$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa File: f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa (raw, json) Hash identifier: NnUE0hzlghlwxzcyqwTG4pHEmwQ9cA9oHhpHiQUc9I8= Subject key identifier: BC:98:9E:6D:62:35:D4:BB:5A:8B:F0:2D:AE:3C:D3:6C:D2:84:0C:A5 Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F432858478B510F1E5B58698CD7FDBD20 Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa Signing time: Tue 15 Oct 2024 01:00:35 +0000 ROA not before: Tue 15 Oct 2024 01:00:35 +0000 ROA not after: Mon 13 Jan 2025 02:00:35 +0000 asID: 16509 IP address blocks: 209.46.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8b:51:0f:1e:5b:58:69:8c:d7:fd:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Oct 15 01:00:35 2024 GMT Not After : Jan 13 02:00:35 2025 GMT Subject: CN=36f55a25-f8fb-486d-81b7-9efb3467c34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:10:72:37:d6:1f:00:30:f6:c3:b2:08:bd: b6:03:0c:61:79:e2:f3:31:aa:2c:1a:a5:73:7e:13: 25:81:80:06:ac:92:8f:97:a0:02:b3:09:f7:3b:80: 72:8c:73:f2:c2:6f:41:eb:fd:d9:82:f0:2f:64:96: 13:c8:fe:50:76:13:42:94:5d:ac:dc:86:b6:d4:02: db:03:c5:ab:d2:d8:6e:38:f5:0f:f2:5d:b0:1f:06: 6d:da:fa:d8:48:6d:cc:68:18:ee:6e:9f:ca:45:af: 49:cf:10:b5:8f:d0:a8:e0:0c:48:f8:c7:f8:f3:3c: 6b:d4:b5:cb:dd:16:e1:f6:23:94:38:78:1e:c2:8e: b4:fc:14:09:cc:7d:e8:38:76:3b:cd:93:5d:51:c2: eb:e2:dd:a4:af:c6:14:80:6c:c0:7e:c2:fe:3e:2e: 86:4d:84:e4:e1:cf:c1:f5:94:b5:f4:ee:eb:e7:e9: 20:9c:45:8d:a6:a3:3f:76:5c:77:48:5b:2e:08:b8: b0:e3:58:0c:29:b1:12:db:fe:10:82:ca:ab:7e:5f: 86:9a:97:c7:f0:20:4a:cf:fc:27:91:9c:40:4b:18: 63:aa:0b:3e:1e:29:c8:d2:e0:2e:50:59:dc:8d:bb: 12:3d:32:5f:68:ca:97:9f:93:32:06:d9:ba:80:48: f9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:98:9E:6D:62:35:D4:BB:5A:8B:F0:2D:AE:3C:D3:6C:D2:84:0C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: 209.46.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c3:d1:36:de:95:cf:02:b6:64:66:c0:bc:c3:58:43:b1:7b: 96:51:c3:28:73:a3:78:5e:1d:38:20:16:2e:ad:39:ed:8f:bc: 8c:2b:fe:f5:aa:9b:51:25:71:97:86:dc:3a:a3:98:1c:eb:f7: 8e:89:43:81:35:7b:4d:cd:31:60:bb:40:a3:c1:b8:9b:ab:87: b0:29:ce:1a:95:93:eb:78:2a:50:df:72:95:6d:cb:42:91:c1: 6f:2e:47:ec:a6:40:d4:02:c5:81:c3:79:02:4f:a1:b5:0a:68: 19:8a:5f:ea:31:f3:af:e8:c1:22:cb:28:bd:c8:0f:09:9a:3b: 82:53:98:75:3d:4a:8a:f0:e1:bd:ee:b3:40:87:63:98:bf:bf: 2a:1f:d6:6f:68:00:fc:1c:7e:64:25:9f:c6:62:bd:78:3d:a8: 8d:03:69:7c:cb:ca:df:72:f9:b4:a4:6b:ce:b1:4c:58:37:87: fa:77:4f:eb:f1:2f:63:c0:4a:48:fc:82:dd:13:fe:b0:6f:6d: a2:82:83:c7:73:b6:25:cd:b9:dd:f9:0c:93:73:5a:0b:0d:d1: ac:9d:cf:47:db:52:08:59:c1:6d:90:42:37:c5:b5:d2:e1:6c: 19:46:4b:e2:a0:22:62:17:a2:4b:e3:e3:60:f1:b4:f7:50:b3: 25:0d:fa:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeLUQ8eW1hpjNf9vSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk MzZmNTVhMjUtZjhmYi00ODZkLTgxYjctOWVmYjM0NjdjMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tIQcjfWHwAw9sOyCL22AwxheeLzMaosGqVz fhMlgYAGrJKPl6ACswn3O4ByjHPywm9B6/3ZgvAvZJYTyP5QdhNClF2s3Ia21ALb A8Wr0thuOPUP8l2wHwZt2vrYSG3MaBjubp/KRa9JzxC1j9Co4AxI+Mf48zxr1LXL 3Rbh9iOUOHgewo60/BQJzH3oOHY7zZNdUcLr4t2kr8YUgGzAfsL+Pi6GTYTk4c/B 9ZS19O7r5+kgnEWNpqM/dlx3SFsuCLiw41gMKbES2/4Qgsqrfl+GmpfH8CBKz/wn kZxASxhjqgs+HinI0uAuUFncjbsSPTJfaMqXn5MyBtm6gEj5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyYnm1iNdS7WovwLa4802zShAylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvZjg4MWVhZmMtNWViYi0z ZTk2LWI0NTktMWVlZTBmNTNjYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0S41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/D0Tbelc8CtmRmwLzDWEOxe5ZRwyhzo3heHTggFi6tOe2PvIwr/vWq m1ElcZeG3DqjmBzr946JQ4E1e03NMWC7QKPBuJurh7ApzhqVk+t4KlDfcpVty0KR wW8uR+ymQNQCxYHDeQJPobUKaBmKX+ox86/owSLLKL3IDwmaO4JTmHU9Sorw4b3u s0CHY5i/vyof1m9oAPwcfmQln8ZivXg9qI0DaXzLyt9y+bSka86xTFg3h/p3T+vx L2PASkj8gt0T/rBvbaKCg8dztiXNud35DJNzWgsN0aydz0fbUghZwW2QQjfFtdLh bBlGS+KgImIXokvj42DxtPdQsyUN+tI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org