$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa File: 36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa (raw, json) Hash identifier: btN3GmqtXWYmBbu8uPrwB5QL0ENekajq5zzCsmafpNE= Subject key identifier: FB:8C:51:33:2B:2A:53:32:EB:16:9B:A2:CE:69:F9:31:00:D9:C5:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D500F0CFD92B92FA0D718 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa Signing time: Tue 19 Nov 2024 13:34:50 +0000 ROA not before: Tue 19 Nov 2024 13:34:50 +0000 ROA not after: Mon 17 Feb 2025 13:34:50 +0000 asID: 397199 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:50:0f:0c:fd:92:b9:2f:a0:d7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:50 2024 GMT Not After : Feb 17 13:34:50 2025 GMT Subject: CN=d22556ed-ed81-42cc-b165-b8a3088c0f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:52:2f:26:3d:72:1b:4c:c3:e8:b6:c8:0b: 9d:67:27:d6:a2:ff:b7:2c:dc:6c:bf:3c:ee:9b:bb: 26:26:a8:c9:6d:e9:7d:1f:0e:af:bf:d7:71:2a:0a: f2:51:2a:02:79:d1:f0:d6:77:fb:64:50:c7:bc:88: a9:6c:6b:d1:1c:5b:ba:33:c0:be:0b:2a:95:44:6f: 93:e8:81:b9:3d:6b:80:19:a7:f9:08:c7:f1:ca:3f: f8:17:1e:c2:fa:53:0c:61:ad:6f:d7:5d:0e:90:d7: d6:0d:1c:dc:e5:12:c2:44:03:ef:63:17:9b:33:a6: ba:2a:b9:ff:e2:11:6f:5b:f4:c4:a1:05:84:69:03: a0:0b:16:4a:52:73:4b:a6:16:b8:f9:70:45:1c:28: 00:f9:ed:c0:03:c8:7e:2e:bc:96:69:86:68:a2:0f: 8f:c5:41:59:0d:cb:24:4c:ea:09:a7:e0:b3:9e:ce: 1d:74:80:bf:ee:d3:34:f6:06:46:00:2c:1a:7e:fd: 4f:2b:b1:da:5c:db:2b:27:2b:0f:9a:bf:1c:2b:cf: b1:fd:ce:d5:bd:0c:b5:f3:67:46:09:c0:51:c4:0b: 43:73:73:0c:46:58:1b:ea:b9:35:04:8b:b9:31:3b: 80:64:e0:ba:f0:c4:74:39:91:af:d3:72:07:19:0d: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8C:51:33:2B:2A:53:32:EB:16:9B:A2:CE:69:F9:31:00:D9:C5:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:cd:4d:a1:e1:7f:32:af:62:74:24:05:01:4a:70:ff:14:10: 16:ba:5f:76:91:29:36:26:a8:24:d9:5c:59:ec:9d:68:0a:ef: 16:19:d0:d1:91:42:cd:2c:17:f0:15:ac:b8:e8:94:16:34:cf: 3b:76:98:09:a7:e0:fc:43:c2:36:be:2f:b2:b6:c0:b9:5c:4e: 66:2d:d5:72:19:2f:54:a7:9e:be:88:ee:40:fd:09:f4:7c:73: 40:10:16:d2:c9:d4:22:73:fb:30:a9:64:98:87:ff:f1:61:1d: ed:58:1f:4e:e4:f6:35:91:01:1e:92:6f:66:c5:31:61:06:d4: 28:c3:1d:71:f2:08:4a:e6:b6:db:a6:09:35:ee:91:31:73:cd: 90:26:84:22:3f:5f:12:6f:ae:67:5e:c1:d8:4b:67:c1:6f:6d: 0a:c6:83:b0:5e:8e:cb:c9:ae:9f:b3:c4:8b:96:c0:e3:93:01: cc:0f:1a:85:9e:6b:35:f6:7c:a8:65:84:4e:e0:95:23:42:2d: 4c:6e:85:14:0a:f6:14:08:34:43:25:30:7d:58:2c:32:98:ce: 5a:d2:6e:66:d5:90:1a:f4:aa:f8:be:1b:d5:09:6c:a1:53:6c: bc:ae:37:b8:40:97:e6:27:37:f3:6c:7f:73:e5:6e:69:c0:fb: 01:ed:c4:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVAPDP2SuS+g1xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk ZDIyNTU2ZWQtZWQ4MS00MmNjLWIxNjUtYjhhMzA4OGMwZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0RSLyY9chtMw+i2yAudZyfWov+3LNxsvzzu m7smJqjJbel9Hw6vv9dxKgryUSoCedHw1nf7ZFDHvIipbGvRHFu6M8C+CyqVRG+T 6IG5PWuAGaf5CMfxyj/4Fx7C+lMMYa1v110OkNfWDRzc5RLCRAPvYxebM6a6Krn/ 4hFvW/TEoQWEaQOgCxZKUnNLpha4+XBFHCgA+e3AA8h+LryWaYZoog+PxUFZDcsk TOoJp+Czns4ddIC/7tM09gZGACwafv1PK7HaXNsrJysPmr8cK8+x/c7VvQy182dG CcBRxAtDc3MMRlgb6rk1BIu5MTuAZOC68MR0OZGv03IHGQ0AywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPuMUTMrKlMy6xabos5p+TEA2cUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY4ODdiOWQtZjFhMC0z MWFkLWE1ZmEtMTUxYzg4YjY0ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZzU2h4X8yr2J0JAUBSnD/FBAWul92kSk2Jqgk2VxZ7J1oCu8WGdDR kULNLBfwFay46JQWNM87dpgJp+D8Q8I2vi+ytsC5XE5mLdVyGS9Up56+iO5A/Qn0 fHNAEBbSydQic/swqWSYh//xYR3tWB9O5PY1kQEekm9mxTFhBtQowx1x8ghK5rbb pgk17pExc82QJoQiP18Sb65nXsHYS2fBb20KxoOwXo7Lya6fs8SLlsDjkwHMDxqF nms19nyoZYRO4JUjQi1MboUUCvYUCDRDJTB9WCwymM5a0m5m1ZAa9Kr4vhvVCWyh U2y8rje4QJfmJzfzbH9z5W5pwPsB7cRJ -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:33 2024 by rpki-client on console-fra.rpki-client.org