$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa File: 4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa (raw, json) Hash identifier: n3nFVzDnZb00IV8BUzUd7sgdGHua8j/+c1LC6YU6tQw= Subject key identifier: 01:CC:D8:87:9A:DB:83:1C:1E:97:FA:45:C2:47:CC:CA:AE:EB:92:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5D27301B4661909E77180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 396543 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:d2:73:01:b4:66:19:09:e7:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=28e8a799-04d3-402d-bac7-5bc96f29d634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:4c:c8:99:2e:b2:ff:b1:0e:ab:e6:99:71: dc:b6:04:9c:2e:e7:3d:01:a7:c1:1f:5b:47:26:98: 1f:39:77:f3:cb:26:c8:0c:88:f4:25:3a:5d:67:7e: 08:8f:1c:92:f6:34:2b:a2:c3:08:6d:be:0c:8b:25: 3a:e7:60:15:d6:76:29:d6:10:c6:98:97:df:c9:a5: 2a:19:5a:ec:49:0f:54:3a:2c:e7:74:a8:12:43:10: 09:1e:e6:2c:e0:bc:b8:e1:9d:9a:c1:7f:27:ca:83: ad:12:f3:8f:47:97:cd:ab:04:1d:1b:60:78:6f:78: 2e:62:28:84:4f:92:9a:f4:7f:81:0b:cc:27:0f:22: c1:c5:57:f5:6c:f9:8d:7e:49:be:ea:e5:a2:6b:b7: b8:83:04:00:0f:5b:99:4b:9f:f8:5b:b0:ce:92:57: 68:69:e8:6d:e1:2b:9b:66:0d:b1:32:98:f4:37:3f: 32:60:73:e0:4a:dc:5a:b2:52:71:1e:43:5c:6a:e6: 17:73:88:fd:26:4a:dc:31:4d:fd:66:87:4a:db:0b: 31:0e:75:f2:fa:74:1a:8f:19:6e:e5:f2:1a:8a:73: 0b:ce:a6:99:60:a0:af:1e:90:b6:d3:df:d1:7c:58: 8b:4c:4f:3d:e9:40:0d:aa:ed:31:97:1f:a4:e8:f4: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CC:D8:87:9A:DB:83:1C:1E:97:FA:45:C2:47:CC:CA:AE:EB:92:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0a:19:51:33:70:a3:5c:98:5f:04:8a:2b:7a:38:7e:97:06: 5b:01:42:e9:80:23:2a:65:98:07:5a:83:14:55:f8:39:a2:11: fc:69:60:23:f9:40:27:8d:de:17:67:a4:27:dd:91:0c:2e:cd: c7:61:cd:ff:53:cb:42:9a:fe:64:0f:a2:a9:90:3b:91:7f:87: ed:bd:45:6f:fd:63:42:a6:a7:87:81:1c:f6:f1:3e:40:14:6a: 97:d0:e7:17:46:cc:22:36:bd:94:7f:59:cf:aa:1c:ff:58:e3: 50:3b:62:b7:37:60:a7:b8:a7:29:64:70:b6:71:72:4d:e0:4d: e3:22:cc:b4:67:0c:d1:25:a1:3b:dd:24:4e:19:0d:bf:58:f0: 77:3f:c1:c3:fe:cf:a0:f5:ab:17:4e:85:8b:24:c3:b0:ee:8a: 84:e2:81:61:0e:e7:f5:80:5c:8a:88:87:6e:71:30:f3:e0:9b: 0d:8d:cf:ea:e7:43:a0:46:db:9f:bc:58:b9:cd:69:e3:f7:66: d4:ea:3e:dd:cc:28:6f:ee:dd:24:81:68:84:12:d6:30:10:9f: f5:c5:71:8d:d8:f8:34:25:1a:ce:eb:98:1d:3d:a2:da:f0:7b: b3:09:e3:ad:55:74:d0:fa:28:9f:fe:59:a6:7b:ec:cc:c9:b8: 5e:bb:06:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dJzAbRmGQnncYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MjhlOGE3OTktMDRkMy00MDJkLWJhYzctNWJjOTZmMjlkNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueJMyJkusv+xDqvmmXHctgScLuc9AafBH1tH JpgfOXfzyybIDIj0JTpdZ34IjxyS9jQrosMIbb4MiyU652AV1nYp1hDGmJffyaUq GVrsSQ9UOizndKgSQxAJHuYs4Ly44Z2awX8nyoOtEvOPR5fNqwQdG2B4b3guYiiE T5Ka9H+BC8wnDyLBxVf1bPmNfkm+6uWia7e4gwQAD1uZS5/4W7DOkldoaeht4Sub Zg2xMpj0Nz8yYHPgStxaslJxHkNcauYXc4j9JkrcMU39ZodK2wsxDnXy+nQajxlu 5fIainMLzqaZYKCvHpC209/RfFiLTE896UANqu0xlx+k6PTTQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAHM2Iea24McHpf6RcJHzMqu65KbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGUwMGEwYTItZGU5OC0z ZDM1LWI3NDgtNGZjODFiMzMzZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZChlRM3CjXJhfBIorejh+lwZbAULpgCMqZZgHWoMUVfg5ohH8aWAj +UAnjd4XZ6Qn3ZEMLs3HYc3/U8tCmv5kD6KpkDuRf4ftvUVv/WNCpqeHgRz28T5A FGqX0OcXRswiNr2Uf1nPqhz/WONQO2K3N2CnuKcpZHC2cXJN4E3jIsy0ZwzRJaE7 3SROGQ2/WPB3P8HD/s+g9asXToWLJMOw7oqE4oFhDuf1gFyKiIducTDz4JsNjc/q 50OgRtufvFi5zWnj92bU6j7dzChv7t0kgWiEEtYwEJ/1xXGN2Pg0JRrO65gdPaLa 8HuzCeOtVXTQ+iif/lmme+zMybheuwak -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:13 2024 by rpki-client on console-ams.rpki-client.org