$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b13348b-47f8-3122-a15a-1d85ff11537e.roa File: 5b13348b-47f8-3122-a15a-1d85ff11537e.roa (raw, json) Hash identifier: gLSDioJvDAllDqig816kKNbQqfqiwHvbGhawz7JAWW4= Subject key identifier: EA:E3:D6:1E:92:F5:92:29:9E:DA:D6:55:D8:E2:E9:D5:8F:2D:A1:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5CED744C7E8B06DDE0700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b13348b-47f8-3122-a15a-1d85ff11537e.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 40647 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:ce:d7:44:c7:e8:b0:6d:de:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=a0a24762-ad3f-475f-8174-1fd9fb5f4c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:fe:63:12:8b:30:ac:00:37:39:0a:08:c1: 35:31:13:d2:7e:88:fe:f2:de:46:1f:c4:b0:c8:12: 10:13:dd:0b:69:c7:28:50:9f:01:96:6b:16:e0:9c: 2b:a2:1c:0b:c7:0f:e5:07:8d:7b:2d:9f:c9:a9:73: 8f:7a:d9:e2:ed:d2:3c:64:c9:b8:50:61:32:9e:b1: 7e:59:75:a7:56:3e:8f:dc:14:3f:9d:3b:07:89:74: 93:9c:22:3c:d6:2a:c8:ee:41:0f:7c:f9:19:5a:19: e5:34:99:ba:b4:6d:68:b2:b5:28:c5:4b:29:84:f1: cd:da:9e:da:7c:96:84:14:ad:f1:23:27:1a:b3:ac: 1a:a9:66:64:ce:21:1f:cb:e0:bc:9d:a0:6c:24:9f: 5b:2e:5f:65:ac:26:14:ba:a5:fe:cc:b4:2c:e6:e3: 6c:c9:0b:f3:02:11:84:bc:dc:95:13:e4:50:0a:e6: 38:8f:52:f6:9f:ad:da:06:32:38:f3:71:5a:9f:25: be:6c:fd:7a:8e:68:0a:be:df:33:d8:05:e8:e9:57: fd:35:ff:30:7f:87:f3:63:45:4e:22:37:1b:49:79: 37:fe:c5:54:f7:4f:6b:78:5b:b1:f7:b5:06:cb:bb: c8:0a:23:0c:41:ac:58:0e:69:a6:f8:c6:75:07:c2: e3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E3:D6:1E:92:F5:92:29:9E:DA:D6:55:D8:E2:E9:D5:8F:2D:A1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b13348b-47f8-3122-a15a-1d85ff11537e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:20:52:9a:97:8d:6d:af:e9:d0:e4:b4:20:72:e8:0a:b9:b8: 1b:e4:d5:48:55:08:f5:a8:b4:7b:15:16:ca:e8:bb:e9:08:9b: f0:e5:ea:8f:34:ea:d5:66:57:88:85:96:cb:bc:dd:8c:6b:02: dc:60:19:d7:1c:28:38:68:dc:dc:2a:44:7b:36:7d:13:b9:36: 67:0c:79:aa:7b:e2:00:0c:05:9d:e4:50:3f:34:50:94:4b:28: ee:d3:13:5d:94:14:0f:87:44:b9:0e:4d:18:4d:3b:21:a2:cc: 99:6e:a3:e1:5d:ff:1e:6b:87:eb:66:1e:df:99:10:76:ff:ed: fc:42:20:81:6f:14:36:d3:ca:60:9c:11:8e:56:15:fe:7a:a7: 2f:52:5f:e2:cf:1c:c1:19:75:c7:fa:94:64:04:40:fd:99:4f: 8b:47:ef:44:11:94:89:69:ab:75:6d:6e:d6:c3:07:b3:1b:e6: 95:cf:42:5f:99:58:ea:27:36:38:2e:82:05:47:9a:ae:9c:cf: 92:59:ec:a3:80:a6:7a:fc:bc:37:1a:1e:b7:a3:68:34:50:0a: 8b:43:ed:02:d0:1f:73:8f:c7:65:27:d3:25:b2:83:24:a0:2f: 99:30:ce:d0:c3:73:87:90:b8:0b:0a:ae:4c:b7:69:97:d9:6e: 80:4f:26:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1c7XRMfosG3eBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YTBhMjQ3NjItYWQzZi00NzVmLTgxNzQtMWZkOWZiNWY0Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS/+YxKLMKwANzkKCME1MRPSfoj+8t5GH8Sw yBIQE90LaccoUJ8BlmsW4JwrohwLxw/lB417LZ/JqXOPetni7dI8ZMm4UGEynrF+ WXWnVj6P3BQ/nTsHiXSTnCI81irI7kEPfPkZWhnlNJm6tG1osrUoxUsphPHN2p7a fJaEFK3xIycas6waqWZkziEfy+C8naBsJJ9bLl9lrCYUuqX+zLQs5uNsyQvzAhGE vNyVE+RQCuY4j1L2n63aBjI483FanyW+bP16jmgKvt8z2AXo6Vf9Nf8wf4fzY0VO IjcbSXk3/sVU909reFux97UGy7vICiMMQaxYDmmm+MZ1B8LjfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOrj1h6S9ZIpntrWVdji6dWPLaEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWIxMzM0OGItNDdmOC0z MTIyLWExNWEtMWQ4NWZmMTE1MzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpIFKal41tr+nQ5LQgcugKubgb5NVIVQj1qLR7FRbK6LvpCJvw5eqP NOrVZleIhZbLvN2MawLcYBnXHCg4aNzcKkR7Nn0TuTZnDHmqe+IADAWd5FA/NFCU Syju0xNdlBQPh0S5Dk0YTTshosyZbqPhXf8ea4frZh7fmRB2/+38QiCBbxQ208pg nBGOVhX+eqcvUl/izxzBGXXH+pRkBED9mU+LR+9EEZSJaat1bW7WwwezG+aVz0Jf mVjqJzY4LoIFR5qunM+SWeyjgKZ6/Lw3Gh63o2g0UAqLQ+0C0B9zj8dlJ9MlsoMk oC+ZMM7Qw3OHkLgLCq5Mt2mX2W6ATyad -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:14 2024 by rpki-client on console-ams.rpki-client.org