$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa File: 3635bacf-d73e-3f47-8a82-a8a92a109fac.roa (raw, json) Hash identifier: KMHeKK7E7bOkFcS8xEiQK2cZNl8U87giPBLTFJuJmYE= Subject key identifier: 85:4F:75:83:5F:4B:59:EB:F1:91:F2:9E:14:A3:5D:A6:47:9F:7E:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5D2845DE5C840FB891780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 396613 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:d2:84:5d:e5:c8:40:fb:89:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=b4503b8a-949e-4e80-b0e9-7f2c442f08d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:40:f5:bc:21:f6:ee:4c:5c:5e:8c:99:1b: 09:b6:2f:8e:a9:c2:d6:58:16:5a:cd:03:d1:e8:d0: 79:78:1e:47:c2:77:b9:13:05:2b:c8:7a:99:d0:7b: da:26:8b:da:cc:f6:ae:e1:63:43:ab:26:f7:d6:c3: 3c:94:04:87:29:e1:3c:b8:94:52:2e:46:87:d7:b4: 10:07:a1:b9:35:74:c0:ba:02:5c:e3:72:e0:b2:50: 69:ae:eb:cd:dc:4e:21:9d:1d:0e:5d:35:58:64:dc: df:1d:7a:43:29:3a:22:a3:28:ef:6c:1a:cc:5f:bd: 42:d2:77:4a:7b:e1:81:64:70:6e:ed:b7:41:c4:99: 85:66:4f:d6:1b:d8:fa:7a:67:80:10:92:b2:f7:07: fa:65:ff:71:81:e0:1b:92:8f:b8:63:55:a6:f1:f6: 7d:b0:3f:1d:8c:23:c1:cb:38:d5:42:3e:b2:b6:d6: e6:32:13:66:68:d9:01:22:a3:16:3e:39:6f:c4:77: bc:7f:65:7f:2c:7f:03:02:4f:05:36:ad:17:f6:ff: 02:88:c8:e6:50:1d:82:ac:f6:ce:5c:59:ee:d3:47: 1f:8a:21:3c:ad:3e:ec:45:44:e0:4e:51:ae:0f:38: 5f:2c:c9:64:66:4b:86:b4:ff:1a:f9:3f:29:81:c5: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:75:83:5F:4B:59:EB:F1:91:F2:9E:14:A3:5D:A6:47:9F:7E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8d:23:7e:81:79:36:4a:b4:69:41:48:ce:4e:a6:bf:b6:58: a9:69:4e:4b:9e:0b:80:d8:b1:92:79:a0:f5:fa:90:fc:b5:0f: 36:95:c5:1d:28:cc:d7:39:e3:ca:53:8b:24:9c:d1:ba:50:13: ae:cc:af:86:6c:6b:c6:f4:71:62:44:33:85:a7:d8:82:00:59: ef:91:83:ad:9d:8f:7e:e3:ef:51:53:0b:7c:28:1a:0a:cf:ea: f8:3c:ac:bf:82:da:b5:df:4a:27:90:cd:30:17:d9:0a:4d:c1: d7:11:56:68:33:71:77:14:e7:f9:2f:8c:2c:8d:7e:89:c2:ef: 36:86:e4:8e:aa:8b:33:30:34:dc:b1:a1:d7:4e:16:a0:01:0e: f3:85:fc:66:33:a2:72:01:06:ff:22:6e:0f:8d:71:8f:13:72: ec:35:6d:07:52:2e:b0:04:4d:f9:8b:38:4c:75:2f:52:68:d4: 1d:b6:84:fb:4e:65:60:b1:ff:d4:c7:e5:f3:bc:d5:e9:6e:e2: 13:f9:69:cf:40:0c:b9:b5:9d:7b:af:19:ce:e9:b8:71:45:e2: ff:7c:fe:81:10:3b:13:e9:0a:13:95:7d:2e:3e:12:99:ee:ee: e7:1c:d8:5c:b0:68:77:1e:9f:3e:88:e1:5e:66:40:fa:95:8e: 9d:3a:ec:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dKEXeXIQPuJF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjQ1MDNiOGEtOTQ5ZS00ZTgwLWIwZTktN2YyYzQ0MmYwOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjNA9bwh9u5MXF6MmRsJti+OqcLWWBZazQPR 6NB5eB5Hwne5EwUryHqZ0HvaJovazPau4WNDqyb31sM8lASHKeE8uJRSLkaH17QQ B6G5NXTAugJc43LgslBpruvN3E4hnR0OXTVYZNzfHXpDKToioyjvbBrMX71C0ndK e+GBZHBu7bdBxJmFZk/WG9j6emeAEJKy9wf6Zf9xgeAbko+4Y1Wm8fZ9sD8djCPB yzjVQj6yttbmMhNmaNkBIqMWPjlvxHe8f2V/LH8DAk8FNq0X9v8CiMjmUB2CrPbO XFnu00cfiiE8rT7sRUTgTlGuDzhfLMlkZkuGtP8a+T8pgcWbywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIVPdYNfS1nr8ZHynhSjXaZHn35HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzYzNWJhY2YtZDczZS0z ZjQ3LThhODItYThhOTJhMTA5ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPjSN+gXk2SrRpQUjOTqa/tlipaU5LnguA2LGSeaD1+pD8tQ82lcUd KMzXOePKU4sknNG6UBOuzK+GbGvG9HFiRDOFp9iCAFnvkYOtnY9+4+9RUwt8KBoK z+r4PKy/gtq130onkM0wF9kKTcHXEVZoM3F3FOf5L4wsjX6Jwu82huSOqoszMDTc saHXThagAQ7zhfxmM6JyAQb/Im4PjXGPE3LsNW0HUi6wBE35izhMdS9SaNQdtoT7 TmVgsf/Ux+XzvNXpbuIT+WnPQAy5tZ17rxnO6bhxReL/fP6BEDsT6QoTlX0uPhKZ 7u7nHNhcsGh3Hp8+iOFeZkD6lY6dOuwX -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:10 2024 by rpki-client on console-ams.rpki-client.org