$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa File: 1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa (raw, json) Hash identifier: c5sn+wBqA75pgA208dCqAzMU805+suNiCvcBfFSj0/4= Subject key identifier: 50:57:CB:4F:91:D1:41:1A:72:39:09:04:98:51:9C:06:05:A1:04:EA Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584726D0769D3138A3B3B2BBE500 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 16509 IP address blocks: 52.128.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:76:9d:31:38:a3:b3:b2:bb:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=0fd48c9b-4b4a-4d41-8b1a-3e3ba9dbafb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:18:e2:48:f4:60:18:43:c8:36:42:95:1d: 2f:b5:ba:a7:0d:f2:f2:d5:c0:61:5f:f6:44:ff:39: 6d:50:ed:72:3c:ea:71:00:db:eb:37:e1:58:3d:a3: 94:3b:a1:63:e5:ec:4b:d6:f7:0d:d5:13:f1:da:61: 88:e1:08:e9:42:80:71:93:5b:01:6b:8e:fd:f2:31: f5:92:16:8a:a2:d4:cc:3f:65:d9:a9:6f:44:37:40: 9c:67:6d:5f:6a:e1:2c:98:f7:9b:7f:5f:ee:5d:ee: 65:ad:dc:80:3c:21:b3:8b:2f:94:e3:da:bc:bf:9e: 60:96:89:1c:f3:ec:d5:6c:1d:76:ef:bb:2b:bc:7d: 03:cb:ab:e9:60:b5:d9:6f:dc:91:08:5b:65:4b:fb: ef:02:db:88:9e:06:2d:ec:01:12:eb:d9:af:7c:3b: 32:f2:54:c5:0c:30:27:c9:02:fb:f5:bc:a1:8d:a8: 70:0a:a1:4d:35:32:6b:f5:e1:78:51:c2:a1:32:da: 0e:ca:c8:54:c5:58:fa:fc:59:a8:34:80:7e:49:fb: db:66:a8:92:2f:11:6d:7b:f0:9e:d5:ba:fd:ef:52: 8b:1d:88:6a:bb:d7:b5:c1:ff:e6:45:6c:ac:01:4d: 71:55:8b:b4:4a:25:53:3d:9d:f0:e2:fd:e6:75:ee: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:57:CB:4F:91:D1:41:1A:72:39:09:04:98:51:9C:06:05:A1:04:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:43:27:77:e1:1a:a8:77:c0:f9:21:8f:3e:4f:86:59:e7:cd: 53:8a:15:7a:52:8c:68:9c:98:d2:ba:e0:5d:09:a9:f6:17:7a: c2:17:09:fe:46:25:63:2d:5b:82:02:96:d9:b7:4f:c2:06:77: 9b:d9:25:ec:b8:75:ef:11:06:a5:ef:58:2d:37:14:44:9d:23: f7:e2:04:62:0d:77:c3:50:f1:94:98:bc:f1:c2:71:72:9c:65: 54:4b:e3:f3:c5:83:58:d3:9c:1c:76:dc:58:f6:17:5c:37:08: 07:05:27:34:7d:19:c3:4e:6d:b1:32:12:c8:cf:09:76:e3:44: e8:dd:89:a5:2e:4e:33:3f:1a:0d:27:a8:5f:01:31:40:fb:bd: 17:ac:7d:07:64:d9:c9:4a:7d:df:1f:8c:5a:63:d7:2e:da:c3: d7:49:5c:8a:f4:80:46:fc:0e:11:76:5c:be:c9:4d:3c:cb:9b: 04:7a:e8:26:25:5d:77:b2:3d:16:4f:38:b6:9c:62:8f:f8:23: db:52:7a:8b:8c:47:f5:e8:2f:9f:d5:0a:af:a6:fe:52:96:14: e6:aa:e8:7e:c3:3a:d1:af:a5:e3:91:c3:41:25:32:10:51:19: 0a:f2:72:a4:97:07:9c:24:35:b9:25:64:2f:6c:7a:e2:be:59: 7d:e3:ca:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0HadMTijs7K75QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk MGZkNDhjOWItNGI0YS00ZDQxLThiMWEtM2UzYmE5ZGJhZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZcY4kj0YBhDyDZClR0vtbqnDfLy1cBhX/ZE /zltUO1yPOpxANvrN+FYPaOUO6Fj5exL1vcN1RPx2mGI4QjpQoBxk1sBa4798jH1 khaKotTMP2XZqW9EN0CcZ21fauEsmPebf1/uXe5lrdyAPCGziy+U49q8v55glokc 8+zVbB1277srvH0Dy6vpYLXZb9yRCFtlS/vvAtuIngYt7AES69mvfDsy8lTFDDAn yQL79byhjahwCqFNNTJr9eF4UcKhMtoOyshUxVj6/FmoNIB+SfvbZqiSLxFte/Ce 1br971KLHYhqu9e1wf/mRWysAU1xVYu0SiVTPZ3w4v3mde6bOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBXy0+R0UEacjkJBJhRnAYFoQTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMTYwOGU2NmEtNmZmMi0z YjY1LTlhOGEtZDM3MGYxZGQ2MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZDJ3fhGqh3wPkhjz5PhlnnzVOKFXpSjGicmNK64F0JqfYXesIXCf5G JWMtW4ICltm3T8IGd5vZJey4de8RBqXvWC03FESdI/fiBGINd8NQ8ZSYvPHCcXKc ZVRL4/PFg1jTnBx23Fj2F1w3CAcFJzR9GcNObbEyEsjPCXbjROjdiaUuTjM/Gg0n qF8BMUD7vResfQdk2clKfd8fjFpj1y7aw9dJXIr0gEb8DhF2XL7JTTzLmwR66CYl XXeyPRZPOLacYo/4I9tSeouMR/XoL5/VCq+m/lKWFOaq6H7DOtGvpeORw0ElMhBR GQrycqSXB5wkNbklZC9seuK+WX3jymk= -----END CERTIFICATE-----Generated at Sun Nov 24 14:56:55 2024 by rpki-client on console-fra.rpki-client.org