$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1e4d64-903b-3830-8350-52591a317d02.roa File: aa1e4d64-903b-3830-8350-52591a317d02.roa (raw, json) Hash identifier: at9yVdXJPg0BKUcalB8GrQUQ+ToyX69y9xMMLjgbnk0= Subject key identifier: 8A:E1:B1:C7:46:72:06:B6:28:BB:1F:15:0F:42:E7:9D:79:7E:64:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584734C652944DCCC85ACF9A6A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1e4d64-903b-3830-8350-52591a317d02.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 7015 IP address blocks: 174.180.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c6:52:94:4d:cc:c8:5a:cf:9a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=1f3fd7ef-56d0-485a-ac4a-c9a699051e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:ca:fe:18:d8:df:5e:e0:62:48:28:9e:6c: bd:7e:58:59:7d:d0:64:3c:2f:7e:bd:e6:31:94:20: 77:b8:e8:c2:ea:a1:e9:1a:3a:37:15:1e:c2:9b:6b: 35:7a:27:95:82:63:5c:a2:a8:22:25:0d:e4:56:a9: 6e:1f:85:85:4f:4a:70:58:38:39:2f:9b:07:d5:34: 01:6b:11:c4:d8:63:d2:a2:61:0b:44:f2:36:36:49: d5:3c:32:a4:d8:eb:10:7b:c3:4c:84:61:0a:01:f2: e6:80:d3:69:80:70:58:17:38:bd:8b:5b:35:df:41: 62:5b:06:3e:d3:cf:d3:9e:b0:ea:82:d5:17:b1:87: a7:a5:bf:0e:b3:15:18:66:96:94:a8:3e:99:1b:e5: c5:aa:da:85:4f:7a:01:77:f7:86:c5:97:b0:56:fd: ae:be:14:74:49:0d:e6:3b:07:8f:ef:2a:73:bc:28: ce:1a:8e:d8:62:98:d5:e4:59:3d:22:eb:d8:95:30: 02:1a:05:08:3f:79:e5:b9:59:bc:9a:d4:e4:88:da: dc:d4:35:93:db:9d:dd:aa:b5:91:5f:56:dc:dc:58: 1c:ac:e8:48:2d:0a:3b:2e:d9:e5:5f:93:2b:89:00: a5:13:9c:f9:bf:52:bc:65:4a:c6:a7:7c:39:9e:b2: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:B1:C7:46:72:06:B6:28:BB:1F:15:0F:42:E7:9D:79:7E:64:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1e4d64-903b-3830-8350-52591a317d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.180.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f9:ce:d5:e7:28:ec:99:b4:8f:83:f0:8d:75:1c:36:23:b9: bc:ad:5d:2f:c2:33:d3:ec:a5:99:a5:20:79:75:99:15:04:80: 01:cc:44:39:d6:7a:ac:a6:fd:cb:4d:b9:ad:48:da:a4:39:71: 28:00:92:8e:30:f1:57:38:0d:28:49:23:03:29:98:0e:3d:bb: ba:b8:6d:ba:9b:5c:98:a9:d7:84:25:55:a9:54:a6:c9:4d:6e: f5:94:cf:d7:48:45:8d:9c:b9:ce:5d:c1:4e:79:e6:6f:ed:48: 26:d1:1e:5e:fb:09:db:83:91:3d:9e:20:bd:d5:b1:e3:7a:b9: 46:0e:9a:f1:3a:ec:a3:12:2f:d7:36:ad:ab:f9:18:3e:fe:be: 4a:5f:37:1e:8e:05:d5:48:bd:76:ca:1f:57:8c:7c:a5:a7:de: 0b:b9:69:26:7b:30:46:b8:ea:c0:ae:d9:ee:fc:67:62:3f:3d: 4e:2c:aa:2c:54:bf:6f:2f:ea:4e:0c:da:c7:4d:8c:e8:56:c5: 91:c9:73:50:3d:a7:52:2a:e5:20:c0:c7:08:f6:ef:f8:b5:20: 81:23:08:1e:7c:6e:53:f2:9e:16:e3:c7:68:db:b7:43:68:76: cc:63:29:98:64:f1:91:9e:e3:b9:f3:1b:72:df:e6:57:a8:4c: 82:81:f8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xlKUTczIWs+aagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MWYzZmQ3ZWYtNTZkMC00ODVhLWFjNGEtYzlhNjk5MDUxZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhrK/hjY317gYkgonmy9flhZfdBkPC9+veYx lCB3uOjC6qHpGjo3FR7Cm2s1eieVgmNcoqgiJQ3kVqluH4WFT0pwWDg5L5sH1TQB axHE2GPSomELRPI2NknVPDKk2OsQe8NMhGEKAfLmgNNpgHBYFzi9i1s130FiWwY+ 08/TnrDqgtUXsYenpb8OsxUYZpaUqD6ZG+XFqtqFT3oBd/eGxZewVv2uvhR0SQ3m OweP7ypzvCjOGo7YYpjV5Fk9IuvYlTACGgUIP3nluVm8mtTkiNrc1DWT253dqrWR X1bc3FgcrOhILQo7LtnlX5MriQClE5z5v1K8ZUrGp3w5nrK5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrhscdGcga2KLsfFQ9C5515fmQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWExZTRkNjQtOTAzYi0z ODMwLTgzNTAtNTI1OTFhMzE3ZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrrRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM35ztXnKOyZtI+D8I11HDYjubytXS/CM9PspZmlIHl1mRUEgAHMRDnW eqym/ctNua1I2qQ5cSgAko4w8Vc4DShJIwMpmA49u7q4bbqbXJip14QlValUpslN bvWUz9dIRY2cuc5dwU555m/tSCbRHl77CduDkT2eIL3VseN6uUYOmvE67KMSL9c2 rav5GD7+vkpfNx6OBdVIvXbKH1eMfKWn3gu5aSZ7MEa46sCu2e78Z2I/PU4sqixU v28v6k4M2sdNjOhWxZHJc1A9p1Iq5SDAxwj27/i1IIEjCB58blPynhbjx2jbt0No dsxjKZhk8ZGe47nzG3Lf5leoTIKB+BE= -----END CERTIFICATE-----Generated at Fri Nov 22 12:03:02 2024 by rpki-client on console-ams.rpki-client.org