$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa File: 7e03c240-d40c-3273-b7bb-24a81d00abf6.roa (raw, json) Hash identifier: oBzc7Nr9ehE9VF6M/Yb4vBWdETr0H4IYbbFmLy/Ug3Y= Subject key identifier: D4:6D:4D:B9:7A:19:60:16:25:A2:7B:B8:AA:47:E7:EC:F0:55:0E:46 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D6CF4442F69AD8E4668D7500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.53.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:44:42:f6:9a:d8:e4:66:8d:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=022548b0-44b0-4ccf-a768-c6a116a113fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:f8:4a:44:0a:2c:f5:e7:e6:dc:2f:99:30: c8:12:83:81:e4:25:37:f4:82:d5:f4:3a:00:30:56: f6:d5:b9:70:85:ea:94:e3:0e:61:a7:f3:e7:80:af: c0:a6:8a:4c:25:4f:ca:3e:b8:c9:62:d4:1f:42:bc: c1:a7:7c:4e:81:51:3d:87:95:2f:87:ef:ef:55:02: 8f:7d:af:d6:49:46:fe:d0:ce:6f:df:95:e1:bc:15: 54:b3:c7:0d:43:c7:fa:e8:55:5f:15:c9:81:4e:9b: 0f:06:68:24:0f:f8:e7:d3:0e:72:3f:1a:6d:d6:2f: fa:67:d7:8c:e6:fd:74:33:3b:3c:51:1c:5a:1d:d3: 8c:f7:ee:50:0e:5f:23:cc:68:6b:94:da:ed:16:d5: 49:71:f8:e2:9f:71:64:a7:12:fe:82:92:bc:8a:8f: c9:5f:fc:a5:22:cc:a8:82:0c:4f:2a:bd:b0:8d:cd: 05:f0:6b:da:b6:35:e8:4e:63:a8:cd:dc:e3:80:f1: 03:35:2b:54:ce:6b:b4:7d:46:08:ce:2b:64:f5:b0: ed:5f:37:ff:e6:5f:3f:ad:32:64:9a:33:8e:a9:7c: d4:0d:83:6c:f7:7f:55:7f:a2:2b:b6:ab:84:21:3f: e2:4a:74:0c:16:28:77:f0:02:a6:d2:28:3a:31:76: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6D:4D:B9:7A:19:60:16:25:A2:7B:B8:AA:47:E7:EC:F0:55:0E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:21:f9:e8:bf:72:e1:8e:04:eb:d2:5a:d3:e7:02:73:9f:d9: db:54:62:c2:b5:02:8c:9f:a8:8c:c5:59:49:49:37:4e:5b:b8: 85:2d:ed:19:43:4a:0f:2b:92:1f:d1:28:0e:dd:fa:4d:60:fd: 82:45:e0:9b:68:b2:85:6b:c4:cd:3e:ca:18:1d:ed:ce:47:40: f2:bb:80:4e:d2:94:1b:a4:36:fb:a8:09:d2:c4:ac:9e:5e:9b: 22:54:b2:66:f4:81:b1:25:e2:e1:3a:b5:fe:c8:e2:35:78:d0: 3c:80:61:1b:82:82:18:f4:4f:16:c8:85:2b:e4:d1:78:a3:61: 2e:55:7f:1e:21:aa:dd:f7:10:97:28:cc:5b:1a:7e:34:3e:fe: 2c:82:24:17:51:04:3f:68:e2:a0:11:74:2e:3b:2b:c7:09:16: 26:e0:d4:38:af:c1:2b:a7:7e:d7:d1:0f:cf:d2:e7:55:6b:55: 2c:92:50:9b:07:ed:ca:e4:a0:d5:76:62:a8:f4:33:ce:7d:4f: cb:07:54:99:7e:67:f2:96:d0:98:1b:21:73:21:f3:27:6e:e1: 15:92:48:cc:3a:85:98:b8:2d:e4:6f:ac:88:c7:1a:b7:9f:db: 24:62:f3:fe:3b:13:34:0f:33:9e:52:bc:2b:3b:03:65:43:94: 45:c8:48:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0RC9prY5GaNdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk MDIyNTQ4YjAtNDRiMC00Y2NmLWE3NjgtYzZhMTE2YTExM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogz4SkQKLPXn5twvmTDIEoOB5CU39ILV9DoA MFb21blwheqU4w5hp/PngK/ApopMJU/KPrjJYtQfQrzBp3xOgVE9h5Uvh+/vVQKP fa/WSUb+0M5v35XhvBVUs8cNQ8f66FVfFcmBTpsPBmgkD/jn0w5yPxpt1i/6Z9eM 5v10Mzs8URxaHdOM9+5QDl8jzGhrlNrtFtVJcfjin3FkpxL+gpK8io/JX/ylIsyo ggxPKr2wjc0F8GvatjXoTmOozdzjgPEDNStUzmu0fUYIzitk9bDtXzf/5l8/rTJk mjOOqXzUDYNs939Vf6IrtquEIT/iSnQMFih38AKm0ig6MXbalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRtTbl6GWAWJaJ7uKpH5+zwVQ5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2UwM2MyNDAtZDQwYy0z MjczLWI3YmItMjRhODFkMDBhYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYh+ei/cuGOBOvSWtPnAnOf2dtUYsK1AoyfqIzFWUlJN05buIUt7RlD Sg8rkh/RKA7d+k1g/YJF4JtosoVrxM0+yhgd7c5HQPK7gE7SlBukNvuoCdLErJ5e myJUsmb0gbEl4uE6tf7I4jV40DyAYRuCghj0TxbIhSvk0XijYS5Vfx4hqt33EJco zFsafjQ+/iyCJBdRBD9o4qARdC47K8cJFibg1DivwSunftfRD8/S51VrVSySUJsH 7crkoNV2Yqj0M859T8sHVJl+Z/KW0JgbIXMh8ydu4RWSSMw6hZi4LeRvrIjHGref 2yRi8/47EzQPM55SvCs7A2VDlEXISJM= -----END CERTIFICATE-----Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org