$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa File: 625a1cb4-9275-3615-813b-2e4aec695d6f.roa (raw, json) Hash identifier: tsK1+F108uhFNzah/G832s+1sYIpaEC7yYMsWOMFl1I= Subject key identifier: 41:45:F4:FF:CA:64:D9:BB:F6:6F:3A:5A:B2:0B:07:0C:4F:47:27:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5CA76B541BF37DA85CCD5 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 396580 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:ca:76:b5:41:bf:37:da:85:cc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=3cba7f6f-32ee-497a-9373-c5441f0a9e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:07:b9:a2:1a:86:d4:a6:3d:77:04:4f:4a: 25:dc:a0:cd:22:27:d3:d9:ff:e5:3a:cf:c1:25:22: e5:42:74:9f:35:99:bd:3c:15:ea:79:b9:5a:9c:cb: 83:72:f8:8b:3a:e8:11:ae:93:0f:03:ee:66:3f:fd: e5:77:70:79:2a:89:3f:45:06:14:26:49:a5:a6:3f: f3:80:97:bf:d2:ef:fb:51:88:78:8e:f8:71:26:62: f1:db:00:8a:b0:f0:12:bb:98:d5:49:12:37:41:80: 3a:e3:f7:8d:34:42:54:92:17:e4:21:1d:b6:ab:68: 6e:2b:bf:92:61:e8:06:29:a2:99:bb:6a:5a:0d:22: 3e:2c:a6:35:e3:f2:d7:8e:e5:76:02:32:87:f8:67: 88:47:77:be:58:eb:d0:2d:00:02:2b:5a:a0:db:a2: 90:3d:0e:cc:ad:7c:ba:a1:18:f3:70:6e:57:91:84: 80:4c:af:8d:d7:66:f3:43:72:f0:6e:78:ab:c8:4c: 87:8f:55:6f:ce:d9:bd:6e:c6:c7:21:60:ba:dd:27: 6b:9b:11:4b:68:ed:04:72:05:90:22:d5:49:93:59: 19:bb:58:9b:3f:b5:00:54:02:26:1c:88:e3:ad:e3: dd:6f:92:a9:e5:cd:28:0d:36:be:ac:2e:10:0b:aa: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:F4:FF:CA:64:D9:BB:F6:6F:3A:5A:B2:0B:07:0C:4F:47:27:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:51:8a:41:b1:b0:86:03:0a:19:1d:c2:bf:2f:69:5a:d1:e2: 89:b4:86:b7:a8:00:b1:fa:45:3d:90:f8:39:9e:cd:d0:78:7b: 45:7e:15:36:82:5b:94:ff:96:df:0c:e0:85:4e:a6:9b:46:0f: 04:2d:52:4e:cf:db:b1:23:8e:1b:16:3b:b7:49:5d:a7:d6:85: c2:9b:51:ee:98:15:1e:b6:72:3d:8f:fb:56:a1:a1:af:e8:ea: 22:ab:53:b7:ab:2f:3e:0b:0a:ac:74:6c:4e:07:00:73:d2:5e: fc:1e:fa:a4:7d:9c:a1:de:fa:6d:10:3a:fa:99:e3:d9:36:df: e7:72:d2:fe:a2:0f:d8:c0:43:78:ba:80:cc:7f:d8:6a:a6:48: e1:10:b4:91:91:18:69:0c:6c:13:4d:53:31:c4:12:37:dc:c7: 15:92:e0:f0:b1:5b:4c:dd:f2:32:77:e0:19:5d:ab:e6:84:9f: 04:e6:a2:1b:83:00:d8:0f:e9:3b:73:f7:b0:a9:57:34:b7:29: fd:a1:79:fc:bb:7e:13:f5:4e:b7:21:b2:09:3a:6d:54:3e:09: 1e:d8:61:47:30:79:8d:2c:35:7e:5b:3c:bd:62:77:19:76:b7: 37:55:32:c0:37:e0:e1:33:70:f1:92:c8:b4:28:89:37:13:0a: f2:c1:ca:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1cp2tUG/N9qFzNUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk M2NiYTdmNmYtMzJlZS00OTdhLTkzNzMtYzU0NDFmMGE5ZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzQHuaIahtSmPXcET0ol3KDNIifT2f/lOs/B JSLlQnSfNZm9PBXqeblanMuDcviLOugRrpMPA+5mP/3ld3B5Kok/RQYUJkmlpj/z gJe/0u/7UYh4jvhxJmLx2wCKsPASu5jVSRI3QYA64/eNNEJUkhfkIR22q2huK7+S YegGKaKZu2paDSI+LKY14/LXjuV2AjKH+GeIR3e+WOvQLQACK1qg26KQPQ7MrXy6 oRjzcG5XkYSATK+N12bzQ3LwbniryEyHj1Vvztm9bsbHIWC63SdrmxFLaO0EcgWQ ItVJk1kZu1ibP7UAVAImHIjjrePdb5Kp5c0oDTa+rC4QC6qeFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEFF9P/KZNm79m86WrILBwxPRycBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI1YTFjYjQtOTI3NS0z NjE1LTgxM2ItMmU0YWVjNjk1ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaUYpBsbCGAwoZHcK/L2la0eKJtIa3qACx+kU9kPg5ns3QeHtFfhU2 gluU/5bfDOCFTqabRg8ELVJOz9uxI44bFju3SV2n1oXCm1HumBUetnI9j/tWoaGv 6Ooiq1O3qy8+CwqsdGxOBwBz0l78HvqkfZyh3vptEDr6mePZNt/nctL+og/YwEN4 uoDMf9hqpkjhELSRkRhpDGwTTVMxxBI33McVkuDwsVtM3fIyd+AZXavmhJ8E5qIb gwDYD+k7c/ewqVc0tyn9oXn8u34T9U63IbIJOm1UPgke2GFHMHmNLDV+Wzy9YncZ drc3VTLAN+DhM3Dxksi0KIk3EwrywcqA -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:14 2024 by rpki-client on console-ams.rpki-client.org