$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa File: 88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa (raw, json) Hash identifier: gMq/jKRUOJ0qj/u+Wet+L5uuEfJhBuC4tnNTAZuYFlc= Subject key identifier: 43:4F:82:BA:AA:BC:29:93:37:23:09:8C:B1:C6:88:90:81:8B:06:89 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CE6F2D8A92A38A384EC9FD90 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 21723 IP address blocks: 209.53.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:2d:8a:92:a3:8a:38:4e:c9:fd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=e81a2c94-83cd-4b3a-9e72-248e0567dbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:98:75:4b:82:ae:d3:75:67:66:36:cb:9c: 1f:7b:11:ac:1c:a9:06:a6:4d:a1:52:6b:6a:ba:b9: d7:71:9c:6c:46:df:36:e9:9e:48:1b:09:47:30:b5: b5:c3:11:2a:85:33:81:3b:1b:5a:9e:df:2c:b1:41: 74:3c:85:ea:59:26:9c:e7:f6:a0:2a:5d:58:32:4c: 2c:77:81:a3:3d:03:b0:c2:fa:bc:e8:94:63:b8:c6: 56:79:c2:16:f3:19:43:38:5c:fd:48:49:f3:29:24: e5:a2:98:a9:0d:d5:1f:9e:8e:99:5b:68:5e:ed:d5: d7:06:ce:e6:2f:c4:36:f2:09:db:c2:cd:7c:d2:ba: b2:1d:11:50:5a:30:47:2a:46:5e:34:fb:d8:1a:7a: 16:57:23:7a:47:7d:c9:31:e9:a2:ea:1a:7f:cd:86: d3:34:89:2a:46:61:ca:0e:fc:9a:0f:e2:2d:b2:43: d5:ad:5d:17:c1:0f:cc:99:dc:a0:98:9c:9d:2f:92: 69:5f:60:2f:3e:16:76:b1:ab:35:cb:b8:22:83:18: 62:c9:23:39:85:f0:5a:92:fb:1a:18:11:3e:0a:d8: d9:34:a6:72:63:de:0b:a8:e0:e1:fc:8f:a4:8b:b6: 7d:6f:6b:28:00:18:40:0c:e5:aa:e6:b6:54:ca:db: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4F:82:BA:AA:BC:29:93:37:23:09:8C:B1:C6:88:90:81:8B:06:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/88f8b444-dc1b-374c-844b-0bfe001c8fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a4:bf:1f:cd:b5:20:77:76:b5:1b:d9:14:2a:60:4d:7c:59: 1f:51:3e:8f:57:f1:cb:c7:4b:5e:69:69:6e:39:bc:ae:e2:eb: 3f:25:86:cf:c9:ab:fd:4b:4d:85:fe:24:45:cb:5f:8f:d8:a2: c0:dd:fb:e3:97:5d:79:d1:d9:10:63:2d:ac:01:61:c7:d6:29: 2a:52:68:fd:8d:b7:fa:a0:c5:40:a6:c8:ed:32:9c:30:95:65: 69:f4:f1:98:aa:65:cf:cf:01:61:10:f4:ae:0d:fe:c2:93:69: 52:d8:e4:74:06:5e:43:57:d6:c5:5a:da:88:0d:45:d6:02:13: 33:78:76:8b:1c:ea:ad:82:8d:7e:69:0c:ce:11:55:4b:55:28: 61:6d:cf:f0:af:4d:ed:9c:14:d1:1c:ce:7e:0f:6a:29:ba:e1: 85:15:49:36:db:f1:1d:52:8a:9f:33:45:54:50:24:d2:b6:63: d5:81:b9:2b:b3:30:f2:50:5d:df:fb:1b:80:ae:23:d4:54:7f: 9b:87:0e:c1:e6:fb:17:9d:0f:50:75:fa:60:47:18:96:5b:21: 80:bd:fc:7e:c1:33:b0:fd:74:d9:6c:88:43:64:7c:81:5c:f7: 99:63:9a:4f:b6:cb:f6:87:77:4d:3f:46:21:62:cb:39:77:4c: 94:3d:2f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOby2KkqOKOE7J/ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZTgxYTJjOTQtODNjZC00YjNhLTllNzItMjQ4ZTA1NjdkYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCCYdUuCrtN1Z2Y2y5wfexGsHKkGpk2hUmtq urnXcZxsRt826Z5IGwlHMLW1wxEqhTOBOxtant8ssUF0PIXqWSac5/agKl1YMkws d4GjPQOwwvq86JRjuMZWecIW8xlDOFz9SEnzKSTlopipDdUfno6ZW2he7dXXBs7m L8Q28gnbws180rqyHRFQWjBHKkZeNPvYGnoWVyN6R33JMemi6hp/zYbTNIkqRmHK DvyaD+ItskPVrV0XwQ/MmdygmJydL5JpX2AvPhZ2sas1y7gigxhiySM5hfBakvsa GBE+CtjZNKZyY94LqODh/I+ki7Z9b2soABhADOWq5rZUytt9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENPgrqqvCmTNyMJjLHGiJCBiwaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODhmOGI0NDQtZGMxYi0z NzRjLTg0NGItMGJmZTAwMWM4ZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOkvx/NtSB3drUb2RQqYE18WR9RPo9X8cvHS15paW45vK7i6z8lhs/J q/1LTYX+JEXLX4/YosDd++OXXXnR2RBjLawBYcfWKSpSaP2Nt/qgxUCmyO0ynDCV ZWn08ZiqZc/PAWEQ9K4N/sKTaVLY5HQGXkNX1sVa2ogNRdYCEzN4dosc6q2CjX5p DM4RVUtVKGFtz/CvTe2cFNEczn4Paim64YUVSTbb8R1Sip8zRVRQJNK2Y9WBuSuz MPJQXd/7G4CuI9RUf5uHDsHm+xedD1B1+mBHGJZbIYC9/H7BM7D9dNlsiENkfIFc 95ljmk+2y/aHd00/RiFiyzl3TJQ9L2g= -----END CERTIFICATE-----Generated at Fri Nov 22 14:29:18 2024 by rpki-client on console-ams.rpki-client.org