$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa File: c97cfd85-f6c2-37b6-832a-66719ff09d85.roa (raw, json) Hash identifier: DypTQZgtm4jbw1LkDny9k/NIfZeOdxe5jt8eO42NH8I= Subject key identifier: 05:56:27:7D:A3:B8:9E:30:C3:E4:B6:7B:8E:DD:85:99:00:31:78:1F Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b Certificate serial: 010D0C9F432858478A78D3AA334FC3D70921DD00 Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa Signing time: Mon 14 Oct 2024 17:44:57 +0000 ROA not before: Mon 14 Oct 2024 17:44:57 +0000 ROA not after: Sun 12 Jan 2025 18:44:57 +0000 asID: 399924 IP address blocks: 45.41.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8a:78:d3:aa:33:4f:c3:d7:09:21:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b Validity Not Before: Oct 14 17:44:57 2024 GMT Not After : Jan 12 18:44:57 2025 GMT Subject: CN=5fa6f65b-795a-4024-960f-1150370c6841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:91:54:32:4f:0c:04:85:e0:0d:1a:8f:2d: de:97:6c:9d:8b:60:9a:80:9f:e2:0b:3f:a2:05:8e: a9:b1:84:c9:c2:5c:5d:21:98:05:43:a0:64:23:84: ad:cf:e2:73:8f:91:db:10:ae:72:d5:2d:c6:fb:58: 78:ce:f5:78:3e:0a:39:ba:11:e2:4a:aa:41:a3:62: dc:98:bb:35:c3:8f:53:6f:20:0b:84:7d:1d:bb:ca: de:e2:8e:c7:b8:6c:0d:0c:22:b3:0c:9d:54:b6:ec: 18:53:1b:ef:c3:40:db:c2:81:d5:df:ef:c8:83:e0: c3:62:c2:67:a7:9d:c8:71:61:1a:27:36:c1:23:98: fc:52:96:f3:a5:95:8c:e1:41:3e:1d:62:7d:51:f0: c1:43:82:b2:67:a0:3b:2b:bc:c5:0d:74:80:50:1c: b1:e9:85:e3:75:20:75:26:2e:b1:8b:bb:0d:c8:d1: f1:6a:02:08:40:a6:54:e5:0d:34:c3:35:e4:06:89: 45:af:39:bc:93:d9:d9:7a:59:9c:45:2b:f7:2a:a8: b4:bd:9e:89:0c:54:07:0f:58:7a:19:c7:ea:e6:c7: 4b:84:fd:06:3d:e6:70:99:66:f0:4c:2c:6d:d1:a6: 65:97:4c:49:46:3e:22:db:0a:c2:f2:35:17:46:d9: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:56:27:7D:A3:B8:9E:30:C3:E4:B6:7B:8E:DD:85:99:00:31:78:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/c97cfd85-f6c2-37b6-832a-66719ff09d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl X509v3 Authority Key Identifier: keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer sbgp-ipAddrBlock: critical IPv4: 45.41.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b7:18:6b:98:00:e2:13:99:cb:b0:0d:e1:56:d8:b2:95:f7: 6e:b0:15:a5:0a:a7:0a:51:ae:d6:de:a0:42:75:84:62:29:36: ec:3c:aa:71:1c:ed:79:4b:a2:85:b3:1c:0e:02:ee:62:90:b3: b8:74:7d:bf:dd:9e:bc:7a:98:c3:3e:d6:11:60:e0:16:05:e2: 0f:42:58:04:98:f2:cc:9d:58:09:bb:91:79:6c:03:ff:a1:7e: 27:82:51:2c:8f:31:e7:92:1a:f5:18:4d:97:12:23:e6:fb:df: 88:bb:90:a5:fd:93:a3:81:d3:1a:c3:3a:ff:ea:20:ef:29:9e: da:a9:eb:74:78:39:2a:47:da:d9:ca:4c:6a:1c:6f:cd:55:d2: f7:e8:fe:64:a0:44:8a:02:fe:e7:52:f0:ff:09:a0:37:29:fc: 6b:e8:71:e2:1c:fb:0a:53:42:89:01:19:ef:98:c6:d8:32:df: 33:ae:87:de:99:f8:b2:cd:7a:48:8f:d0:bc:f2:44:cf:49:1c: 66:9c:1e:96:e4:f6:41:08:a3:57:68:1f:47:3d:ca:4a:44:5c: 4f:4e:08:9d:30:51:0d:ae:57:7c:94:78:34:29:a9:35:05:03: b4:52:43:6f:26:b1:64:02:c9:ea:d7:46:f8:e0:cb:96:98:e3: db:9c:3c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeKeNOqM0/D1wkh3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc0MmRkZTMtODRhMy00NDg4LWEwMWMtNTI1NzM0YzRk ODFiMB4XDTI0MTAxNDE3NDQ1N1oXDTI1MDExMjE4NDQ1N1owLzEtMCsGA1UEAxMk NWZhNmY2NWItNzk1YS00MDI0LTk2MGYtMTE1MDM3MGM2ODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRuRVDJPDASF4A0ajy3el2ydi2CagJ/iCz+i BY6psYTJwlxdIZgFQ6BkI4Stz+Jzj5HbEK5y1S3G+1h4zvV4Pgo5uhHiSqpBo2Lc mLs1w49TbyALhH0du8re4o7HuGwNDCKzDJ1UtuwYUxvvw0DbwoHV3+/Ig+DDYsJn p53IcWEaJzbBI5j8UpbzpZWM4UE+HWJ9UfDBQ4KyZ6A7K7zFDXSAUByx6YXjdSB1 Ji6xi7sNyNHxagIIQKZU5Q00wzXkBolFrzm8k9nZelmcRSv3Kqi0vZ6JDFQHD1h6 Gcfq5sdLhP0GPeZwmWbwTCxt0aZll0xJRj4i2wrC8jUXRtkNgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVWJ32juJ4ww+S2e47dhZkAMXgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NzQy ZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3MzRjNGQ4MWIvYzk3Y2ZkODUtZjZjMi0z N2I2LTgzMmEtNjY3MTlmZjA5ZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTc0MmRkZTMtODRhMy00NDg4LWEw MWMtNTI1NzM0YzRkODFiLzU3NDJkZGUzLTg0YTMtNDQ4OC1hMDFjLTUyNTczNGM0 ZDgxYi5jcmwwHwYDVR0jBBgwFoAUgPSvREXaX/pZzpyoT5aC/zlDxi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NzQyZGRlMy04NGEzLTQ0ODgtYTAxYy01MjU3 MzRjNGQ4MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK3GGuYAOITmcuwDeFW2LKV926wFaUKpwpRrtbeoEJ1hGIpNuw8qnEc 7XlLooWzHA4C7mKQs7h0fb/dnrx6mMM+1hFg4BYF4g9CWASY8sydWAm7kXlsA/+h fieCUSyPMeeSGvUYTZcSI+b734i7kKX9k6OB0xrDOv/qIO8pntqp63R4OSpH2tnK TGocb81V0vfo/mSgRIoC/udS8P8JoDcp/GvoceIc+wpTQokBGe+Yxtgy3zOuh96Z +LLNekiP0LzyRM9JHGacHpbk9kEIo1doH0c9ykpEXE9OCJ0wUQ2uV3yUeDQpqTUF A7RSQ28msWQCyerXRvjgy5aY49ucPCA= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:37 2024 by rpki-client on console-fra.rpki-client.org