$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa File: 40f3801f-2fad-3546-9954-90e36fe46778.roa (raw, json) Hash identifier: 0nmUoOXvbo8osvr9a4wQhRCCziOtXlTqwYsmgqQ77R8= Subject key identifier: 6A:B1:4D:57:49:BF:DD:49:3D:D3:0B:74:42:9A:20:C0:F1:EB:08:F5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584782F0FB4DC2EF2530709676D0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa Signing time: Sat 12 Oct 2024 01:00:32 +0000 ROA not before: Sat 12 Oct 2024 01:00:32 +0000 ROA not after: Fri 10 Jan 2025 02:00:32 +0000 asID: 22781 IP address blocks: 108.171.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:f0:fb:4d:c2:ef:25:30:70:96:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 12 01:00:32 2024 GMT Not After : Jan 10 02:00:32 2025 GMT Subject: CN=21672f65-03e7-43ee-8b87-af51a3597609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6a:19:3f:b6:bd:a9:95:75:e1:56:bb:00:3a: 8d:33:5d:6e:0c:7a:91:2e:2b:4b:aa:7d:20:1a:dd: a2:10:31:bc:00:a1:23:b2:1a:14:a4:b0:91:b4:77: fd:64:ef:5b:6c:fb:b1:bc:de:96:a1:5d:de:ed:04: a1:39:ef:63:f1:72:cf:4e:8d:70:14:fa:a6:75:a6: b7:c2:34:9b:1e:55:a6:0c:2b:e6:ae:cf:3b:30:6d: 86:1e:c5:19:6d:2b:0d:aa:1d:dd:b9:8e:88:de:e4: 09:35:7c:a7:e1:88:1d:5d:7a:98:89:0d:0d:f9:da: 2b:85:4c:20:0f:61:08:b9:16:9e:bb:bd:f5:94:56: 46:93:60:b7:fe:20:93:22:51:f6:81:b5:8d:74:dd: d4:82:c2:f2:80:9d:48:98:db:ba:3d:52:9d:23:60: d9:04:2a:31:de:b6:29:f8:9d:86:b7:e5:be:96:47: e5:76:ea:a9:ed:29:94:97:72:06:d3:e9:60:14:d7: a7:5b:99:c9:80:94:15:b2:a2:9f:ac:2c:d7:a0:96: 56:2a:6d:fd:6f:01:a2:bf:12:f2:50:58:5d:fa:20: 70:e1:65:dd:25:92:06:06:db:b5:87:fe:b5:38:1b: b4:bb:b7:0a:95:07:86:17:3b:60:e8:68:d8:a2:5f: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B1:4D:57:49:BF:DD:49:3D:D3:0B:74:42:9A:20:C0:F1:EB:08:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/40f3801f-2fad-3546-9954-90e36fe46778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:50:7c:c9:ab:49:eb:02:01:cd:68:61:1c:1f:24:41:77:6b: b6:28:41:c4:a5:13:f3:cd:af:fd:89:b0:62:bd:2c:eb:b5:87: 3a:c2:8c:0c:9c:2f:6f:40:9b:18:c4:88:5a:7e:62:6a:b2:0a: 9f:36:c4:ff:d5:8b:4f:dd:86:f3:c7:bb:4e:93:b3:32:0e:6a: f5:ab:2c:88:8e:cc:46:f7:c0:77:3a:03:64:03:e6:ae:0f:93: 90:44:0f:22:b8:63:08:9b:3b:1e:40:8e:13:1c:9b:93:9d:62: 67:58:ed:59:2e:ae:9d:4f:82:4f:e3:28:12:b5:05:ca:2b:cc: 4c:4e:59:6f:96:13:64:dc:ba:57:c4:4a:c1:91:11:bc:d4:27: 37:8b:02:1d:c7:e3:4e:f7:74:70:9a:2e:d0:d2:5d:dc:d6:1e: c2:38:d5:73:8a:07:ce:93:0e:f0:fd:2b:21:54:d1:64:3a:88: 72:f0:ea:59:da:3b:8d:1c:11:49:7a:4e:34:d5:4c:84:33:ce: d6:23:d6:b3:8e:a1:04:d7:d9:f7:43:31:d6:ab:91:07:05:9b: c8:48:a4:71:33:35:18:6f:b4:2c:45:16:50:73:3b:56:df:0b: 65:f9:6a:f1:64:d4:69:52:c4:05:92:25:54:d8:7c:83:5b:b2: f5:08:f0:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeC8PtNwu8lMHCWdtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MTAxMjAxMDAzMloXDTI1MDExMDAyMDAzMlowLzEtMCsGA1UEAxMk MjE2NzJmNjUtMDNlNy00M2VlLThiODctYWY1MWEzNTk3NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGoZP7a9qZV14Va7ADqNM11uDHqRLitLqn0g Gt2iEDG8AKEjshoUpLCRtHf9ZO9bbPuxvN6WoV3e7QShOe9j8XLPTo1wFPqmdaa3 wjSbHlWmDCvmrs87MG2GHsUZbSsNqh3duY6I3uQJNXyn4YgdXXqYiQ0N+dorhUwg D2EIuRaeu731lFZGk2C3/iCTIlH2gbWNdN3UgsLygJ1ImNu6PVKdI2DZBCox3rYp +J2Gt+W+lkflduqp7SmUl3IG0+lgFNenW5nJgJQVsqKfrCzXoJZWKm39bwGivxLy UFhd+iBw4WXdJZIGBtu1h/61OBu0u7cKlQeGFztg6GjYol8h6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqxTVdJv91JPdMLdEKaIMDx6wj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNDBmMzgwMWYtMmZhZC0z NTQ2LTk5NTQtOTBlMzZmZTQ2Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpQfMmrSesCAc1oYRwfJEF3a7YoQcSlE/PNr/2JsGK9LOu1hzrCjAyc L29AmxjEiFp+YmqyCp82xP/Vi0/dhvPHu06TszIOavWrLIiOzEb3wHc6A2QD5q4P k5BEDyK4YwibOx5AjhMcm5OdYmdY7Vkurp1Pgk/jKBK1BcorzExOWW+WE2TculfE SsGREbzUJzeLAh3H4073dHCaLtDSXdzWHsI41XOKB86TDvD9KyFU0WQ6iHLw6lna O40cEUl6TjTVTIQzztYj1rOOoQTX2fdDMdarkQcFm8hIpHEzNRhvtCxFFlBzO1bf C2X5avFk1GlSxAWSJVTYfINbsvUI8Lk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org