$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa File: 825b10e9-fa31-33b9-a80e-e58c85226acf.roa (raw, json) Hash identifier: oPVf5iLxSJi2/d+/4ztf2xKTXTlhf4CmbvqLgvZmFAM= Subject key identifier: 0C:E5:5B:AA:CA:ED:0A:59:5C:06:7E:55:33:77:47:AB:60:9D:5B:FB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D999F0EBF80B79D9C3F23B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.29.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f0:eb:f8:0b:79:d9:c3:f2:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=a093d52d-e7a8-4bd8-9347-a59e0db2c6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:31:53:1f:3f:9f:25:6e:b6:d6:47:28:0c: 1e:2b:5c:eb:74:a2:65:aa:b8:27:e0:26:a5:ca:fe: af:53:99:90:15:98:5e:68:9e:df:6e:1c:01:d4:a9: 07:74:98:8d:57:22:08:78:f7:11:05:e0:28:75:27: 54:bc:9c:3d:33:da:13:87:e5:08:10:35:e6:83:93: 67:5d:e9:4e:66:a0:5a:0a:4f:df:22:ab:5e:1a:af: 9e:11:33:ef:5f:a6:9f:67:a5:20:a2:ec:48:32:36: ed:b8:5f:70:31:89:24:9c:88:18:3d:86:b4:3d:ca: ff:b6:cd:ea:09:91:00:34:7e:06:d6:f9:e5:59:d3: af:ef:d9:24:ae:fa:4b:bf:f3:54:85:70:7f:4e:dd: 73:5d:9b:a3:30:5e:52:1b:8c:88:18:81:80:c7:49: 6e:b4:41:59:60:f9:26:07:b7:d0:e2:55:87:91:06: 81:ec:fb:83:1a:e5:35:86:1c:dc:e7:8f:50:4c:4c: f4:20:40:a0:63:21:eb:9a:14:23:57:b8:01:49:49: fb:cf:c6:e8:0b:03:b8:c6:c7:5e:22:da:89:7d:ee: ee:a5:fa:bd:3b:7c:b9:2e:2f:e0:98:e8:d6:4b:eb: bf:3c:f7:79:d7:d2:c2:16:58:99:fa:89:72:57:ae: 07:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:5B:AA:CA:ED:0A:59:5C:06:7E:55:33:77:47:AB:60:9D:5B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:bc:4e:dc:eb:75:a5:05:d1:1b:7f:3a:4e:be:0d:ca:4e:64: 21:36:a2:12:32:7f:b3:b0:a9:89:e5:3d:0f:64:57:7d:27:87: 37:8b:04:31:4b:64:ef:a6:ba:67:d8:44:70:49:9f:81:b3:41: e0:05:7e:7c:58:09:b7:d4:91:cc:4d:7c:ab:75:96:54:b2:15: 53:fe:a1:44:f5:f0:c1:e6:3a:9b:7c:7c:cd:92:2b:71:d8:64: 2d:d1:12:a9:7b:89:9b:02:0b:db:fc:85:bf:52:6d:00:38:41: f6:cb:d8:b3:d3:ed:6b:4e:c9:93:c2:c5:93:d1:5f:0b:ae:4f: 50:6e:04:ec:88:7b:86:7e:a0:0f:55:79:80:62:de:8f:66:ce: ff:55:3d:dc:12:2c:3b:9c:8b:84:99:ee:12:05:bb:f5:55:03: 86:e6:18:a4:c3:5d:bc:21:cc:25:9c:76:19:36:f8:0d:f2:d3: 5d:83:2d:31:5f:5e:9d:2a:c8:a4:5c:2d:f5:85:73:d8:b8:f9: e9:7b:ae:f3:a8:5b:6c:63:18:5b:cc:c5:d8:5a:35:26:8d:7d: 87:33:ae:a7:35:2b:da:fd:7f:d7:62:89:34:d3:f1:f7:0e:ca: 6c:82:a8:80:21:77:68:f1:4f:f8:2b:03:41:44:db:bc:31:a2: 1a:a8:be:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfDr+At52cPyOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk YTA5M2Q1MmQtZTdhOC00YmQ4LTkzNDctYTU5ZTBkYjJjNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIYxUx8/nyVuttZHKAweK1zrdKJlqrgn4Cal yv6vU5mQFZheaJ7fbhwB1KkHdJiNVyIIePcRBeAodSdUvJw9M9oTh+UIEDXmg5Nn XelOZqBaCk/fIqteGq+eETPvX6afZ6UgouxIMjbtuF9wMYkknIgYPYa0Pcr/ts3q CZEANH4G1vnlWdOv79kkrvpLv/NUhXB/Tt1zXZujMF5SG4yIGIGAx0lutEFZYPkm B7fQ4lWHkQaB7PuDGuU1hhzc549QTEz0IECgYyHrmhQjV7gBSUn7z8boCwO4xsde ItqJfe7upfq9O3y5Li/gmOjWS+u/PPd519LCFliZ+olyV64HRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzlW6rK7QpZXAZ+VTN3R6tgnVv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODI1YjEwZTktZmEzMS0z M2I5LWE4MGUtZTU4Yzg1MjI2YWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0R18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa8TtzrdaUF0Rt/Ok6+DcpOZCE2ohIyf7OwqYnlPQ9kV30nhzeLBDFL ZO+mumfYRHBJn4GzQeAFfnxYCbfUkcxNfKt1llSyFVP+oUT18MHmOpt8fM2SK3HY ZC3REql7iZsCC9v8hb9SbQA4QfbL2LPT7WtOyZPCxZPRXwuuT1BuBOyIe4Z+oA9V eYBi3o9mzv9VPdwSLDuci4SZ7hIFu/VVA4bmGKTDXbwhzCWcdhk2+A3y012DLTFf Xp0qyKRcLfWFc9i4+el7rvOoW2xjGFvMxdhaNSaNfYczrqc1K9r9f9diiTTT8fcO ymyCqIAhd2jxT/grA0FE27wxohqovls= -----END CERTIFICATE-----Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org