$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa File: 0b631392-a580-3432-98c8-2b6576544515.roa (raw, json) Hash identifier: 59dqC1DaYXIhd0C8YwPKbawdCinnAQdImlVEXElKMrQ= Subject key identifier: 10:11:B2:7C:9A:F7:0C:05:2A:54:E1:F4:79:36:09:E3:EF:FC:D6:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5CEB0C072D12F840BFE20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 396592 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:ce:b0:c0:72:d1:2f:84:0b:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=7e321d54-48ec-4e00-ac3d-44fb6fc464d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:88:cd:2b:d4:a9:0a:13:82:43:f3:b8:f6: 09:9c:6d:c0:17:b3:c4:6d:16:cf:2b:7c:09:83:19: 4c:0c:16:82:d1:a1:6a:7a:03:da:a7:a0:05:82:e2: 1f:a0:d3:e0:08:ec:6f:34:28:da:c5:c5:ab:06:76: 71:5d:19:5c:0b:83:ed:fe:cd:7f:f6:95:e1:93:91: f6:02:b3:d0:d8:14:c8:21:0c:19:ff:7b:0e:6d:12: 64:e8:f9:aa:fb:4b:f1:49:3a:4f:d8:14:b8:45:6a: 84:0c:83:d0:63:7a:3c:af:0f:71:4f:49:d8:5d:f5: 53:18:c4:23:21:48:ae:a7:66:52:70:8a:84:4f:27: 9e:36:76:71:ff:bc:84:5c:81:6d:68:57:d7:4f:58: 27:55:88:64:ee:4c:4f:17:bd:05:20:f8:2f:39:78: a0:2e:f0:bc:46:22:30:c3:1b:e6:c3:b6:ad:fe:cf: 89:5c:ec:70:aa:ae:f7:a7:fb:04:d5:65:08:59:26: 9f:42:1f:7d:33:e8:2f:e1:aa:ca:10:4f:96:f0:1e: 43:15:a9:71:27:b7:5e:98:64:56:ac:86:7b:7c:22: 05:1f:85:b7:65:f8:a5:6b:6a:75:2d:c1:5a:59:65: 77:34:78:7a:48:e7:7b:79:7e:98:b0:93:bb:32:14: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:11:B2:7C:9A:F7:0C:05:2A:54:E1:F4:79:36:09:E3:EF:FC:D6:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e3:7b:89:c3:c0:ed:fc:5e:3f:6e:a8:aa:1b:9b:f1:63:b6: 1e:58:b3:40:95:0c:18:82:0b:ee:75:4d:97:81:72:dc:9b:a1: e8:4a:52:2b:66:46:6d:22:97:29:b6:15:c3:74:50:61:0e:28: f1:05:15:4f:21:3f:02:a8:78:45:38:13:fe:e8:22:7b:7c:d6: 13:5c:fe:0e:b9:62:e5:af:64:b9:be:01:8e:31:88:88:06:5b: 00:ce:b9:83:a0:fc:b1:5f:b8:09:82:f9:6d:f6:70:32:91:8f: 0a:0c:b8:97:b4:2f:ed:da:74:3d:24:1b:48:87:99:d3:55:7b: fc:fb:44:92:fd:b0:dd:7a:f4:68:1c:7b:db:fd:0d:ad:7f:e8: 66:e7:05:de:dc:84:f2:27:1b:05:cb:19:5d:ef:ff:fa:22:02: 0a:7e:2d:82:38:b4:ae:44:57:1b:08:2f:6e:02:ea:e4:f4:b6: 79:db:05:56:74:22:12:29:47:6f:18:62:81:a6:2f:df:e4:82: 50:f5:9d:02:e1:6d:f6:b3:d3:d8:9a:5d:00:40:79:58:54:dc: 9c:19:fc:65:75:9c:26:df:c4:ea:26:91:82:b3:29:29:ce:34: 6a:e0:6e:f3:43:e6:0b:6d:9a:9f:9c:9e:12:2e:af:45:c7:d2: 6e:28:2b:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1c6wwHLRL4QL/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk N2UzMjFkNTQtNDhlYy00ZTAwLWFjM2QtNDRmYjZmYzQ2NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeGIzSvUqQoTgkPzuPYJnG3AF7PEbRbPK3wJ gxlMDBaC0aFqegPap6AFguIfoNPgCOxvNCjaxcWrBnZxXRlcC4Pt/s1/9pXhk5H2 ArPQ2BTIIQwZ/3sObRJk6Pmq+0vxSTpP2BS4RWqEDIPQY3o8rw9xT0nYXfVTGMQj IUiup2ZScIqETyeeNnZx/7yEXIFtaFfXT1gnVYhk7kxPF70FIPgvOXigLvC8RiIw wxvmw7at/s+JXOxwqq73p/sE1WUIWSafQh99M+gv4arKEE+W8B5DFalxJ7demGRW rIZ7fCIFH4W3Zfila2p1LcFaWWV3NHh6SOd7eX6YsJO7MhQnTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBARsnya9wwFKlTh9Hk2CePv/NZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI2MzEzOTItYTU4MC0z NDMyLTk4YzgtMmI2NTc2NTQ0NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAE43uJw8Dt/F4/bqiqG5vxY7YeWLNAlQwYggvudU2XgXLcm6HoSlIr ZkZtIpcpthXDdFBhDijxBRVPIT8CqHhFOBP+6CJ7fNYTXP4OuWLlr2S5vgGOMYiI BlsAzrmDoPyxX7gJgvlt9nAykY8KDLiXtC/t2nQ9JBtIh5nTVXv8+0SS/bDdevRo HHvb/Q2tf+hm5wXe3ITyJxsFyxld7//6IgIKfi2COLSuRFcbCC9uAurk9LZ52wVW dCISKUdvGGKBpi/f5IJQ9Z0C4W32s9PYml0AQHlYVNycGfxldZwm38TqJpGCsykp zjRq4G7zQ+YLbZqfnJ4SLq9Fx9JuKCtJ -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:06 2024 by rpki-client on console-ams.rpki-client.org