA4vcZ09cqT1MjhvDAG6+gN99UfYjUuvDZUqRKCKUW5d3hshl/khfR5 /rx9IG67zDUgK/B+jEQzJaLN4ljdqFmKNnyIaxgm2UAWcmW8IIQNI89MfuCf2iBk OczMx2gGO66PsK/VyhSyeTEqH7P5xqUc1F4RO9B+GEHc0nFwroDb0WaJJFqTRJTO f+IkQO8iEjbXIpb3Ggg2ieW2ImdFsrw= -----END CERTIFICATE-----Generated at Fri Nov 22 21:07:24 2024 by rpki-client on console-fra.rpki-client.org