$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: f1PMn35rX5tQouwRhhSSqye9d9dviO6zKncZVgUR068= Subject key identifier: 91:0A:CD:BB:BB:55:7E:F6:D6:AA:BB:B2:64:09:6D:70:E0:12:2E:B2 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F43285847A5D6A9F6FFA67CAEBE449D40 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a9:f6:ff:a6:7c:ae:be:44:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=58b76c5b-5128-4b0d-afe3-204cf3e3da2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:c4:ad:5e:8a:77:69:d8:ad:1f:ae:71:ed: ff:4d:f6:1c:8a:da:2a:b0:2a:c5:30:6d:78:5b:2a: 57:9b:e7:4f:cb:4a:18:0e:ab:72:ab:a7:db:81:27: a0:b0:f2:19:b3:8c:86:8c:c9:93:c4:13:80:9e:37: fa:c4:87:26:3b:6c:89:6a:90:34:02:fb:99:a7:21: c2:77:5f:06:4e:54:e8:ae:ad:dd:f0:db:1a:36:c2: 4f:b3:a7:89:61:b3:93:a3:13:cc:cd:c9:5b:57:da: 1a:45:69:94:6d:e0:1b:3c:1a:33:40:16:a7:81:0f: 75:a6:e9:f4:6f:7f:9e:b3:72:d6:12:68:e7:3f:8e: 1d:37:d2:ff:35:f1:13:68:ea:71:a7:e4:07:b3:7c: be:fb:f4:6a:9e:86:75:6e:a4:23:a2:55:d1:bd:9d: 0d:00:d4:e4:6c:60:53:64:89:02:20:56:2c:cd:be: 36:02:61:07:ff:fa:2b:93:83:c5:74:4e:12:f6:f1: e0:cd:5b:30:71:08:fa:52:c2:8d:17:d5:90:f1:58: 79:a0:34:2c:e2:8c:0d:64:34:d6:ad:e8:38:fe:bd: 19:e7:f3:4a:56:6b:c4:7f:1b:f0:ea:61:b1:22:7d: 5c:56:a0:2f:8c:06:c5:8f:a0:65:2b:2f:7d:7e:a3: 9a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:CD:BB:BB:55:7E:F6:D6:AA:BB:B2:64:09:6D:70:E0:12:2E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7d:ff:ed:45:ae:ce:f1:67:70:29:59:01:8f:27:70:27:65: 4f:f4:7a:96:82:b4:1e:ed:6a:db:7a:58:a9:4c:35:0c:14:e3: 80:58:69:c8:00:4c:2f:07:07:d8:15:13:2f:99:b0:5b:61:ba: cf:c2:00:62:48:b0:48:31:6a:b8:0f:ab:27:5f:5d:79:b7:fc: 4a:36:c4:46:99:9a:cd:b8:01:3b:42:8e:58:80:4f:76:2a:38: 08:59:83:b3:f5:e3:90:3f:90:a0:eb:e0:c8:3a:46:bf:b4:0e: 6d:1c:d1:ab:81:3f:b7:7e:7a:32:cf:3b:05:0a:7e:5b:e5:00: 25:d1:30:0f:94:23:f3:1a:97:72:45:89:67:87:b6:9c:20:2f: e7:6d:4a:ee:78:b4:c5:b6:e1:18:57:d6:90:26:d4:15:60:83: 07:a7:95:59:0d:98:fc:ed:31:e7:7d:7b:00:05:ac:44:8f:f0: 6b:b0:99:49:18:97:4d:5a:b0:f5:d3:bd:f2:58:c9:15:78:7a: 27:55:84:49:7a:c9:0c:6d:c7:30:e0:44:bc:d6:fa:68:89:f8: 63:28:6c:c2:c6:27:bc:93:f4:19:d8:06:6f:90:db:5b:9b:ba: 94:f8:3b:48:a2:62:42:6a:1d:10:be:1e:f4:66:d7:6c:8c:23: 70:b7:15:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qn2/6Z8rr5EnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NThiNzZjNWItNTEyOC00YjBkLWFmZTMtMjA0Y2YzZTNkYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1LErV6Kd2nYrR+uce3/TfYcitoqsCrFMG14 WypXm+dPy0oYDqtyq6fbgSegsPIZs4yGjMmTxBOAnjf6xIcmO2yJapA0AvuZpyHC d18GTlTorq3d8NsaNsJPs6eJYbOToxPMzclbV9oaRWmUbeAbPBozQBangQ91pun0 b3+es3LWEmjnP44dN9L/NfETaOpxp+QHs3y++/RqnoZ1bqQjolXRvZ0NANTkbGBT ZIkCIFYszb42AmEH//ork4PFdE4S9vHgzVswcQj6UsKNF9WQ8Vh5oDQs4owNZDTW reg4/r0Z5/NKVmvEfxvw6mGxIn1cVqAvjAbFj6BlKy99fqOalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEKzbu7VX721qq7smQJbXDgEi6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH59/+1Frs7xZ3ApWQGPJ3AnZU/0epaCtB7tatt6WKlMNQwU44BYacgA TC8HB9gVEy+ZsFthus/CAGJIsEgxargPqydfXXm3/Eo2xEaZms24ATtCjliAT3Yq OAhZg7P145A/kKDr4Mg6Rr+0Dm0c0auBP7d+ejLPOwUKflvlACXRMA+UI/Mal3JF iWeHtpwgL+dtSu54tMW24RhX1pAm1BVggwenlVkNmPztMed9ewAFrESP8GuwmUkY l01asPXTvfJYyRV4eidVhEl6yQxtxzDgRLzW+miJ+GMobMLGJ7yT9BnYBm+Q21ub upT4O0iiYkJqHRC+HvRm12yMI3C3FWk= -----END CERTIFICATE-----Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org