$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa File: f3afbd83-49e1-3165-a905-705c78b5f80a.roa (raw, json) Hash identifier: XEBHUe2YA+cpJ2VtCQtANUcJcy+dnAPgbP3cy7wiLM8= Subject key identifier: 85:BB:A2:F2:B0:91:65:20:DD:29:D0:13:3D:63:19:F6:0E:86:31:55 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CE6F2F012D8377ADFCBE2AA0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 19905 IP address blocks: 209.53.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:2f:01:2d:83:77:ad:fc:be:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=dd2df38a-6cc9-4b6d-b826-88182746e242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:57:b7:91:36:0c:44:3a:11:51:2f:9b:77: 3b:fc:d7:f9:a7:3d:ef:66:7e:1a:ec:5d:dd:d2:6f: 12:c9:0c:07:c7:b1:3c:a7:84:81:6d:2c:e7:b3:3c: 8d:6b:94:78:41:61:37:73:e3:e1:61:5f:48:a6:6d: d5:78:70:7f:d7:82:dd:2c:d3:15:e6:c0:e6:73:15: 38:a0:bc:d8:86:cb:e8:d7:dc:eb:72:d6:3f:7a:59: 9d:98:15:08:3e:46:5d:78:73:fb:69:24:aa:b4:18: a9:e1:99:59:b8:4d:56:c5:37:9b:a4:82:1f:98:83: 7d:06:5e:b1:98:4c:b6:5b:68:cc:a5:0d:3e:48:12: 4f:0e:1e:03:74:ff:9a:d7:1a:19:01:3b:a4:51:6f: e5:9b:79:ed:71:c4:19:f4:c9:50:ac:09:8d:34:68: 22:24:3c:55:d6:f9:1e:2c:a1:d4:84:be:51:fb:01: fe:de:1e:3f:d0:49:6d:ef:61:d0:58:62:2d:96:2d: 90:5c:47:e3:4e:87:1c:28:c1:08:78:e0:d4:88:06: e5:9a:be:b3:29:15:24:9f:39:7e:da:71:1c:13:34: fc:d1:ae:b1:ef:8a:6e:ef:db:8e:56:c1:a2:0e:98: da:77:e8:91:a0:5e:ab:6d:12:15:3e:20:be:0a:c0: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BB:A2:F2:B0:91:65:20:DD:29:D0:13:3D:63:19:F6:0E:86:31:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:59:d9:e6:a6:d5:7d:7f:cc:fe:e9:87:5b:4e:b1:a2:e1:ee: 25:3a:08:68:96:87:00:d1:9d:b3:85:e1:c3:41:93:68:14:eb: ce:5a:c5:cd:34:5d:39:f3:80:db:ab:26:d5:a8:9a:39:bd:d3: 13:7b:23:dc:68:39:c3:bd:81:68:98:ab:6b:73:22:5a:86:d4: b0:38:45:2b:bf:cf:77:1a:f5:34:bc:86:80:10:48:14:f3:4e: cf:77:ad:00:4b:3b:07:a0:6a:cd:7b:0e:a9:88:22:11:3f:52: f6:65:74:b0:c5:02:3b:e7:b9:3e:0b:3c:db:97:76:22:bf:c5: ed:f2:5a:ee:d0:aa:1b:39:5b:ad:3c:15:e0:8f:8d:69:9c:88: 12:c9:ed:0b:87:77:a6:11:bb:70:63:3b:94:d3:35:41:1a:9c: 2a:66:ab:58:5b:5a:a5:67:50:3c:ad:d0:fd:c4:da:c8:59:7a: c7:39:f6:61:8c:e1:4d:c0:83:1c:f8:a0:c2:53:82:bf:a9:4e: 49:60:8a:72:01:92:cc:1a:e2:46:1e:a8:c9:35:48:79:61:03: c4:5d:f2:69:d1:b9:21:e0:79:4e:6e:20:e7:f2:b4:b8:de:8e: ba:6f:3d:23:3c:35:3f:55:3f:e1:c7:e1:b1:89:79:4b:a5:17: 36:4d:f9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOby8BLYN3rfy+KqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZGQyZGYzOGEtNmNjOS00YjZkLWI4MjYtODgxODI3NDZlMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj9Xt5E2DEQ6EVEvm3c7/Nf5pz3vZn4a7F3d 0m8SyQwHx7E8p4SBbSznszyNa5R4QWE3c+PhYV9Ipm3VeHB/14LdLNMV5sDmcxU4 oLzYhsvo19zrctY/elmdmBUIPkZdeHP7aSSqtBip4ZlZuE1WxTebpIIfmIN9Bl6x mEy2W2jMpQ0+SBJPDh4DdP+a1xoZATukUW/lm3ntccQZ9MlQrAmNNGgiJDxV1vke LKHUhL5R+wH+3h4/0Elt72HQWGItli2QXEfjToccKMEIeODUiAblmr6zKRUknzl+ 2nEcEzT80a6x74pu79uOVsGiDpjad+iRoF6rbRIVPiC+CsBDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW7ovKwkWUg3SnQEz1jGfYOhjFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjNhZmJkODMtNDllMS0z MTY1LWE5MDUtNzA1Yzc4YjVmODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5Z2eam1X1/zP7ph1tOsaLh7iU6CGiWhwDRnbOF4cNBk2gU685axc00 XTnzgNurJtWomjm90xN7I9xoOcO9gWiYq2tzIlqG1LA4RSu/z3ca9TS8hoAQSBTz Ts93rQBLOwegas17DqmIIhE/UvZldLDFAjvnuT4LPNuXdiK/xe3yWu7Qqhs5W608 FeCPjWmciBLJ7QuHd6YRu3BjO5TTNUEanCpmq1hbWqVnUDyt0P3E2shZesc59mGM 4U3Agxz4oMJTgr+pTklginIBkswa4kYeqMk1SHlhA8Rd8mnRuSHgeU5uIOfytLje jrpvPSM8NT9VP+HH4bGJeUulFzZN+Wk= -----END CERTIFICATE-----Generated at Sun Nov 24 16:06:29 2024 by rpki-client on console-ams.rpki-client.org