$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa File: 92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa (raw, json) Hash identifier: 9dMMQTp2gM9SvFvrPIHofsDHYGxpmWLzObAMPZ0agyA= Subject key identifier: 11:EC:F4:82:54:50:38:DB:D6:3A:D2:0F:78:93:3F:72:9C:BA:06:92 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D6CF457538DB53A165AD8AE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.171.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:45:75:38:db:53:a1:65:ad:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=10aa475c-bfa4-4160-aefe-4e84e63e83c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:ae:06:4e:1f:41:5d:ca:b5:9d:de:78:c3: 39:e1:f1:7b:15:82:aa:dc:18:32:ae:df:cf:a4:b6: 29:10:32:c4:ea:2b:f7:dc:a7:c5:57:33:69:16:24: f9:29:68:38:e1:80:8b:16:98:ea:22:d4:6e:d8:ca: 81:81:a1:8b:df:a5:3d:8a:6b:2c:f8:e2:70:e7:5e: c7:24:7e:fe:9d:60:d7:50:49:d3:9e:0e:5b:41:49: e8:b3:d4:37:08:9f:11:50:14:58:c4:56:c2:6d:00: 52:cf:f8:ba:66:f5:73:be:6f:6e:32:1f:d5:1c:60: d4:71:d4:93:dd:0a:2c:de:4c:7e:42:24:8d:d2:02: b4:01:9b:6d:09:06:2d:fb:43:00:d6:4a:67:a3:c0: 7f:7a:6a:20:6a:d1:50:fb:dc:d2:05:90:51:58:9f: e5:39:c0:b7:c3:f4:48:d3:3f:f6:e5:e0:b7:05:2a: 02:bf:7c:18:bd:c3:e2:eb:4d:b3:06:88:52:52:84: a3:b3:b8:2f:3c:23:56:ff:e7:76:fc:9b:01:77:57: 4c:65:b2:57:4a:75:64:19:1b:d7:c8:dd:2d:9f:59: db:25:da:a3:39:42:e9:d6:9d:28:14:1d:f1:33:9d: 48:71:82:6d:f6:27:69:a9:e5:48:72:46:c3:de:64: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EC:F4:82:54:50:38:DB:D6:3A:D2:0F:78:93:3F:72:9C:BA:06:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/92d70a3f-36ef-3c14-8a5d-13bfe8d634f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:6e:7e:97:56:bc:d8:82:6c:17:be:9d:85:cb:ea:cd:26:ac: b1:c9:88:97:87:89:88:d4:fc:43:85:73:71:ee:06:69:54:63: d5:ba:27:b3:a3:ef:96:4d:12:da:ac:b8:1b:69:ce:40:02:70: 07:cb:73:af:d4:5d:3c:68:7f:d2:dc:cb:67:5b:a5:eb:bf:eb: 1d:d7:51:2c:9b:82:38:89:9b:1b:8e:55:04:c8:21:ef:f8:82: 32:4c:41:c8:42:c0:5b:cf:e5:c6:c1:b6:0d:95:26:52:5a:06: 86:e8:0f:cc:0d:3c:fa:22:55:e6:f1:db:83:82:86:f2:25:9d: 09:41:43:f2:b7:99:b3:47:5c:45:73:33:c4:bc:e5:ca:f3:e3: 8f:20:7b:6e:e6:74:59:8e:e5:56:dd:a8:e8:7c:00:eb:78:78: 3e:34:05:6c:22:05:4d:f7:65:1d:32:7e:78:dd:f1:49:70:44: 42:44:ef:e1:8c:ca:df:1d:07:6f:1e:f6:b5:ad:ea:30:01:80: 95:77:53:81:ea:4c:04:42:a6:57:70:82:7a:26:98:8c:bb:1a: 38:0b:6b:22:2d:e4:7b:f0:93:e2:fd:13:dd:73:6e:b8:1b:73: 48:8f:72:75:07:a4:f0:4d:51:05:0c:4b:d7:17:bd:14:46:81: 2a:eb:9b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0V1ONtToWWtiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk MTBhYTQ3NWMtYmZhNC00MTYwLWFlZmUtNGU4NGU2M2U4M2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotyuBk4fQV3KtZ3eeMM54fF7FYKq3Bgyrt/P pLYpEDLE6iv33KfFVzNpFiT5KWg44YCLFpjqItRu2MqBgaGL36U9imss+OJw517H JH7+nWDXUEnTng5bQUnos9Q3CJ8RUBRYxFbCbQBSz/i6ZvVzvm9uMh/VHGDUcdST 3Qos3kx+QiSN0gK0AZttCQYt+0MA1kpno8B/emogatFQ+9zSBZBRWJ/lOcC3w/RI 0z/25eC3BSoCv3wYvcPi602zBohSUoSjs7gvPCNW/+d2/JsBd1dMZbJXSnVkGRvX yN0tn1nbJdqjOULp1p0oFB3xM51IcYJt9idpqeVIckbD3mS+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHs9IJUUDjb1jrSD3iTP3KcugaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTJkNzBhM2YtMzZlZi0z YzE0LThhNWQtMTNiZmU4ZDYzNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVufpdWvNiCbBe+nYXL6s0mrLHJiJeHiYjU/EOFc3HuBmlUY9W6J7Oj 75ZNEtqsuBtpzkACcAfLc6/UXTxof9Lcy2dbpeu/6x3XUSybgjiJmxuOVQTIIe/4 gjJMQchCwFvP5cbBtg2VJlJaBoboD8wNPPoiVebx24OChvIlnQlBQ/K3mbNHXEVz M8S85crz448ge27mdFmO5VbdqOh8AOt4eD40BWwiBU33ZR0yfnjd8UlwREJE7+GM yt8dB28e9rWt6jABgJV3U4HqTARCpldwgnommIy7GjgLayIt5Hvwk+L9E91zbrgb c0iPcnUHpPBNUQUMS9cXvRRGgSrrm+w= -----END CERTIFICATE-----Generated at Fri Nov 22 08:04:12 2024 by rpki-client on console-ams.rpki-client.org