$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa File: 8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa (raw, json) Hash identifier: N40Y6TIR3zGafTtcTUc9Atv8SW7wdqSsUlvpRXQwDXw= Subject key identifier: 2C:34:81:EE:68:6F:48:71:AB:CB:34:19:37:EC:DE:E1:FE:E3:ED:86 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858472F30808DF16648C173233E80 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 13325 IP address blocks: 204.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:80:8d:f1:66:48:c1:73:23:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=5a5e6277-d6e3-4a59-bc19-6ebb3963b0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:83:8b:9e:95:8a:ae:36:7f:5d:ae:29:83:7d: 4c:50:88:63:58:f2:2f:d6:ec:7d:31:60:17:28:97: 7c:34:3d:e7:2f:79:41:6d:c5:3c:bf:51:33:49:aa: 7c:c1:57:2d:c6:48:29:c5:2b:55:d9:d9:ee:53:ab: 3a:51:6e:b5:00:e7:f6:5c:e2:16:d7:5d:1f:ac:25: 30:e9:08:25:7c:40:1a:04:f6:64:ef:ca:bf:49:a3: b9:56:d4:b0:cf:68:86:2f:bd:78:12:2c:66:98:1b: 53:ce:88:04:74:5e:09:fc:8e:dd:71:ac:b6:c3:4c: c4:0e:c7:5d:57:50:e0:c4:ab:86:70:48:5c:8a:35: c6:0c:e3:5f:b8:50:9c:91:ba:fd:37:6e:e8:58:8b: f8:0d:a0:3c:f9:7e:52:cf:91:0e:3b:0f:61:e1:00: 56:7a:22:1c:df:41:18:f4:99:c6:84:61:42:df:a7: 4e:1c:a8:4e:c1:9d:fd:00:41:f2:59:49:e9:4a:67: 43:f6:74:82:09:4f:d0:a6:79:20:55:9c:3a:a6:df: 9a:2f:d4:4e:d1:7a:cb:98:90:12:ff:1a:8c:57:6e: 4b:0e:3e:08:1a:7a:a0:b2:fe:02:26:04:24:76:94: 47:83:46:16:1b:da:1d:dd:89:6f:8a:15:d5:87:5b: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:34:81:EE:68:6F:48:71:AB:CB:34:19:37:EC:DE:E1:FE:E3:ED:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/8ce1e820-3f43-3a8d-a5c7-5c4821226427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.24.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d0:35:d5:2c:0d:84:62:93:17:d8:e5:6e:60:9e:57:a1:38: 39:12:9b:4c:15:16:02:4b:32:fc:15:ed:e2:c4:84:b8:64:62: d4:5d:4d:d0:20:45:a9:5c:88:81:72:79:10:6c:9d:51:6e:be: 22:b5:a8:5b:a8:87:ae:06:c7:3a:ad:34:9e:94:7d:51:49:43: c6:80:14:44:10:3f:61:31:00:74:6f:16:28:61:d2:9a:a9:e6: 91:2f:84:5c:bf:92:40:6c:e1:98:3a:90:7d:90:e1:21:72:4d: 70:67:76:c3:3f:56:e9:fb:c3:80:57:21:1e:08:c4:d5:64:af: e8:40:43:48:00:d0:ab:f7:00:4d:bd:d9:4c:48:40:20:6c:f8: fb:1f:6b:40:23:2e:65:64:d2:f7:69:e0:10:41:4a:78:5d:ed: 53:73:1a:51:d4:99:04:48:26:61:d7:ea:d4:0c:d5:0f:f5:74: d8:37:8b:c1:bf:ae:e2:b7:55:80:5b:5f:4e:19:cf:b0:60:40: 11:9f:d4:10:f1:77:eb:5a:e1:1b:9d:aa:37:24:fb:6a:46:5c: d4:e2:df:c0:66:1d:9d:04:b2:c6:19:b0:e0:60:7e:2a:84:7e: 9a:89:5f:97:78:2e:ae:79:a2:fb:b0:5f:13:bd:36:fc:fa:90: d9:53:da:d7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcvMICN8WZIwXMjPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk NWE1ZTYyNzctZDZlMy00YTU5LWJjMTktNmViYjM5NjNiMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoOLnpWKrjZ/Xa4pg31MUIhjWPIv1ux9MWAX KJd8ND3nL3lBbcU8v1EzSap8wVctxkgpxStV2dnuU6s6UW61AOf2XOIW110frCUw 6QglfEAaBPZk78q/SaO5VtSwz2iGL714EixmmBtTzogEdF4J/I7dcay2w0zEDsdd V1DgxKuGcEhcijXGDONfuFCckbr9N27oWIv4DaA8+X5Sz5EOOw9h4QBWeiIc30EY 9JnGhGFC36dOHKhOwZ39AEHyWUnpSmdD9nSCCU/QpnkgVZw6pt+aL9RO0XrLmJAS /xqMV25LDj4IGnqgsv4CJgQkdpRHg0YWG9od3YlvihXVh1sQ0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCw0ge5ob0hxq8s0GTfs3uH+4+2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvOGNlMWU4MjAtM2Y0My0z YThkLWE1YzctNWM0ODIxMjI2NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAP9A11SwNhGKTF9jlbmCeV6E4ORKbTBUWAksy/BXt4sSEuGRi1F1N0CBF qVyIgXJ5EGydUW6+IrWoW6iHrgbHOq00npR9UUlDxoAURBA/YTEAdG8WKGHSmqnm kS+EXL+SQGzhmDqQfZDhIXJNcGd2wz9W6fvDgFchHgjE1WSv6EBDSADQq/cATb3Z TEhAIGz4+x9rQCMuZWTS92ngEEFKeF3tU3MaUdSZBEgmYdfq1AzVD/V02DeLwb+u 4rdVgFtfThnPsGBAEZ/UEPF361rhG52qNyT7akZc1OLfwGYdnQSyxhmw4GB+KoR+ molfl3gurnmi+7BfE702/PqQ2VPa1w== -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org