$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa File: ae662cba-3801-3b72-94e1-576c6050fea2.roa (raw, json) Hash identifier: h30zPDc22W9+bPyF5UfJPUHJQWuYTODOeGjxx+WpB6A= Subject key identifier: C9:0E:D1:66:BA:C2:A8:C8:73:51:72:EF:38:48:0C:0A:DE:F0:51:51 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DF2F46D27C77F0F45C555B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 209.52.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:46:d2:7c:77:f0:f4:5c:55:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=a3ae1aaf-267a-4de3-bb92-451ed9138942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:26:e1:68:eb:16:2b:70:df:1c:c3:42:60: b0:6a:d1:13:ca:f0:d4:19:75:c7:49:0f:ea:40:c5: 4d:8b:c6:70:8c:d7:b8:d9:29:46:00:5c:e7:31:cb: 4a:8b:c8:d8:ef:6b:23:36:41:71:a6:ff:36:bc:72: 07:78:d5:3a:ad:39:00:53:14:89:f6:12:a2:0b:e9: f1:c8:7b:6c:fc:2d:c2:89:90:0e:68:c6:53:e0:aa: 10:f8:0e:47:80:e0:d5:f7:d6:7a:e3:f8:9b:a6:1b: 5a:e8:e2:61:68:d0:b1:1e:f0:3b:74:43:7d:6c:7d: 20:06:63:e2:2b:77:de:92:67:03:1f:b0:68:f0:68: c7:00:72:25:e7:4f:1f:7a:15:53:15:b7:58:27:69: fb:02:65:67:05:4b:94:fa:6e:5b:86:4b:ff:6a:40: 5f:ce:da:ea:62:0f:7f:33:fc:19:14:3a:db:e1:05: ef:c8:89:cc:a8:4f:40:e1:23:e6:ca:44:3d:42:ac: 30:4a:2e:1c:a6:80:b7:22:8c:07:81:bf:6a:08:ee: ac:90:c2:5e:8c:47:8d:0f:a3:1a:39:16:61:07:f8: b4:1f:44:fa:55:0c:14:5d:3a:90:e8:ac:1d:19:78: 3d:8c:05:3e:0d:5a:fc:a6:3e:a2:e5:9a:7d:5c:43: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:D1:66:BA:C2:A8:C8:73:51:72:EF:38:48:0C:0A:DE:F0:51:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:53:5f:87:6d:08:ab:b4:27:2a:ce:87:dd:22:d6:32:4c:15: 56:9a:45:f6:05:52:3b:97:c7:72:1d:0b:f5:28:65:27:a8:0e: 1e:41:ab:17:9e:7f:f1:b9:6b:25:4a:04:56:3d:55:64:eb:46: 6d:b6:89:d3:9c:34:c2:d1:cd:24:c9:ea:51:23:1b:36:52:33: 4a:75:08:bf:91:e2:1d:bc:5f:f4:72:e4:33:c2:3b:fe:0c:8a: 0a:30:a8:1c:0d:67:69:9e:f2:6c:81:b9:84:db:31:3e:92:1c: 20:91:59:b2:7e:37:ba:ea:85:20:75:40:59:38:f3:85:17:7c: 0d:14:39:df:7e:4c:29:48:94:65:ce:4c:b2:74:0f:9b:06:34: cf:be:45:ce:c7:9d:b0:6a:92:f2:b6:5e:f2:a0:8a:eb:b8:f7: 61:42:7c:cd:ea:62:06:b1:41:0b:09:56:a4:bd:77:7a:68:d9: 1b:e9:a4:80:c9:b9:b7:78:07:1b:19:58:b8:81:27:b1:b2:08: 82:ca:35:97:98:b4:a9:7e:f8:fe:59:b7:99:77:68:8c:aa:1d: d4:62:e1:52:96:05:91:b8:ca:51:e4:b5:4c:68:5f:42:3a:dc: 4a:55:ca:8d:28:0c:05:7b:21:96:40:04:46:b5:54:34:84:e3: 86:88:c3:b0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEffL0bSfHfw9FxVW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk YTNhZTFhYWYtMjY3YS00ZGUzLWJiOTItNDUxZWQ5MTM4OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx14m4WjrFitw3xzDQmCwatETyvDUGXXHSQ/q QMVNi8ZwjNe42SlGAFznMctKi8jY72sjNkFxpv82vHIHeNU6rTkAUxSJ9hKiC+nx yHts/C3CiZAOaMZT4KoQ+A5HgODV99Z64/ibphta6OJhaNCxHvA7dEN9bH0gBmPi K3fekmcDH7Bo8GjHAHIl508fehVTFbdYJ2n7AmVnBUuU+m5bhkv/akBfztrqYg9/ M/wZFDrb4QXvyInMqE9A4SPmykQ9QqwwSi4cpoC3IowHgb9qCO6skMJejEeND6Ma ORZhB/i0H0T6VQwUXTqQ6KwdGXg9jAU+DVr8pj6i5Zp9XENOQQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMkO0Wa6wqjIc1Fy7zhIDAre8FFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWU2NjJjYmEtMzgwMS0z YjcyLTk0ZTEtNTc2YzYwNTBmZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0TQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAU1Nfh20Iq7QnKs6H3SLWMkwVVppF9gVSO5fHch0L9ShlJ6gOHkGrF55/ 8blrJUoEVj1VZOtGbbaJ05w0wtHNJMnqUSMbNlIzSnUIv5HiHbxf9HLkM8I7/gyK CjCoHA1naZ7ybIG5hNsxPpIcIJFZsn43uuqFIHVAWTjzhRd8DRQ5335MKUiUZc5M snQPmwY0z75FzsedsGqS8rZe8qCK67j3YUJ8zepiBrFBCwlWpL13emjZG+mkgMm5 t3gHGxlYuIEnsbIIgso1l5i0qX74/lm3mXdojKod1GLhUpYFkbjKUeS1TGhfQjrc SlXKjSgMBXshlkAERrVUNITjhojDsA== -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:38 2024 by rpki-client on console-ams.rpki-client.org