$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44e848d0-8fb6-313a-a967-66bcb530b0d4.roa File: 44e848d0-8fb6-313a-a967-66bcb530b0d4.roa (raw, json) Hash identifier: 9g7/Ef48X3gPvMbnVgkfBy7wxZzx7JLVlSQJamt43+c= Subject key identifier: A8:24:35:AA:FC:3E:1D:9C:82:FF:20:82:D0:2F:AA:1F:4E:14:83:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D504885971ED0894FD3E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44e848d0-8fb6-313a-a967-66bcb530b0d4.roa Signing time: Tue 19 Nov 2024 13:34:50 +0000 ROA not before: Tue 19 Nov 2024 13:34:50 +0000 ROA not after: Mon 17 Feb 2025 13:34:50 +0000 asID: 396577 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:50:48:85:97:1e:d0:89:4f:d3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:50 2024 GMT Not After : Feb 17 13:34:50 2025 GMT Subject: CN=40ee07fc-5045-4ab1-ac33-6f5137a0477d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:8b:d8:04:65:78:48:d8:d7:e7:87:32:6e: 4c:af:f6:96:a6:c4:57:01:1a:4e:55:e7:51:84:89: d1:99:e6:aa:e3:67:db:7e:e5:fc:4f:85:d6:77:06: de:37:61:94:34:d2:cd:26:04:dc:4a:e0:cf:c1:50: 27:92:59:66:b7:86:51:06:6b:d0:5f:fb:5b:0a:c3: 83:6c:8b:77:74:be:84:4d:83:dd:ff:4e:32:ea:0b: 39:ef:d7:2d:5c:a1:67:c2:59:2f:a3:5f:9e:25:9a: b9:9d:6d:0f:94:3f:28:b5:04:15:e1:7a:4d:a9:05: 1e:5d:ed:c6:f2:30:d1:7a:7d:e1:73:2f:88:6d:89: d1:85:be:8c:07:a7:b2:59:97:35:5d:83:c1:63:0b: 67:e8:f1:d8:b6:96:2a:0f:c2:04:15:70:a8:fc:1c: 72:31:d2:45:91:de:f7:71:81:eb:f1:63:4e:ac:ac: 77:c3:66:cb:f0:6c:8c:f0:3b:03:46:84:9c:92:c0: d5:cf:ee:51:fa:4e:c1:f7:b5:77:ad:bd:b2:c0:dc: d4:f3:bc:7a:d7:1d:66:7b:cd:bd:fb:61:9b:a0:98: 43:bf:5d:9e:53:27:55:f5:88:e0:f6:41:4e:1b:3b: 1a:54:25:17:3b:6f:d9:da:2d:b1:7e:2e:1f:49:11: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:24:35:AA:FC:3E:1D:9C:82:FF:20:82:D0:2F:AA:1F:4E:14:83:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44e848d0-8fb6-313a-a967-66bcb530b0d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b5:cf:22:d5:9f:f6:d2:97:47:c1:60:03:ae:2b:c7:6d:02: 1d:00:d1:42:4a:bc:dd:6c:e9:8f:d2:d3:54:b3:2d:71:8b:57: 25:62:36:98:32:bb:58:32:0c:8c:bc:f8:43:cc:1f:a6:e3:cd: 58:ea:b1:b4:de:1a:2a:90:7c:5a:78:21:9f:cd:b8:c4:a8:3e: 78:ce:93:e7:c8:65:fb:c6:e5:2e:55:c9:38:ee:9e:2e:b8:ba: f8:1c:42:e2:47:df:99:5e:6f:c0:31:d9:fe:f4:8b:91:84:1c: 2b:b6:4b:42:a4:09:9a:22:02:a6:92:82:6b:c8:af:1e:be:b4: 8b:42:fb:69:28:9d:64:04:0a:54:8c:97:d9:36:3e:26:db:41: 9f:05:c8:28:1a:30:bb:94:f7:47:5e:e9:a6:0d:41:70:77:ee: 9e:12:7b:6d:48:59:92:dc:b6:db:26:37:06:b5:79:f3:b4:a9: 84:71:18:c0:9a:29:85:28:3e:58:2c:92:cd:8b:7b:60:f1:ed: ed:09:72:c7:6a:a7:24:8f:2f:4a:eb:9a:d5:9a:9a:b7:bf:68: ba:0d:72:e0:70:d8:69:6e:76:fc:15:09:73:07:d8:3d:01:62: 82:2c:15:c4:de:cd:70:52:69:46:39:32:d4:82:86:9b:64:a9: 86:6f:c9:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVBIhZce0IlP0+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk NDBlZTA3ZmMtNTA0NS00YWIxLWFjMzMtNmY1MTM3YTA0NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdyL2ARleEjY1+eHMm5Mr/aWpsRXARpOVedR hInRmeaq42fbfuX8T4XWdwbeN2GUNNLNJgTcSuDPwVAnkllmt4ZRBmvQX/tbCsOD bIt3dL6ETYPd/04y6gs579ctXKFnwlkvo1+eJZq5nW0PlD8otQQV4XpNqQUeXe3G 8jDRen3hcy+IbYnRhb6MB6eyWZc1XYPBYwtn6PHYtpYqD8IEFXCo/BxyMdJFkd73 cYHr8WNOrKx3w2bL8GyM8DsDRoScksDVz+5R+k7B97V3rb2ywNzU87x61x1me829 +2GboJhDv12eUydV9Yjg9kFOGzsaVCUXO2/Z2i2xfi4fSRGxYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKgkNar8Ph2cgv8ggtAvqh9OFIN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDRlODQ4ZDAtOGZiNi0z MTNhLWE5NjctNjZiY2I1MzBiMGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5tc8i1Z/20pdHwWADrivHbQIdANFCSrzdbOmP0tNUsy1xi1clYjaY MrtYMgyMvPhDzB+m481Y6rG03hoqkHxaeCGfzbjEqD54zpPnyGX7xuUuVck47p4u uLr4HELiR9+ZXm/AMdn+9IuRhBwrtktCpAmaIgKmkoJryK8evrSLQvtpKJ1kBApU jJfZNj4m20GfBcgoGjC7lPdHXummDUFwd+6eEnttSFmS3LbbJjcGtXnztKmEcRjA mimFKD5YLJLNi3tg8e3tCXLHaqckjy9K65rVmpq3v2i6DXLgcNhpbnb8FQlzB9g9 AWKCLBXE3s1wUmlGOTLUgoabZKmGb8nc -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:33 2024 by rpki-client on console-fra.rpki-client.org