$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/953ed597-a7ae-33d4-93c2-8a5e80848057.roa File: 953ed597-a7ae-33d4-93c2-8a5e80848057.roa (raw, json) Hash identifier: 3SOrCWd8PScTD/njf9hSV+jLzpDcJSyiW0PAcrE9ItM= Subject key identifier: 23:37:4E:38:DE:70:8A:C1:4F:FD:49:CF:29:54:AC:07:88:3E:90:75 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847CFD4AA07359732AFE76CBC00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/953ed597-a7ae-33d4-93c2-8a5e80848057.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 20303 IP address blocks: 45.58.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:aa:07:35:97:32:af:e7:6c:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=3fa2ba3a-a90a-4f91-9cce-eee1b6a9868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:88:57:83:55:0c:ed:0e:57:0c:67:77:5e: 78:ea:9d:07:d1:38:74:b4:52:96:c1:6e:7d:e0:d1: b5:43:fe:5e:38:a9:46:08:93:04:95:fe:c6:6f:25: 15:d1:b7:35:86:dd:36:16:8d:0f:56:d1:37:0f:9b: bb:f3:74:47:73:0f:91:7c:f9:ce:98:d2:a4:f1:7c: ac:40:ed:df:1d:04:10:46:61:0e:16:98:e0:a8:3b: 91:ac:31:3f:02:af:4d:3e:dc:65:7f:9e:51:07:1d: ea:06:e9:83:35:03:8b:61:1e:d9:ba:0a:22:b7:79: 6e:f1:58:2c:c2:f5:53:90:9e:f9:3f:8d:d1:04:9e: dd:9c:3d:e0:2c:33:07:75:f8:e1:89:b3:af:ac:74: 1d:b1:e6:20:d6:7a:34:f6:12:4f:7b:87:c6:97:2c: 20:fc:e3:1f:94:cb:03:52:39:24:37:d4:33:0d:17: 9e:ee:0e:24:b9:22:5d:34:e4:05:96:14:6a:03:60: c5:21:67:ab:33:19:02:a6:ea:ce:48:5d:18:46:f5: ad:37:62:29:02:2d:d3:f1:30:e1:51:37:d0:5f:c3: 68:bd:e1:5b:6a:9f:79:a4:12:05:d4:95:3d:10:11: 6d:92:fe:d2:35:00:d0:6b:f6:9c:0c:d1:c8:76:d6: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:37:4E:38:DE:70:8A:C1:4F:FD:49:CF:29:54:AC:07:88:3E:90:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/953ed597-a7ae-33d4-93c2-8a5e80848057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3b:eb:a5:97:35:8a:63:6e:90:2b:f7:30:a7:0c:26:c6:40: f8:6b:c5:3c:2a:18:c4:5e:b5:f2:e3:7b:fe:b7:89:a4:a5:72: af:96:8b:ac:c6:5c:a8:e5:fa:ae:f7:19:4e:27:03:5f:84:09: e8:57:b1:35:74:0c:67:64:c7:3d:0f:2c:e6:ee:bc:93:ee:07: 8e:0d:8c:4b:75:e1:70:71:42:01:3e:ad:36:04:ec:6b:07:30: ee:87:c1:f4:d3:aa:32:64:c5:ed:3f:ae:9a:fd:5a:08:6a:f3: b4:d7:06:8f:22:ac:0b:9b:49:e6:5c:6b:c9:c9:f7:da:80:5b: 60:a9:51:38:45:2d:04:6b:e5:20:50:8c:4b:61:4a:6c:63:a3: d9:96:9f:a7:d3:ec:90:6e:8e:7c:b4:5e:84:b3:e8:2b:19:f5: 5e:0b:12:2b:0b:bf:f4:18:0b:a4:44:b4:c9:7b:eb:b5:14:5b: 50:2b:67:1b:97:4d:49:ec:db:9b:5d:2d:7e:88:e9:86:8f:32: 43:ef:0b:14:e3:1c:ed:bb:71:d4:ff:f1:5e:ec:89:75:c1:a0: 38:04:8e:f6:9f:86:de:6c:6f:a5:c7:a1:9c:fb:e8:a8:61:aa: 3b:aa:9d:02:3a:7a:0e:7b:3a:87:e0:af:bd:b6:b6:3e:ca:c3: 3d:24:02:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1KoHNZcyr+dsvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk M2ZhMmJhM2EtYTkwYS00ZjkxLTljY2UtZWVlMWI2YTk4NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngqIV4NVDO0OVwxnd1546p0H0Th0tFKWwW59 4NG1Q/5eOKlGCJMElf7GbyUV0bc1ht02Fo0PVtE3D5u783RHcw+RfPnOmNKk8Xys QO3fHQQQRmEOFpjgqDuRrDE/Aq9NPtxlf55RBx3qBumDNQOLYR7Zugoit3lu8Vgs wvVTkJ75P43RBJ7dnD3gLDMHdfjhibOvrHQdseYg1no09hJPe4fGlywg/OMflMsD UjkkN9QzDRee7g4kuSJdNOQFlhRqA2DFIWerMxkCpurOSF0YRvWtN2IpAi3T8TDh UTfQX8NoveFbap95pBIF1JU9EBFtkv7SNQDQa/acDNHIdtbrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM3TjjecIrBT/1JzylUrAeIPpB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTUzZWQ1OTctYTdhZS0z M2Q0LTkzYzItOGE1ZTgwODQ4MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLTrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM766WXNYpjbpAr9zCnDCbGQPhrxTwqGMRetfLje/63iaSlcq+Wi6zG XKjl+q73GU4nA1+ECehXsTV0DGdkxz0PLObuvJPuB44NjEt14XBxQgE+rTYE7GsH MO6HwfTTqjJkxe0/rpr9Wghq87TXBo8irAubSeZca8nJ99qAW2CpUThFLQRr5SBQ jEthSmxjo9mWn6fT7JBujny0XoSz6CsZ9V4LEisLv/QYC6REtMl767UUW1ArZxuX TUns25tdLX6I6YaPMkPvCxTjHO27cdT/8V7siXXBoDgEjvafht5sb6XHoZz76Khh qjuqnQI6eg57Oofgr722tj7Kwz0kArg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:51 2024 by rpki-client on console-fra.rpki-client.org