$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa File: 3aa15edc-b7c6-318d-9de6-46d235ff9320.roa (raw, json) Hash identifier: yiU5r0MKj2Wqq36pPncuNIGFjxBxQLo+UL5HvizccOY= Subject key identifier: B3:E6:69:EA:3C:B2:87:24:08:E6:DC:21:26:12:48:69:90:F7:1A:B5 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858472F3079F20E2F36044B1CAC80 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 13325 IP address blocks: 136.181.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:79:f2:0e:2f:36:04:4b:1c:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=1510a4d8-3311-476b-8324-71c145365456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:d1:41:c5:44:21:e9:f7:ca:02:22:03:db: 62:3a:5c:71:40:bf:3a:fc:e4:8f:2b:36:ad:1b:c1: 5e:75:48:51:fa:2e:77:27:b2:79:da:c6:75:26:43: 94:6b:14:f2:be:b0:73:88:fa:bc:bb:15:45:85:ed: 7b:2c:87:87:db:bd:df:e4:8a:6b:9a:b0:4b:c1:1c: 63:48:d5:02:08:5b:2e:f7:35:cb:52:31:9a:c9:79: 01:5a:e2:93:ec:ba:54:95:ea:81:87:9d:79:ff:ca: 1a:4f:3f:6f:ca:53:ab:55:33:91:cf:06:a5:80:08: 9c:5e:58:49:74:e2:5f:67:dd:65:ac:1a:d7:5c:db: 0a:d2:9b:67:f5:70:e0:79:de:ed:77:c1:0c:8c:57: 13:5b:4d:89:36:65:73:8b:73:90:86:41:b2:82:04: d4:bb:cc:43:51:0b:87:bb:8f:76:a4:b2:53:b2:d8: 49:31:4a:44:a1:a1:0e:d6:a1:71:6f:69:c2:d5:e0: 42:d6:62:15:71:5a:42:7c:7b:8a:d2:ac:bb:a1:7a: 50:70:c2:14:69:bb:6e:fa:18:6a:3a:ab:44:43:93: c5:d1:4a:73:b9:5b:a7:79:7d:7f:8b:f2:dc:e6:c3: cf:a2:6c:19:23:c1:0e:cb:e5:88:7b:a6:1a:13:1d: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E6:69:EA:3C:B2:87:24:08:E6:DC:21:26:12:48:69:90:F7:1A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 136.181.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a9:a3:e2:fd:c8:d2:d9:66:0b:ef:f8:ec:22:59:e5:98:8b: cb:2f:c2:64:f0:cd:94:28:35:60:37:be:b4:74:e1:08:af:69: f4:80:9e:8d:b4:6f:23:d2:88:7a:7a:c5:b2:19:a8:ce:54:72: 38:cf:05:3c:c6:f6:0b:f3:04:72:10:76:bb:97:d2:2e:b5:db: 3d:c0:11:73:be:51:78:e6:1e:07:d9:fb:7d:71:4f:8e:8b:e8: 6f:9e:0a:f2:75:f5:e4:8a:a5:6e:b6:df:15:30:db:59:24:54: 5e:d6:0f:96:81:f8:2e:bd:cb:d2:7a:65:6f:0b:55:a4:52:fd: 22:2a:dc:05:38:ae:d2:ed:9f:da:49:b0:86:bf:57:b2:af:f2: d7:a4:ad:a3:5d:5a:2a:e5:76:82:16:9c:6a:b8:34:83:01:68: 00:69:52:4e:e3:ef:7e:8f:d0:1c:49:e1:20:ec:16:e2:29:74: ee:60:78:4f:cd:ed:04:ec:08:67:52:3a:05:92:38:ab:85:b1: 64:d9:c8:c8:29:03:5f:30:c5:76:ad:c4:c2:3b:17:31:c0:72: cb:19:d2:f6:a5:f0:11:2d:2f:9d:16:91:6c:e5:52:70:68:c3: 90:5e:0e:2f:84:b8:5e:95:fd:1b:d4:c5:92:d5:6e:cd:04:47: fc:03:3f:c3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcvMHnyDi82BEscrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk MTUxMGE0ZDgtMzMxMS00NzZiLTgzMjQtNzFjMTQ1MzY1NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJHRQcVEIen3ygIiA9tiOlxxQL86/OSPKzat G8FedUhR+i53J7J52sZ1JkOUaxTyvrBziPq8uxVFhe17LIeH273f5IprmrBLwRxj SNUCCFsu9zXLUjGayXkBWuKT7LpUleqBh515/8oaTz9vylOrVTORzwalgAicXlhJ dOJfZ91lrBrXXNsK0ptn9XDged7td8EMjFcTW02JNmVzi3OQhkGyggTUu8xDUQuH u492pLJTsthJMUpEoaEO1qFxb2nC1eBC1mIVcVpCfHuK0qy7oXpQcMIUabtu+hhq OqtEQ5PF0UpzuVuneX1/i/Lc5sPPomwZI8EOy+WIe6YaEx36FwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLPmaeo8sockCObcISYSSGmQ9xq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvM2FhMTVlZGMtYjdjNi0z MThkLTlkZTYtNDZkMjM1ZmY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiLUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATqmj4v3I0tlmC+/47CJZ5ZiLyy/CZPDNlCg1YDe+tHThCK9p9ICejbRv I9KIenrFshmozlRyOM8FPMb2C/MEchB2u5fSLrXbPcARc75ReOYeB9n7fXFPjovo b54K8nX15IqlbrbfFTDbWSRUXtYPloH4Lr3L0nplbwtVpFL9IircBTiu0u2f2kmw hr9Xsq/y16Sto11aKuV2ghacarg0gwFoAGlSTuPvfo/QHEnhIOwW4il07mB4T83t BOwIZ1I6BZI4q4WxZNnIyCkDXzDFdq3EwjsXMcByyxnS9qXwES0vnRaRbOVScGjD kF4OL4S4XpX9G9TFktVuzQRH/AM/ww== -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org