$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa File: 9a249e6e-47df-3766-a58c-3846de9693e3.roa (raw, json) Hash identifier: tyrmSJQras9+CASOWC5+oI0nrxZRQutt54i9IQXymsw= Subject key identifier: EF:86:2B:E9:20:44:1F:62:C9:80:AA:98:B7:4A:AE:90:BA:B8:CD:04 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584797E139DC60D5CE672D3F5100 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 12212 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:39:dc:60:d5:ce:67:2d:3f:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=b268b96c-47ac-45c2-86e7-79efaebc5554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:c7:b4:81:31:6c:66:ea:89:24:3f:d9:8f: a3:d2:c7:21:be:71:08:01:e2:33:6f:8a:cc:3e:1a: 05:ce:2f:8e:44:51:db:4d:bc:57:50:7b:c5:07:05: 79:a7:5f:ae:3e:0c:07:f2:87:f5:17:40:40:a8:4d: 0b:ce:0f:68:c6:8e:0e:27:35:86:01:b8:80:b5:18: eb:2d:72:5a:2d:7b:6e:3c:9d:70:9f:3e:ea:52:da: ef:b6:67:49:db:33:f2:ab:a0:cc:9c:98:4a:b9:20: 1d:90:8d:63:95:f0:6b:ef:02:e4:49:73:04:6b:2c: 4a:ed:c7:03:14:16:01:89:97:3f:7c:d2:80:9b:22: 83:fc:63:49:b1:82:58:06:dd:62:ce:65:50:11:d1: 05:1f:72:fb:f4:30:4f:87:f2:eb:b1:28:d0:0d:62: 9b:3d:06:38:4b:2a:b1:2e:1e:3c:e9:cf:c8:4c:a7: ad:a7:cc:cc:28:7b:b8:9d:93:5f:be:20:22:d7:b5: ab:e4:26:7e:52:69:2f:d8:60:a1:cd:20:f2:45:f5: b6:ab:3b:5b:c8:b4:3d:17:1b:46:df:2e:54:e4:a2: a5:70:fe:89:cd:ce:4b:0b:ef:96:b4:d3:e2:63:cc: 69:60:48:24:f8:98:0e:ff:25:2d:3c:a2:84:a1:fb: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:86:2B:E9:20:44:1F:62:C9:80:AA:98:B7:4A:AE:90:BA:B8:CD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:20:a9:0f:49:41:ed:6b:37:0a:a7:64:73:fb:74:95:a5:26: bd:d7:31:71:fa:75:cb:fa:da:c1:05:8c:59:18:cb:bf:1c:3e: f1:4a:5f:7f:a9:29:6a:c6:ab:37:26:c7:56:e4:6b:41:63:10: 5d:c1:88:ff:18:93:a1:fc:b3:5d:2e:37:e1:e1:48:73:e2:ea: 03:b6:0b:3f:3f:e2:8d:7d:f7:e5:89:1d:d0:77:f8:a5:83:db: 82:aa:d1:ed:06:d5:09:a8:65:da:88:2e:3a:01:d8:30:15:93: 3b:b7:16:1a:f9:82:46:d7:62:d1:a4:be:50:97:a0:a3:7c:ac: c4:c4:6f:9b:f5:52:c9:81:80:8a:ab:c9:2c:f5:f2:41:32:4a: 89:33:d9:61:1c:ef:0b:c1:21:ce:4c:14:41:f9:f3:65:6a:f0: 1e:45:ff:63:dd:c5:6b:51:90:bb:ea:12:8c:b2:b3:e1:46:bd: 5b:61:05:cc:83:42:df:49:e2:15:23:5c:42:c1:a8:1e:06:17: a7:3d:6a:7a:22:61:65:95:39:f7:ef:82:fc:58:71:d6:ca:32: cb:19:e0:23:ed:45:19:76:a6:7e:e9:14:96:cb:73:55:41:17: 96:d5:47:e6:2f:2b:04:56:e0:4d:43:f4:25:c7:d0:e4:01:3c: d2:13:8b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TncYNXOZy0/UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk YjI2OGI5NmMtNDdhYy00NWMyLTg2ZTctNzllZmFlYmM1NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24rHtIExbGbqiSQ/2Y+j0schvnEIAeIzb4rM PhoFzi+ORFHbTbxXUHvFBwV5p1+uPgwH8of1F0BAqE0Lzg9oxo4OJzWGAbiAtRjr LXJaLXtuPJ1wnz7qUtrvtmdJ2zPyq6DMnJhKuSAdkI1jlfBr7wLkSXMEayxK7ccD FBYBiZc/fNKAmyKD/GNJsYJYBt1izmVQEdEFH3L79DBPh/LrsSjQDWKbPQY4Syqx Lh486c/ITKetp8zMKHu4nZNfviAi17Wr5CZ+Umkv2GChzSDyRfW2qztbyLQ9FxtG 3y5U5KKlcP6Jzc5LC++WtNPiY8xpYEgk+JgO/yUtPKKEoftfCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+GK+kgRB9iyYCqmLdKrpC6uM0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvOWEyNDllNmUtNDdkZi0z NzY2LWE1OGMtMzg0NmRlOTY5M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIgqQ9JQe1rNwqnZHP7dJWlJr3XMXH6dcv62sEFjFkYy78cPvFKX3+p KWrGqzcmx1bka0FjEF3BiP8Yk6H8s10uN+HhSHPi6gO2Cz8/4o199+WJHdB3+KWD 24Kq0e0G1QmoZdqILjoB2DAVkzu3Fhr5gkbXYtGkvlCXoKN8rMTEb5v1UsmBgIqr ySz18kEySokz2WEc7wvBIc5MFEH582Vq8B5F/2PdxWtRkLvqEoyys+FGvVthBcyD Qt9J4hUjXELBqB4GF6c9anoiYWWVOffvgvxYcdbKMssZ4CPtRRl2pn7pFJbLc1VB F5bVR+YvKwRW4E1D9CXH0OQBPNITi70= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:59 2024 by rpki-client on console-ams.rpki-client.org