$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c22202fc-2e4f-39e3-a518-2ed0240e9025.roa File: c22202fc-2e4f-39e3-a518-2ed0240e9025.roa (raw, json) Hash identifier: av90OYPadObPShSDIfSVwcmeHdSoEvyplfnXiZS/oeg= Subject key identifier: 95:17:E1:56:0B:F6:28:E1:02:0B:77:83:54:A4:E7:C1:4A:20:79:23 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F432858472405BF4A299F209AD4445000 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c22202fc-2e4f-39e3-a518-2ed0240e9025.roa Signing time: Sun 08 Sep 2024 01:00:31 +0000 ROA not before: Sun 08 Sep 2024 01:00:31 +0000 ROA not after: Sat 07 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 52.128.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:24:05:bf:4a:29:9f:20:9a:d4:44:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Sep 8 01:00:31 2024 GMT Not After : Dec 7 02:00:31 2024 GMT Subject: CN=74db717f-2a6c-497b-8086-97be844724ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:1a:d5:71:5a:64:de:78:43:cd:4c:57:9b: 75:d6:d6:7f:8c:9c:58:5a:ed:62:0c:25:fd:eb:fe: 9f:6f:a8:57:9b:ba:27:99:70:a8:ba:d6:c8:26:d6: 7f:5b:93:1e:63:2d:cc:57:10:f0:be:9a:be:36:5f: 3f:e1:e2:81:1d:1e:fa:1e:e2:58:1a:c6:c8:6a:b5: 55:11:c6:89:37:aa:bb:ca:32:eb:bf:3f:25:38:07: 64:a6:8c:97:65:1b:b8:73:56:50:ce:96:87:cb:a0: 13:92:a9:fa:8a:16:3f:c8:0c:3d:51:aa:80:74:c2: 8e:db:9a:76:8f:db:a5:0b:ee:90:55:cf:19:d5:8f: 0e:44:16:dc:56:54:cc:0d:0c:53:52:92:48:36:af: d8:cf:6b:5a:03:30:b4:18:f0:a9:d5:2d:bd:48:28: 71:07:81:41:34:68:be:a1:78:13:ae:e6:01:64:5d: 08:d0:34:a6:5e:20:1b:17:0b:75:25:67:db:01:33: 41:e2:cc:f1:c9:01:9d:3e:35:36:55:95:67:72:9b: 26:22:74:c2:f3:4f:93:2b:39:c1:36:8c:0f:72:fe: 5d:a2:8c:d8:8f:4b:9e:5c:d6:bb:7d:10:47:12:df: ab:30:c6:61:15:88:87:15:97:65:49:96:32:97:7e: 3b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:17:E1:56:0B:F6:28:E1:02:0B:77:83:54:A4:E7:C1:4A:20:79:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c22202fc-2e4f-39e3-a518-2ed0240e9025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:10:db:f8:9d:6c:43:8e:80:e6:3f:0d:35:fd:50:c3:7b:b9: e2:d3:df:e1:42:34:fe:ca:63:ad:0b:cb:4e:5f:44:4d:55:cd: 98:24:72:91:b4:b2:ea:61:51:a0:9b:30:13:90:42:7b:a1:6b: a8:00:ad:e2:85:e8:bd:1d:7e:71:b9:75:47:db:45:2e:30:5b: 87:69:4f:a5:bd:da:fa:b4:50:88:27:16:90:38:de:4f:eb:db: 0d:21:42:3e:50:11:fd:83:15:7e:a1:83:d6:f4:44:bf:ba:42: a5:08:ad:e7:e3:f0:33:11:7d:b8:a4:93:03:2e:bf:f5:c4:8b: 42:b3:15:cc:2c:8a:9a:20:1d:4c:21:0a:9a:38:8f:ab:04:2f: cf:18:62:60:e9:c9:7b:4f:e4:c9:70:37:75:02:e6:ce:00:b5: 94:4d:e8:e3:d6:6d:29:2c:9f:60:5f:14:22:04:96:66:25:e6: d8:42:b9:b4:0b:c1:ec:37:dc:0d:66:ef:03:c8:63:72:2c:9d: 03:6e:83:c4:b1:37:b7:c8:62:ce:79:5d:08:e1:e7:f1:b7:cd: 9a:8a:f2:f6:44:06:d7:2c:f6:59:6d:e3:d7:f4:0a:db:e6:b8: 07:27:05:8a:06:9c:89:8b:6e:5d:55:ac:ad:95:d5:75:2c:9f: 7d:d3:66:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBb9KKZ8gmtREUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk NzRkYjcxN2YtMmE2Yy00OTdiLTgwODYtOTdiZTg0NDcyNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Ma1XFaZN54Q81MV5t11tZ/jJxYWu1iDCX9 6/6fb6hXm7onmXCoutbIJtZ/W5MeYy3MVxDwvpq+Nl8/4eKBHR76HuJYGsbIarVV EcaJN6q7yjLrvz8lOAdkpoyXZRu4c1ZQzpaHy6ATkqn6ihY/yAw9UaqAdMKO25p2 j9ulC+6QVc8Z1Y8ORBbcVlTMDQxTUpJINq/Yz2taAzC0GPCp1S29SChxB4FBNGi+ oXgTruYBZF0I0DSmXiAbFwt1JWfbATNB4szxyQGdPjU2VZVncpsmInTC80+TKznB NowPcv5doozYj0ueXNa7fRBHEt+rMMZhFYiHFZdlSZYyl3473wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUX4VYL9ijhAgt3g1Sk58FKIHkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvYzIyMjAyZmMtMmU0Zi0z OWUzLWE1MTgtMmVkMDI0MGU5MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsQ2/idbEOOgOY/DTX9UMN7ueLT3+FCNP7KY60Ly05fRE1VzZgkcpG0 suphUaCbMBOQQnuha6gAreKF6L0dfnG5dUfbRS4wW4dpT6W92vq0UIgnFpA43k/r 2w0hQj5QEf2DFX6hg9b0RL+6QqUIrefj8DMRfbikkwMuv/XEi0KzFcwsipogHUwh Cpo4j6sEL88YYmDpyXtP5MlwN3UC5s4AtZRN6OPWbSksn2BfFCIElmYl5thCubQL wew33A1m7wPIY3IsnQNug8SxN7fIYs55XQjh5/G3zZqK8vZEBtcs9llt49f0Ctvm uAcnBYoGnImLbl1VrK2V1XUsn33TZqM= -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:11 2024 by rpki-client on console-fra.rpki-client.org