$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa File: 57d3021b-d699-3504-9528-d82afc503970.roa (raw, json) Hash identifier: H03gi/lCeHWNlNO9vroGdA03KrLaHWU//8e5Hci+os8= Subject key identifier: 79:17:6D:85:68:E6:1A:B5:6F:05:46:9A:35:A7:CA:6A:BF:11:09:90 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584797E134CFFFE189B060F11E00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 22781 IP address blocks: 108.171.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:34:cf:ff:e1:89:b0:60:f1:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=d1f4c8d6-7dcc-42e8-9a05-4aaf442c41d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:4b:91:54:f2:a5:67:17:40:c4:d3:b6:93: a9:f6:5d:db:d4:e5:43:a1:44:38:c5:15:4f:77:1a: f3:e4:9b:cc:c4:59:0d:0a:ca:7a:d3:da:97:15:55: 38:e5:5b:40:fd:73:05:85:f2:15:53:01:bf:83:8c: 0a:f5:03:80:65:33:e7:d8:2f:76:01:fd:2b:2c:a5: 33:4c:2d:de:23:c9:d2:e9:49:4e:cf:72:2e:49:b3: 8c:13:39:8e:51:9f:21:32:7b:a9:b0:00:60:d8:57: b4:2b:be:24:d5:66:9f:24:6b:1f:1c:f1:55:31:5d: 4f:81:0a:70:8c:57:71:ab:aa:1e:33:92:19:28:08: a8:1c:ab:00:23:8f:08:71:37:7e:49:45:c8:0f:cd: 31:9c:14:b8:77:3a:57:41:ba:08:fa:a9:0a:78:14: f9:f0:02:23:29:54:b3:54:e0:80:f5:40:68:78:eb: 5b:76:d8:d6:a8:7f:d1:89:ce:6f:96:9c:33:20:13: cf:f4:a9:35:b9:cd:9d:88:f7:0e:a9:b9:a8:e9:15: c8:71:c9:ed:bf:0a:78:18:4d:0c:c6:e6:bd:e6:95: 65:5e:bb:cf:3f:a4:26:90:b3:f2:0e:21:6c:0e:ae: 03:9c:ec:3e:b2:57:a5:47:07:05:a1:f7:0e:0a:a0: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:6D:85:68:E6:1A:B5:6F:05:46:9A:35:A7:CA:6A:BF:11:09:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a0:e1:72:01:be:37:f1:75:1c:c2:eb:2c:90:77:0b:ee:1b: f5:3d:41:7d:c0:20:4b:a1:31:29:06:e0:04:ab:8e:34:e4:31: 4a:a3:8b:e4:2e:b7:3f:b3:5d:b9:32:63:eb:73:e6:26:d7:b8: f6:fa:56:1b:38:2b:75:18:6e:1d:a8:24:6c:c3:ae:5e:46:9f: 9e:69:70:fb:ce:7a:18:16:fc:05:a5:6d:e7:04:b0:22:8e:41: 6b:8e:0d:27:91:09:0d:79:35:f4:39:e2:67:de:9d:1c:80:92: 09:c8:bf:2b:4e:d7:ea:76:92:11:02:fd:06:15:3f:29:ab:6b: f7:c4:e8:d6:11:82:6e:0a:54:b6:65:f5:e0:23:ca:34:60:6f: 93:b6:d9:83:1a:75:6a:a0:93:d3:7c:ac:0d:ae:d9:fd:7d:be: 23:0e:1b:20:93:ef:a3:5c:95:9c:c2:32:5c:ac:89:94:32:7f: dd:3b:8d:49:f2:1a:73:a1:b1:62:22:1d:cb:9d:95:62:77:8b: 39:f5:32:0a:8a:73:9f:1f:8b:a4:aa:91:5e:97:97:50:78:44: e9:9d:ba:e4:73:d2:e7:a4:07:58:17:73:d3:fe:c8:fd:15:89: da:e7:f4:df:8b:d6:e9:cf:08:9d:30:cf:d1:d9:e3:b9:75:7c: dd:a4:e5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TTP/+GJsGDxHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk ZDFmNGM4ZDYtN2RjYy00MmU4LTlhMDUtNGFhZjQ0MmM0MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1LkVTypWcXQMTTtpOp9l3b1OVDoUQ4xRVP dxrz5JvMxFkNCsp609qXFVU45VtA/XMFhfIVUwG/g4wK9QOAZTPn2C92Af0rLKUz TC3eI8nS6UlOz3IuSbOMEzmOUZ8hMnupsABg2Fe0K74k1WafJGsfHPFVMV1PgQpw jFdxq6oeM5IZKAioHKsAI48IcTd+SUXID80xnBS4dzpXQboI+qkKeBT58AIjKVSz VOCA9UBoeOtbdtjWqH/Ric5vlpwzIBPP9Kk1uc2diPcOqbmo6RXIccntvwp4GE0M xua95pVlXrvPP6QmkLPyDiFsDq4DnOw+slelRwcFofcOCqBv+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkXbYVo5hq1bwVGmjWnymq/EQmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTdkMzAyMWItZDY5OS0z NTA0LTk1MjgtZDgyYWZjNTAzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6g4XIBvjfxdRzC6yyQdwvuG/U9QX3AIEuhMSkG4ASrjjTkMUqji+Qu tz+zXbkyY+tz5ibXuPb6Vhs4K3UYbh2oJGzDrl5Gn55pcPvOehgW/AWlbecEsCKO QWuODSeRCQ15NfQ54mfenRyAkgnIvytO1+p2khEC/QYVPymra/fE6NYRgm4KVLZl 9eAjyjRgb5O22YMadWqgk9N8rA2u2f19viMOGyCT76NclZzCMlysiZQyf907jUny GnOhsWIiHcudlWJ3izn1MgqKc58fi6SqkV6Xl1B4ROmduuRz0uekB1gXc9P+yP0V idrn9N+L1unPCJ0wz9HZ47l1fN2k5a4= -----END CERTIFICATE-----Generated at Fri Nov 22 12:10:50 2024 by rpki-client on console-ams.rpki-client.org