$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa File: 47726de3-e3d9-30ae-85d4-452d8d428980.roa (raw, json) Hash identifier: eMdZS1Ftt2tEu4Z11kBaK3Mlxm35A4v1f275dBaYspY= Subject key identifier: B4:65:15:4D:EE:84:EA:0F:5D:2C:A4:5C:D1:6C:F3:78:75:78:08:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5CF9EC03F6314DD6C4880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 396571 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:cf:9e:c0:3f:63:14:dd:6c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=1f53f75e-e109-43fe-9670-33604cd65d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:2d:ac:95:85:52:7d:37:03:48:a7:07:79: 1e:d7:05:7d:25:9c:ba:04:f2:5b:53:85:fd:66:31: f4:80:aa:d5:92:6b:4d:52:f1:5b:0d:e8:88:1e:05: 9c:c8:79:d8:3a:3b:ec:63:0f:90:b3:54:d9:a1:a2: 15:de:34:df:43:ed:87:61:d4:1d:74:44:cb:bf:8b: 66:c4:c9:70:43:f8:e7:4d:64:b3:e9:f4:66:5b:97: af:04:89:af:8f:51:61:e7:d0:42:da:58:b4:d7:77: 36:d8:43:5b:1f:6a:8d:e6:25:87:44:90:b3:9d:1b: f3:4d:39:68:e7:80:8a:da:30:27:23:4e:4b:20:f9: 31:8c:1b:61:2b:e4:87:46:1b:f5:f3:57:26:f2:5f: db:d3:5e:eb:52:21:72:06:c5:ff:b2:7e:09:7c:ee: f6:15:10:7e:84:d2:17:cf:34:e5:a6:b1:0f:a0:a8: e8:30:d1:90:43:09:41:ea:1f:e6:2e:50:62:5d:2b: 8a:0c:10:dc:a5:ba:72:4b:50:fd:c2:4d:92:59:cc: 72:38:40:35:ec:d8:12:48:08:96:a3:ed:0a:a3:5c: 3d:a8:a9:53:f7:30:60:3a:fd:e5:59:fd:09:6e:73: 35:47:7a:6f:46:0a:79:2a:69:c3:bf:78:7f:d3:d4: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:15:4D:EE:84:EA:0F:5D:2C:A4:5C:D1:6C:F3:78:75:78:08:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f6:3a:40:50:92:89:9e:ed:a7:6f:d3:f6:31:75:7d:7c:48: 43:d5:2a:67:ef:9e:ee:fd:2d:7e:e5:f5:fd:87:1f:c6:52:f3: 96:40:91:ee:70:1c:33:8d:28:d6:bb:fd:ae:52:36:54:6a:b0: 27:58:34:ce:7c:6a:32:bf:76:4c:ef:99:64:de:76:64:9f:60: 2d:3f:a8:f0:6a:c0:93:4a:34:f3:41:4a:ee:69:14:21:78:61: 6e:37:ad:a0:02:5a:91:7d:dd:9b:f1:05:6e:36:56:56:57:22: 25:a8:1d:b1:eb:93:dc:33:ba:16:b0:ea:d8:3a:ad:73:21:d5: f4:9d:01:00:e7:f3:58:bb:f0:94:4c:26:ab:13:34:f8:65:b3: 80:ed:ae:7a:92:a4:21:da:10:56:fa:22:86:c7:65:6b:65:a4: 6c:4b:a9:67:d2:1f:40:ef:18:88:28:ee:6b:2b:ab:4b:9c:6e: d8:3b:18:51:13:ed:08:4a:81:a4:8e:48:8b:c2:f5:d1:03:bb: 0c:09:63:be:61:ba:3b:68:ac:b5:f7:99:46:bf:09:2b:51:49: 29:36:fa:b5:4d:14:6d:91:94:e5:46:0a:71:5e:e1:4a:e6:6f: b6:09:be:aa:b3:a3:b3:46:78:47:32:ba:f5:6e:23:14:6d:f2: 6a:eb:47:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1c+ewD9jFN1sSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MWY1M2Y3NWUtZTEwOS00M2ZlLTk2NzAtMzM2MDRjZDY1ZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn60trJWFUn03A0inB3ke1wV9JZy6BPJbU4X9 ZjH0gKrVkmtNUvFbDeiIHgWcyHnYOjvsYw+Qs1TZoaIV3jTfQ+2HYdQddETLv4tm xMlwQ/jnTWSz6fRmW5evBImvj1Fh59BC2li013c22ENbH2qN5iWHRJCznRvzTTlo 54CK2jAnI05LIPkxjBthK+SHRhv181cm8l/b017rUiFyBsX/sn4JfO72FRB+hNIX zzTlprEPoKjoMNGQQwlB6h/mLlBiXSuKDBDcpbpyS1D9wk2SWcxyOEA17NgSSAiW o+0Ko1w9qKlT9zBgOv3lWf0JbnM1R3pvRgp5KmnDv3h/09RDywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLRlFU3uhOoPXSykXNFs83h1eAgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc3MjZkZTMtZTNkOS0z MGFlLTg1ZDQtNDUyZDhkNDI4OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBN9jpAUJKJnu2nb9P2MXV9fEhD1Spn757u/S1+5fX9hx/GUvOWQJHu cBwzjSjWu/2uUjZUarAnWDTOfGoyv3ZM75lk3nZkn2AtP6jwasCTSjTzQUruaRQh eGFuN62gAlqRfd2b8QVuNlZWVyIlqB2x65PcM7oWsOrYOq1zIdX0nQEA5/NYu/CU TCarEzT4ZbOA7a56kqQh2hBW+iKGx2VrZaRsS6ln0h9A7xiIKO5rK6tLnG7YOxhR E+0ISoGkjkiLwvXRA7sMCWO+Ybo7aKy195lGvwkrUUkpNvq1TRRtkZTlRgpxXuFK 5m+2Cb6qs6OzRnhHMrr1biMUbfJq60fA -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:12 2024 by rpki-client on console-ams.rpki-client.org