$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa File: 9d20ee29-516f-3930-b849-ad0ee8b7e392.roa (raw, json) Hash identifier: PkXwi4nDmqtWecD1xE6bXX/YAaj0NcspAUzn4BjZ1r8= Subject key identifier: 43:F5:92:14:2E:74:3D:A3:09:3A:67:CD:FB:D3:7D:BE:61:F2:21:30 Certificate issuer: /CN=e8253a5c-5822-44df-8846-56b6c0450bbe Certificate serial: 010D0C9F43285847F2BA344932AC23CF126CAA80 Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa Signing time: Thu 21 Nov 2024 02:00:38 +0000 ROA not before: Thu 21 Nov 2024 02:00:38 +0000 ROA not after: Wed 19 Feb 2025 02:00:38 +0000 asID: 33362 IP address blocks: 158.222.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:ba:34:49:32:ac:23:cf:12:6c:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe Validity Not Before: Nov 21 02:00:38 2024 GMT Not After : Feb 19 02:00:38 2025 GMT Subject: CN=fb474aea-727d-402b-b59c-5e22870bfd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:0b:3e:9a:68:53:0f:2e:62:b8:2b:42:bd: d5:b9:ba:e7:f2:54:7b:ba:7b:8e:7c:5a:62:a2:54: d1:08:17:2e:bf:70:0e:4b:c0:f9:93:fa:c0:a8:6e: 7d:ad:0f:16:b6:18:a5:2d:09:62:91:87:e0:ad:c1: 3c:cf:f3:15:97:57:0d:82:49:9b:3d:55:69:b5:9c: e3:b1:b8:ba:06:01:59:b8:e1:ce:9c:0f:57:ff:c9: bd:aa:ae:0d:d6:18:da:c5:d3:ea:9f:9f:17:8d:bd: be:e6:86:92:a3:cb:36:fc:f7:89:be:78:e1:00:5b: 9a:aa:91:4a:81:47:1c:af:4e:e8:bc:80:cd:76:b7: fa:d9:4a:10:dc:8f:d3:68:fb:ed:c3:a1:ed:b6:16: 7d:f0:85:6f:be:12:0e:e0:e7:aa:f4:61:74:5b:9f: 01:19:c2:52:bc:d3:92:64:5f:ed:06:de:f3:45:44: da:e8:c9:94:0e:c2:de:aa:e0:01:b6:fd:d9:02:52: 21:47:73:31:27:c4:4d:06:b9:24:b4:22:19:d7:a8: a0:6c:67:94:27:12:78:10:d3:31:7d:08:84:83:e2: 07:08:e2:b7:49:3e:ad:2a:35:45:f8:ab:dc:01:7d: 54:5e:51:ee:d0:66:3b:ce:c3:4b:a7:7a:5f:aa:5d: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F5:92:14:2E:74:3D:A3:09:3A:67:CD:FB:D3:7D:BE:61:F2:21:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl X509v3 Authority Key Identifier: keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer sbgp-ipAddrBlock: critical IPv4: 158.222.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2a:22:e8:ec:9e:a3:37:77:21:fa:3f:03:70:1f:04:44:98: 0f:e3:02:26:7e:0c:2d:a6:a3:02:63:21:c7:77:29:37:57:f0: ed:c5:48:fd:06:26:89:39:b6:3d:59:a6:00:51:c3:f3:3d:db: a8:1c:a2:6f:8b:a3:06:fc:78:1e:d8:9d:15:b5:89:ea:a6:a5: 6b:6d:bf:1d:99:8f:45:bf:38:68:d5:79:96:38:28:0a:fa:6e: 40:bb:3c:4b:81:ba:d0:fc:15:60:9a:4e:3a:fa:59:7a:46:63: e7:b8:81:78:4d:b3:7d:2b:23:ac:f8:00:49:ab:e7:ed:ca:23: 74:13:ed:31:4e:ca:27:50:f6:e9:b6:d4:96:80:61:97:fb:18: bf:42:1d:54:be:bb:a2:e6:d9:93:02:c3:1a:99:8b:cb:f3:97: 0e:b0:88:2d:9b:9f:72:ce:06:37:12:f6:54:d3:cb:f3:85:bb: 96:de:38:b6:70:63:61:fe:62:1e:77:a7:24:f7:da:e2:92:85: 9b:d0:8c:23:12:c4:e4:33:88:e6:06:e3:87:a2:0a:2c:8d:95: d8:07:84:43:c1:bb:0b:74:79:d2:3a:ca:52:03:78:2a:43:93: 74:74:82:11:e9:dd:41:5f:91:12:47:60:c5:49:3e:4a:88:8d: dd:9e:dd:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyujRJMqwjzxJsqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw YmJlMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk ZmI0NzRhZWEtNzI3ZC00MDJiLWI1OWMtNWUyMjg3MGJmZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssILPppoUw8uYrgrQr3Vubrn8lR7unuOfFpi olTRCBcuv3AOS8D5k/rAqG59rQ8WthilLQlikYfgrcE8z/MVl1cNgkmbPVVptZzj sbi6BgFZuOHOnA9X/8m9qq4N1hjaxdPqn58Xjb2+5oaSo8s2/PeJvnjhAFuaqpFK gUccr07ovIDNdrf62UoQ3I/TaPvtw6HtthZ98IVvvhIO4Oeq9GF0W58BGcJSvNOS ZF/tBt7zRUTa6MmUDsLequABtv3ZAlIhR3MxJ8RNBrkktCIZ16igbGeUJxJ4ENMx fQiEg+IHCOK3ST6tKjVF+KvcAX1UXlHu0GY7zsNLp3pfql3PGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP1khQudD2jCTpnzfvTfb5h8iEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1 M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvOWQyMGVlMjktNTE2Zi0z OTMwLWI4NDktYWQwZWU4YjdlMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4 NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1 MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2 YzA0NTBiYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnt5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYqIujsnqM3dyH6PwNwHwREmA/jAiZ+DC2mowJjIcd3KTdX8O3FSP0G Jok5tj1ZpgBRw/M926gcom+Lowb8eB7YnRW1ieqmpWttvx2Zj0W/OGjVeZY4KAr6 bkC7PEuButD8FWCaTjr6WXpGY+e4gXhNs30rI6z4AEmr5+3KI3QT7TFOyidQ9um2 1JaAYZf7GL9CHVS+u6Lm2ZMCwxqZi8vzlw6wiC2bn3LOBjcS9lTTy/OFu5beOLZw Y2H+Yh53pyT32uKShZvQjCMSxOQziOYG44eiCiyNldgHhEPBuwt0edI6ylIDeCpD k3R0ghHp3UFfkRJHYMVJPkqIjd2e3cw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org