$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa File: 5c395aa6-82d8-305b-882d-70fc9f94aec8.roa (raw, json) Hash identifier: pP7G0BYk9UPUYLpr6XoGvFE1D9+8uYtMwfcGnwjbfXs= Subject key identifier: CA:53:3B:6D:EB:80:0D:6C:B4:00:0C:9B:33:9D:0B:B5:00:70:61:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D53A8AC12FE7F2051EB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa Signing time: Tue 19 Nov 2024 13:34:51 +0000 ROA not before: Tue 19 Nov 2024 13:34:51 +0000 ROA not after: Mon 17 Feb 2025 13:34:51 +0000 asID: 396580 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:53:a8:ac:12:fe:7f:20:51:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:51 2024 GMT Not After : Feb 17 13:34:51 2025 GMT Subject: CN=072d02c0-0a31-4f0e-96db-19ee9684002d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:d3:d4:15:73:e2:fb:fc:20:9d:25:a9:e3: 59:f8:ce:6f:d7:8d:07:25:42:1b:7c:8e:07:2d:63: 36:e5:14:3e:c0:cd:9a:6c:1f:71:4a:b5:e3:ba:86: 95:ca:2f:35:f2:2a:e4:a4:4f:c1:10:aa:32:40:38: 33:41:da:21:dd:b3:1b:5d:36:d0:af:be:98:f9:37: 4c:88:cb:a2:48:7b:7d:2e:04:b1:55:b0:1b:f9:84: 37:72:25:2a:13:7f:0a:e8:b4:94:3d:99:99:e0:19: 8a:3f:81:0f:aa:c0:2d:2e:1a:40:fd:69:d2:d1:42: 41:ff:70:62:40:2e:c7:7e:f7:ed:3a:4d:18:8e:6f: ac:5c:44:47:e1:7a:9b:27:de:09:ec:ed:ca:79:e0: d0:38:c8:66:7b:cb:59:db:f9:cd:80:14:45:5b:af: db:5a:0d:08:a5:d0:8b:71:99:10:bf:ec:d7:5c:4e: e0:2c:0d:0b:5e:4f:e7:22:c6:12:22:61:80:0b:10: 55:06:cb:8b:d3:cf:0f:f6:81:75:60:0b:90:e2:69: c7:f1:c2:5c:e4:3a:d8:3f:8d:8b:c2:ff:27:3a:a4: ef:88:22:1d:a9:75:3f:72:8a:f9:e5:24:9f:e8:9a: c8:3d:6c:a9:de:8f:64:bf:3c:6a:c7:67:47:98:4a: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:53:3B:6D:EB:80:0D:6C:B4:00:0C:9B:33:9D:0B:B5:00:70:61:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:86:3a:80:68:15:2f:4a:b8:f3:9f:45:9f:b0:2d:78:8a:fd: 66:d8:60:74:d8:5a:4d:ff:5c:dc:cd:60:be:88:2a:2c:8c:23: 8c:36:63:00:e0:16:98:65:37:3c:81:75:2c:e3:9d:be:ec:26: 72:25:18:ac:ae:a1:39:8c:8f:f7:8d:f8:66:a0:2d:1a:0f:8b: e9:4e:ad:bf:07:98:0c:56:51:25:82:39:1a:5d:0d:9f:c0:cb: 1c:ae:a4:69:86:d8:20:90:c0:5d:84:58:d0:00:b7:61:54:7a: 31:34:d0:3d:b1:40:f0:00:40:67:04:83:14:19:df:54:33:91: a4:3c:03:34:48:07:8d:ae:a8:6a:b4:a3:09:35:eb:f9:05:17: a6:e9:f8:3d:97:59:85:7f:1b:11:0b:59:6a:f3:ed:79:35:16: ac:84:56:49:14:f4:6b:99:e9:c5:25:61:99:82:ff:de:95:7c: dd:ce:c3:30:20:b6:ef:f8:e7:64:56:a2:98:aa:9c:1b:fa:ef: dc:1a:f6:c6:35:5e:00:3d:3c:e6:74:c5:2c:a4:0d:59:de:d5: 93:fc:29:5e:11:a7:d9:2b:6e:18:59:3c:41:cc:48:5b:85:35: 71:87:26:ff:c6:79:9e:3b:37:73:7d:a5:d5:88:7e:38:05:fd: b5:7b:aa:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVOorBL+fyBR6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MVoXDTI1MDIxNzEzMzQ1MVowLzEtMCsGA1UEAxMk MDcyZDAyYzAtMGEzMS00ZjBlLTk2ZGItMTllZTk2ODQwMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd/T1BVz4vv8IJ0lqeNZ+M5v140HJUIbfI4H LWM25RQ+wM2abB9xSrXjuoaVyi818irkpE/BEKoyQDgzQdoh3bMbXTbQr76Y+TdM iMuiSHt9LgSxVbAb+YQ3ciUqE38K6LSUPZmZ4BmKP4EPqsAtLhpA/WnS0UJB/3Bi QC7HfvftOk0Yjm+sXERH4XqbJ94J7O3KeeDQOMhme8tZ2/nNgBRFW6/bWg0IpdCL cZkQv+zXXE7gLA0LXk/nIsYSImGACxBVBsuL088P9oF1YAuQ4mnH8cJc5DrYP42L wv8nOqTviCIdqXU/cor55SSf6JrIPWyp3o9kvzxqx2dHmEroJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpTO23rgA1stAAMmzOdC7UAcGFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMzOTVhYTYtODJkOC0z MDViLTg4MmQtNzBmYzlmOTRhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAnhjqAaBUvSrjzn0WfsC14iv1m2GB02FpN/1zczWC+iCosjCOMNmMA 4BaYZTc8gXUs452+7CZyJRisrqE5jI/3jfhmoC0aD4vpTq2/B5gMVlElgjkaXQ2f wMscrqRphtggkMBdhFjQALdhVHoxNNA9sUDwAEBnBIMUGd9UM5GkPAM0SAeNrqhq tKMJNev5BRem6fg9l1mFfxsRC1lq8+15NRashFZJFPRrmenFJWGZgv/elXzdzsMw ILbv+OdkVqKYqpwb+u/cGvbGNV4APTzmdMUspA1Z3tWT/CleEafZK24YWTxBzEhb hTVxhyb/xnmeOzdzfaXViH44Bf21e6oO -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:14 2024 by rpki-client on console-ams.rpki-client.org