$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json) Hash identifier: /QqzAwdmSjeO1+ofLQaCq81RLZGpwjaGpoQwuT3Tu5o= Subject key identifier: 97:DE:A0:20:0D:81:F9:6E:59:DA:5A:5E:41:9B:1C:6A:56:57:EC:F4 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F43285847B2669A393BF5CA6C9E8EA6A0 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa Signing time: Tue 29 Oct 2024 01:00:32 +0000 ROA not before: Tue 29 Oct 2024 01:00:32 +0000 ROA not after: Mon 27 Jan 2025 02:00:32 +0000 asID: 400745 IP address blocks: 52.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:66:9a:39:3b:f5:ca:6c:9e:8e:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Oct 29 01:00:32 2024 GMT Not After : Jan 27 02:00:32 2025 GMT Subject: CN=1659127b-004d-4f7b-9ec9-8a14c64bd169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:bc:77:c2:ee:59:a3:fa:d9:39:8b:cf:c0: f4:6e:64:b3:32:85:a5:3f:1b:40:b3:bc:5b:b6:94: d5:5f:0d:3a:96:e5:90:ab:91:90:88:8f:d9:75:17: f0:08:2c:df:52:e9:2e:36:81:9f:b9:4b:1b:cc:a3: 79:2d:cc:09:31:7c:f8:b6:d0:db:74:23:76:b3:58: 2f:8e:62:e8:af:50:10:a3:aa:f6:eb:09:aa:a3:02: f8:67:76:39:96:41:32:f0:90:38:11:ab:bd:e8:76: 86:a4:6f:b6:47:cb:07:90:8e:ba:56:3d:3f:e0:c5: 39:7e:01:fc:4e:db:45:56:3b:ce:9f:48:cc:b9:f9: e9:8d:3f:92:af:62:60:64:49:45:af:37:a8:97:27: f4:21:19:32:b6:10:1b:99:27:9e:2c:c5:b9:d2:60: 79:12:6f:06:b5:7e:17:2d:65:05:d8:5f:25:33:c1: 53:0c:b1:29:83:bc:1a:e7:18:44:2d:5b:38:4e:ad: e7:94:dd:a7:ac:88:f9:b3:c1:82:3b:81:75:1d:d0: a1:d2:75:6f:ba:f9:9d:13:c7:a6:f2:3d:95:d5:5c: ca:90:ce:c4:a5:e9:4f:1b:ff:34:2d:0b:0c:85:8a: db:4e:dd:99:9a:67:72:fe:0b:66:c4:ad:86:3d:75: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DE:A0:20:0D:81:F9:6E:59:DA:5A:5E:41:9B:1C:6A:56:57:EC:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv4: 52.129.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4c:bd:cd:82:f3:25:e8:05:db:aa:f9:86:b8:00:6d:ff:78: ea:32:9d:1d:45:7a:d9:8d:c5:8f:93:64:17:b3:f1:88:67:6c: 9c:d3:3b:73:71:4a:c0:4e:07:81:86:92:7c:ed:4a:d8:8e:b3: 9e:0a:cf:29:7c:96:58:bd:b9:61:3e:43:aa:3d:85:db:f9:d2: fe:a7:dd:5e:46:b1:a3:44:8f:04:8a:24:11:34:a7:83:10:ef: 7c:80:ea:89:4f:fb:dc:ee:6e:0c:29:46:bf:d0:d8:65:45:00: 66:a2:4d:eb:a8:86:81:5f:f3:74:d9:ff:30:ac:35:60:d5:04: 77:39:74:37:07:42:fd:df:08:92:1f:1d:8c:ff:e8:6a:8b:71: e7:b9:d1:12:87:2e:10:a5:cf:48:fd:a0:bc:44:80:03:d4:07: 5c:65:ee:f6:ec:79:a6:bc:91:69:ec:60:aa:00:8f:33:54:2d: 60:87:e3:48:6f:9c:a1:be:08:d4:3f:39:e7:e9:f4:d1:b2:45: 49:3d:bf:44:f2:b9:d2:15:3d:ff:36:93:5d:cc:68:0a:4b:bb: 5d:24:e9:d3:a4:36:52:43:6f:86:c1:9e:29:fa:12:d7:03:7e: b8:de:d6:3f:24:b5:72:10:e7:04:54:a8:1b:32:41:e8:11:08: 09:b2:f8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeyZpo5O/XKbJ6OpqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk MTY1OTEyN2ItMDA0ZC00ZjdiLTllYzktOGExNGM2NGJkMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVC8d8LuWaP62TmLz8D0bmSzMoWlPxtAs7xb tpTVXw06luWQq5GQiI/ZdRfwCCzfUukuNoGfuUsbzKN5LcwJMXz4ttDbdCN2s1gv jmLor1AQo6r26wmqowL4Z3Y5lkEy8JA4Eau96HaGpG+2R8sHkI66Vj0/4MU5fgH8 TttFVjvOn0jMufnpjT+Sr2JgZElFrzeolyf0IRkythAbmSeeLMW50mB5Em8GtX4X LWUF2F8lM8FTDLEpg7wa5xhELVs4Tq3nlN2nrIj5s8GCO4F1HdCh0nVvuvmdE8em 8j2V1VzKkM7EpelPG/80LQsMhYrbTt2Zmmdy/gtmxK2GPXUUlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfeoCANgfluWdpaXkGbHGpWV+z0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Mvc2C8yXoBduq+Ya4AG3/eOoynR1FetmNxY+TZBez8YhnbJzTO3Nx SsBOB4GGknztStiOs54Kzyl8lli9uWE+Q6o9hdv50v6n3V5GsaNEjwSKJBE0p4MQ 73yA6olP+9zubgwpRr/Q2GVFAGaiTeuohoFf83TZ/zCsNWDVBHc5dDcHQv3fCJIf HYz/6GqLcee50RKHLhClz0j9oLxEgAPUB1xl7vbseaa8kWnsYKoAjzNULWCH40hv nKG+CNQ/Oefp9NGyRUk9v0TyudIVPf82k13MaApLu10k6dOkNlJDb4bBnin6EtcD frje1j8ktXIQ5wRUqBsyQegRCAmy+Nk= -----END CERTIFICATE-----Generated at Sun Nov 24 17:22:02 2024 by rpki-client on console-fra.rpki-client.org