$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a2f965-996f-37f6-ad25-b2988a8d603b.roa File: 11a2f965-996f-37f6-ad25-b2988a8d603b.roa (raw, json) Hash identifier: 9+N9lVq4dGOAZQ16hU3wlX+8LhJzkzotyVd6nmH/NGc= Subject key identifier: 3A:52:A7:48:B6:54:1B:D7:6C:C4:D3:64:7F:19:29:B1:D7:BD:FE:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D52225505BB51658EEBC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a2f965-996f-37f6-ad25-b2988a8d603b.roa Signing time: Tue 19 Nov 2024 13:34:51 +0000 ROA not before: Tue 19 Nov 2024 13:34:51 +0000 ROA not after: Mon 17 Feb 2025 13:34:51 +0000 asID: 396547 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:52:22:55:05:bb:51:65:8e:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:51 2024 GMT Not After : Feb 17 13:34:51 2025 GMT Subject: CN=a0da05cf-c540-4450-9bca-e67f3e5e36ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:87:2c:79:b6:78:4d:d1:ab:49:14:bd:ec: 5f:f1:f1:93:1d:58:b8:b8:8b:e4:de:fc:87:5d:9f: 72:30:b7:7e:ca:0c:37:31:ef:20:eb:aa:c5:8f:72: d1:92:4e:32:12:b6:70:3b:47:be:61:bb:50:f1:cb: e9:21:2e:2c:f8:52:6c:fd:9e:2c:e1:74:7f:5b:c9: c2:62:c3:51:c1:fe:f1:aa:59:07:9d:1d:7c:8e:c9: c2:e7:3d:56:70:dd:77:5d:16:52:32:bd:57:4a:aa: af:1c:e7:89:09:de:91:21:93:f6:1f:30:d5:b4:7a: 77:ad:8e:40:da:8c:13:c2:0d:b6:b5:e8:54:ee:3a: 40:d5:bc:ba:59:e0:19:12:40:e9:1b:c7:00:dc:a6: ed:53:18:41:2c:62:ca:4d:d2:0c:76:ac:56:14:a4: 52:2d:94:d1:f9:e6:10:7b:33:0a:46:22:c2:dc:95: b3:7e:2b:f8:7f:47:ec:a2:c5:fe:a1:ae:0f:fd:39: ea:76:ec:2f:4e:6b:78:8d:7f:5c:c0:98:b3:ae:78: f1:0a:a7:70:eb:e0:2c:93:61:b6:e8:da:fa:a0:2b: 8b:76:46:16:54:92:13:c2:27:9d:8b:46:f3:f7:53: 37:0e:e5:3a:7c:76:31:f0:3d:e3:4e:4f:1c:0d:5f: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:52:A7:48:B6:54:1B:D7:6C:C4:D3:64:7F:19:29:B1:D7:BD:FE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a2f965-996f-37f6-ad25-b2988a8d603b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f7:11:12:68:f3:52:a1:9c:dd:c2:fc:0f:01:c3:87:ab:e8: 23:cf:37:8e:3d:fb:d3:83:77:33:68:04:fe:1a:c5:63:b4:f6: 7f:1d:f4:42:8b:d6:35:f8:bf:bb:16:8a:f4:69:25:be:e9:e7: dc:bc:b8:85:89:7c:71:c4:22:de:3e:db:58:ea:4e:7b:8d:57: ca:87:7c:ef:91:39:65:95:9b:dc:6b:b2:53:ed:a5:65:8a:d1: 1d:25:43:8e:b5:65:37:89:7a:0c:31:c7:80:6b:24:ae:c5:44: 02:af:97:93:1c:30:a2:58:2b:8f:ad:e0:f2:04:0b:6f:a4:5e: 0e:a5:6c:92:30:3c:da:e1:b6:b4:e2:37:4b:d8:1d:d7:54:43: 3d:d2:50:c3:f4:1d:5d:af:19:fc:99:5b:3d:8b:02:3f:80:ce: 41:31:80:2e:a8:2e:4c:ce:e4:c6:97:f1:93:25:71:13:41:10: be:2e:45:16:a2:58:98:73:c6:15:8f:70:e6:de:fb:0f:62:a2: b0:4a:56:1e:52:3d:fd:42:d2:c5:68:1b:5e:da:45:34:f2:d0: 5e:38:fa:c1:9e:b0:fe:3d:f8:2d:0f:17:24:db:24:b9:08:80: 20:5d:67:ad:ab:79:c6:1b:20:28:f6:47:d7:68:44:f7:f2:74: 88:38:33:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVIiVQW7UWWO68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MVoXDTI1MDIxNzEzMzQ1MVowLzEtMCsGA1UEAxMk YTBkYTA1Y2YtYzU0MC00NDUwLTliY2EtZTY3ZjNlNWUzNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArumHLHm2eE3Rq0kUvexf8fGTHVi4uIvk3vyH XZ9yMLd+ygw3Me8g66rFj3LRkk4yErZwO0e+YbtQ8cvpIS4s+FJs/Z4s4XR/W8nC YsNRwf7xqlkHnR18jsnC5z1WcN13XRZSMr1XSqqvHOeJCd6RIZP2HzDVtHp3rY5A 2owTwg22tehU7jpA1by6WeAZEkDpG8cA3KbtUxhBLGLKTdIMdqxWFKRSLZTR+eYQ ezMKRiLC3JWzfiv4f0fsosX+oa4P/TnqduwvTmt4jX9cwJizrnjxCqdw6+Ask2G2 6Nr6oCuLdkYWVJITwiedi0bz91M3DuU6fHYx8D3jTk8cDV/U7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDpSp0i2VBvXbMTTZH8ZKbHXvf6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTFhMmY5NjUtOTk2Zi0z N2Y2LWFkMjUtYjI5ODhhOGQ2MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAW9xESaPNSoZzdwvwPAcOHq+gjzzeOPfvTg3czaAT+GsVjtPZ/HfRC i9Y1+L+7For0aSW+6efcvLiFiXxxxCLePttY6k57jVfKh3zvkTlllZvca7JT7aVl itEdJUOOtWU3iXoMMceAaySuxUQCr5eTHDCiWCuPreDyBAtvpF4OpWySMDza4ba0 4jdL2B3XVEM90lDD9B1drxn8mVs9iwI/gM5BMYAuqC5MzuTGl/GTJXETQRC+LkUW oliYc8YVj3Dm3vsPYqKwSlYeUj39QtLFaBte2kU08tBeOPrBnrD+PfgtDxck2yS5 CIAgXWetq3nGGyAo9kfXaET38nSIODPG -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:07 2024 by rpki-client on console-ams.rpki-client.org