$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa File: f8db3558-5be9-382a-aa31-7e42fffa9832.roa (raw, json) Hash identifier: opIxRqtq+RwP/41EPdA+tQeAu6CzWUUXLDXUtVWV0x0= Subject key identifier: 3B:48:EA:C0:FB:84:7A:88:41:C3:1E:D8:27:6F:7A:DD:53:05:F0:58 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CE6F37635931A85E3710B200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 19905 IP address blocks: 209.53.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:37:63:59:31:a8:5e:37:10:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=fe218ed4-1fe7-42d9-b757-9145aee4f076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:8d:6c:1b:a1:e5:bc:8c:37:d9:ee:2d:37: 12:62:a7:66:90:53:ae:c6:b3:bd:7d:64:07:f8:da: 9f:13:2a:9a:21:f9:f2:65:85:c1:e9:e7:71:cd:c9: 6f:06:35:ae:32:a7:0b:96:31:49:1c:a3:48:39:fd: c2:b5:ea:8d:b3:27:1a:ed:d2:06:e3:0e:1a:3e:ee: 0e:11:bc:bc:11:c4:d7:b8:a6:5d:34:98:09:4f:69: c3:cf:b9:4b:92:60:c6:06:15:9d:39:22:8a:8a:d7: 34:fa:29:f2:35:37:97:47:82:6f:a4:23:b0:e0:90: c5:9b:b9:d7:d3:1c:6a:c3:3e:65:d2:a6:4e:e9:98: b3:d1:1d:72:bb:3c:d3:a0:d8:c4:1a:64:91:7e:88: 6e:d2:7d:54:93:9c:9c:3a:58:f9:39:e3:1a:56:33: b7:a3:3b:64:b5:56:6f:5c:53:37:6f:02:52:33:3f: 76:84:15:c9:b6:ff:7a:b7:4c:27:d1:c4:8d:19:f1: 5c:43:dc:f2:ea:2b:15:24:41:e9:89:0f:ca:8a:d8: d8:e9:2f:b5:88:e8:98:8e:a8:3f:d5:fd:fd:cf:a8: 6a:7d:62:7c:a9:6a:2b:ec:7a:3b:d2:6d:51:15:a1: b8:b6:74:d2:4d:5a:1d:af:07:5b:dc:38:ba:85:38: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:48:EA:C0:FB:84:7A:88:41:C3:1E:D8:27:6F:7A:DD:53:05:F0:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fd:26:ab:f6:28:b9:1a:54:80:6f:08:8a:a2:95:d8:85:93: 83:f8:c6:eb:51:61:c7:2a:04:ec:4a:8b:79:72:e7:86:cc:06: d5:10:ce:a8:6d:a4:89:06:fc:77:5a:43:a6:40:78:c1:e0:66: ee:e8:ae:5c:6d:22:15:82:cf:e2:47:f9:c1:e1:92:44:29:7c: 21:10:ba:f7:e6:f4:25:6c:c1:47:48:60:83:00:58:d0:1e:41: a6:61:3a:64:13:c4:1b:6f:27:96:13:ca:83:17:3d:d0:d9:85: 20:d9:7b:8f:40:37:9a:36:b2:da:80:00:e7:3e:c0:b9:8e:c0: b7:5c:b6:18:15:1b:3a:3a:64:4f:34:7a:40:3e:93:53:97:91: b7:2d:45:dd:e2:db:fa:51:3f:5b:ff:f4:56:07:a5:ab:80:52: 7a:1d:37:08:b6:20:07:6e:ee:7a:70:56:ca:bc:c4:e1:f1:c8: 9a:23:6c:3c:2b:88:72:4b:4d:af:a2:f8:05:d2:f0:5b:92:04: bc:ff:66:28:88:73:4f:15:bf:a9:a7:e1:20:d3:a3:b3:1c:b3: 9e:59:79:d8:7c:23:f7:fe:9c:2f:d1:7e:59:4c:4f:b8:6c:e4: 25:95:93:59:55:8a:ac:17:97:2d:4b:e0:d4:7c:66:5c:28:47: 51:12:d6:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObzdjWTGoXjcQsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZmUyMThlZDQtMWZlNy00MmQ5LWI3NTctOTE0NWFlZTRmMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl66NbBuh5byMN9nuLTcSYqdmkFOuxrO9fWQH +NqfEyqaIfnyZYXB6edxzclvBjWuMqcLljFJHKNIOf3CteqNsyca7dIG4w4aPu4O Eby8EcTXuKZdNJgJT2nDz7lLkmDGBhWdOSKKitc0+inyNTeXR4JvpCOw4JDFm7nX 0xxqwz5l0qZO6Ziz0R1yuzzToNjEGmSRfohu0n1Uk5ycOlj5OeMaVjO3oztktVZv XFM3bwJSMz92hBXJtv96t0wn0cSNGfFcQ9zy6isVJEHpiQ/KitjY6S+1iOiYjqg/ 1f39z6hqfWJ8qWor7Ho70m1RFaG4tnTSTVodrwdb3Di6hThgYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtI6sD7hHqIQcMe2Cdvet1TBfBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjhkYjM1NTgtNWJlOS0z ODJhLWFhMzEtN2U0MmZmZmE5ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP9Jqv2KLkaVIBvCIqildiFk4P4xutRYccqBOxKi3ly54bMBtUQzqht pIkG/HdaQ6ZAeMHgZu7orlxtIhWCz+JH+cHhkkQpfCEQuvfm9CVswUdIYIMAWNAe QaZhOmQTxBtvJ5YTyoMXPdDZhSDZe49AN5o2stqAAOc+wLmOwLdcthgVGzo6ZE80 ekA+k1OXkbctRd3i2/pRP1v/9FYHpauAUnodNwi2IAdu7npwVsq8xOHxyJojbDwr iHJLTa+i+AXS8FuSBLz/ZiiIc08Vv6mn4SDTo7Mcs55Zedh8I/f+nC/RfllMT7hs 5CWVk1lViqwXly1L4NR8ZlwoR1ES1io= -----END CERTIFICATE-----Generated at Sun Nov 24 15:28:52 2024 by rpki-client on console-fra.rpki-client.org