$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa File: b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa (raw, json) Hash identifier: yGlSoIlTBUJva53sI73/xmLV0jhIgGU1BQneRfT78o4= Subject key identifier: 17:AF:4C:98:C6:F8:5E:CE:8B:DB:28:E9:57:D5:7C:E4:8C:E7:2C:7C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847EBBF85DA5ECD4D1DDBB15480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa Signing time: Mon 18 Nov 2024 14:00:40 +0000 ROA not before: Mon 18 Nov 2024 14:00:40 +0000 ROA not after: Sun 16 Feb 2025 14:00:40 +0000 asID: 6079 IP address blocks: 45.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:bf:85:da:5e:cd:4d:1d:db:b1:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 18 14:00:40 2024 GMT Not After : Feb 16 14:00:40 2025 GMT Subject: CN=28ea0ec4-3a1e-4e6c-9747-be89a65f77f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:9b:bc:89:bf:e5:6f:cd:b3:c7:a6:02:c0: 88:67:88:0a:4a:b1:d5:ed:13:23:22:a7:50:4a:28: f5:0b:81:87:62:de:ed:e5:8e:bd:29:90:a0:b0:eb: 60:64:a5:f3:12:3c:15:89:85:3b:b6:4a:9d:8e:82: 1c:70:a4:56:bd:e5:5e:3d:e3:1b:f3:af:01:75:5d: db:c5:d3:e8:ab:6f:9c:4c:59:13:2e:89:04:25:dc: a9:46:2b:ec:cf:77:67:37:47:b1:33:26:ea:61:8e: 90:b0:80:0b:80:8e:1f:81:98:aa:c5:b2:20:ae:26: 3c:bb:62:f9:0c:9e:fb:71:c3:d4:42:3d:f3:5e:3d: f0:67:1a:58:d0:5c:57:ea:c7:eb:44:bd:44:27:8b: 15:2f:04:6a:f6:82:70:2a:e6:7e:93:89:77:bb:3a: d9:f0:e0:65:54:e9:b2:46:32:df:5d:2a:13:cb:17: 92:1c:87:fb:09:ec:1d:d3:a6:2a:e5:91:cf:cd:ec: cd:6c:b1:9b:0c:6a:a0:e0:57:58:9f:f6:db:6c:dd: ca:58:ca:ef:47:d1:26:fd:19:d3:ba:22:29:64:81: d7:9e:ef:ae:ee:ca:96:84:30:09:93:d6:69:cd:6b: c8:4f:34:51:27:8f:f0:86:39:fb:93:4a:09:b5:09: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:4C:98:C6:F8:5E:CE:8B:DB:28:E9:57:D5:7C:E4:8C:E7:2C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:36:2c:a6:e6:16:a6:00:37:ac:de:43:6c:1b:fe:83:7d:78: 89:67:a0:41:39:65:67:3d:14:ab:5a:08:0e:d3:76:ef:56:d0: e3:40:d9:da:1e:80:9d:0e:6e:65:eb:b6:8d:76:bc:ac:86:dc: 91:06:0b:cb:81:18:8e:62:15:61:56:0b:ab:ab:b0:5f:6f:18: 5d:eb:b6:93:67:66:16:27:65:06:ad:2b:20:9b:4e:72:2e:5c: 30:ed:a2:61:9f:f7:0e:06:30:40:b9:d0:14:f0:86:0f:a5:7e: 0f:5a:1a:97:41:f0:57:66:14:e1:9b:d9:f2:7f:4d:26:a1:0d: 3c:e1:e7:7c:66:21:4e:77:a5:74:ad:9b:a6:f2:09:bd:8a:ec: 0d:a9:24:78:3e:54:c6:6a:54:b2:80:d3:41:cb:8b:13:16:2b: 2d:bc:6f:a0:22:94:1f:62:d3:30:a9:88:8b:39:c1:44:c1:bb: a0:68:b9:22:e7:29:30:ad:34:0c:ba:e8:f1:da:2a:47:24:68: 7a:df:09:5f:8f:2e:35:67:8e:57:de:09:93:a5:4f:a5:b4:7c: ac:99:ff:4f:8a:82:0f:46:ec:9c:f4:d7:fa:d3:8c:66:39:9c: cd:78:ac:e2:d2:73:96:59:91:21:f0:6b:4d:ff:cc:d6:9d:96: a9:8a:fe:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4XaXs1NHduxVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk MjhlYTBlYzQtM2ExZS00ZTZjLTk3NDctYmU4OWE2NWY3N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eibvIm/5W/Ns8emAsCIZ4gKSrHV7RMjIqdQ Sij1C4GHYt7t5Y69KZCgsOtgZKXzEjwViYU7tkqdjoIccKRWveVePeMb868BdV3b xdPoq2+cTFkTLokEJdypRivsz3dnN0exMybqYY6QsIALgI4fgZiqxbIgriY8u2L5 DJ77ccPUQj3zXj3wZxpY0FxX6sfrRL1EJ4sVLwRq9oJwKuZ+k4l3uzrZ8OBlVOmy RjLfXSoTyxeSHIf7Cewd06Yq5ZHPzezNbLGbDGqg4FdYn/bbbN3KWMrvR9Em/RnT uiIpZIHXnu+u7sqWhDAJk9ZpzWvITzRRJ4/whjn7k0oJtQllfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBevTJjG+F7Oi9so6VfVfOSM5yx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjkxMjBkNjItNTViMC0z MDU3LWJmZTQtMzNjNWNiNzJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU2LKbmFqYAN6zeQ2wb/oN9eIlnoEE5ZWc9FKtaCA7Tdu9W0ONA2doe gJ0ObmXrto12vKyG3JEGC8uBGI5iFWFWC6ursF9vGF3rtpNnZhYnZQatKyCbTnIu XDDtomGf9w4GMEC50BTwhg+lfg9aGpdB8FdmFOGb2fJ/TSahDTzh53xmIU53pXSt m6byCb2K7A2pJHg+VMZqVLKA00HLixMWKy28b6AilB9i0zCpiIs5wUTBu6BouSLn KTCtNAy66PHaKkckaHrfCV+PLjVnjlfeCZOlT6W0fKyZ/0+Kgg9G7Jz01/rTjGY5 nM14rOLSc5ZZkSHwa03/zNadlqmK/g0= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:52 2024 by rpki-client on console-fra.rpki-client.org