$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa File: 0b790125-1c37-32a2-9a6f-6d1917a58a47.roa (raw, json) Hash identifier: XCSIlFuBAW55pt1Tm+1W4B+RotMpePySAg6l8nU7Zlg= Subject key identifier: 34:36:C4:D3:5A:F2:B9:02:5B:34:BA:6A:70:24:AB:CD:B0:0D:B8:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D509EC0D6EE0CFD945400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa Signing time: Tue 19 Nov 2024 13:34:50 +0000 ROA not before: Tue 19 Nov 2024 13:34:50 +0000 ROA not after: Mon 17 Feb 2025 13:34:50 +0000 asID: 396561 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:50:9e:c0:d6:ee:0c:fd:94:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:50 2024 GMT Not After : Feb 17 13:34:50 2025 GMT Subject: CN=6a439633-b4f3-4958-8546-24d02da0328a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:81:a2:07:ba:d5:f4:4d:ae:2b:b3:02:bb:0e: 4a:00:f1:2b:bb:87:27:d1:f5:8c:fe:3f:34:60:21: 88:27:e0:2b:1e:12:b7:00:3e:bf:1e:92:5e:42:27: 5c:2e:05:f6:fe:4c:75:0e:1a:d8:04:9a:48:16:83: 5e:6b:40:e7:0a:b8:8b:87:91:49:2c:54:84:65:b7: a9:8a:89:74:9b:39:03:3d:a9:1a:50:23:24:09:a6: 5e:2b:03:77:00:96:95:7c:19:cf:54:a7:c0:b0:bd: 27:c5:04:8b:3b:ac:a4:ce:48:40:0d:a7:8b:61:0a: e6:21:ed:72:e4:07:fb:16:b4:b4:b3:82:ce:c6:f6: 9a:ba:16:7c:a4:91:75:d4:57:43:55:02:10:59:01: df:3c:45:ef:c3:40:c6:f3:6b:9d:20:1e:cd:04:07: 32:13:d2:1b:cd:eb:39:40:26:e0:99:3a:92:75:cb: 8d:48:98:fa:c7:de:f1:93:6e:9a:b6:37:d4:1d:31: 7b:f8:7c:ac:fb:4e:f1:02:65:b0:0a:d0:1c:ab:a2: 56:e2:88:9f:f2:27:6b:17:b8:32:ea:5b:d8:fc:25: bb:3d:79:93:45:41:70:6f:93:4a:37:4e:cd:ea:ee: a8:4f:f1:1e:59:44:c8:a2:cb:05:b4:70:06:e7:65: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:36:C4:D3:5A:F2:B9:02:5B:34:BA:6A:70:24:AB:CD:B0:0D:B8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b790125-1c37-32a2-9a6f-6d1917a58a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:aa:50:54:6b:7c:0d:e5:ca:ae:60:1f:a8:e1:c6:8d:b7:c0: 86:85:e2:9b:df:ab:46:6c:02:b7:fc:8c:87:57:d5:1c:20:58: 1c:a1:ed:c4:e5:66:03:4d:aa:46:8b:99:4b:ad:64:1d:67:eb: 05:13:29:65:8c:62:0a:28:03:10:c9:98:36:fe:9f:87:30:ee: 9b:ed:4e:69:50:a8:11:86:53:f3:90:43:57:22:58:0f:35:2b: ad:30:40:2a:46:f9:8e:7c:f2:ae:67:17:2f:24:d0:b8:c8:83: 01:e6:db:de:f7:9c:2e:01:9c:3b:cd:2b:e1:89:dc:b4:b8:92: 85:b7:92:e9:3a:11:ed:23:8b:3f:1a:69:53:6b:c4:c5:a4:b4: 06:5d:41:78:f9:c2:fb:3e:f9:00:8c:3a:b7:38:4c:f2:cb:11: b9:8e:b6:e3:b8:95:c9:45:fe:dc:c6:70:8e:53:01:37:ff:ca: 22:c9:3e:6c:d1:96:c9:c5:c2:ab:66:a8:80:e2:0a:39:2b:f4: bb:fe:dd:92:df:30:65:64:fb:b8:35:9f:78:b6:09:9b:e3:56: a2:10:1a:1c:4c:82:11:00:11:2e:5c:4c:07:cd:9e:8e:17:b7: 61:31:69:c8:4c:77:89:82:b8:18:54:a1:b4:7e:97:ca:94:b3: 9e:93:83:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVCewNbuDP2UVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk NmE0Mzk2MzMtYjRmMy00OTU4LTg1NDYtMjRkMDJkYTAzMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIGiB7rV9E2uK7MCuw5KAPEru4cn0fWM/j80 YCGIJ+ArHhK3AD6/HpJeQidcLgX2/kx1DhrYBJpIFoNea0DnCriLh5FJLFSEZbep iol0mzkDPakaUCMkCaZeKwN3AJaVfBnPVKfAsL0nxQSLO6ykzkhADaeLYQrmIe1y 5Af7FrS0s4LOxvaauhZ8pJF11FdDVQIQWQHfPEXvw0DG82udIB7NBAcyE9Ibzes5 QCbgmTqSdcuNSJj6x97xk26atjfUHTF7+Hys+07xAmWwCtAcq6JW4oif8idrF7gy 6lvY/CW7PXmTRUFwb5NKN07N6u6oT/EeWUTIossFtHAG52U3IQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDQ2xNNa8rkCWzS6anAkq82wDbiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI3OTAxMjUtMWMzNy0z MmEyLTlhNmYtNmQxOTE3YTU4YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBqlBUa3wN5cquYB+o4caNt8CGheKb36tGbAK3/IyHV9UcIFgcoe3E 5WYDTapGi5lLrWQdZ+sFEylljGIKKAMQyZg2/p+HMO6b7U5pUKgRhlPzkENXIlgP NSutMEAqRvmOfPKuZxcvJNC4yIMB5tve95wuAZw7zSvhidy0uJKFt5LpOhHtI4s/ GmlTa8TFpLQGXUF4+cL7PvkAjDq3OEzyyxG5jrbjuJXJRf7cxnCOUwE3/8oiyT5s 0ZbJxcKrZqiA4go5K/S7/t2S3zBlZPu4NZ94tgmb41aiEBocTIIRABEuXEwHzZ6O F7dhMWnITHeJgrgYVKG0fpfKlLOek4Nj -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:06 2024 by rpki-client on console-ams.rpki-client.org