$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa File: 76e99ac0-0bff-3cb1-9cdb-733596791286.roa (raw, json) Hash identifier: Nd6ZPTM5QJmyo9d047hvoLhlpXgWIYZkaIDCdEJtFi8= Subject key identifier: 12:44:0A:D2:61:B4:B2:6A:82:F4:EC:B9:B9:1C:FC:E6:E1:CB:02:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5D2A4561E504D4B8E2200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 397206 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:d2:a4:56:1e:50:4d:4b:8e:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=ef1eacb1-08ae-493d-83d0-e4b5480d0680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:f2:0b:f6:c3:8e:de:31:8b:6b:26:02:59: 9f:10:b4:60:d5:47:1e:02:db:7a:e9:0b:3e:e9:0c: 5f:01:b2:be:84:12:9d:c0:a6:d8:5b:76:a4:bc:e0: a9:10:19:b1:f6:da:a6:24:95:07:9b:7b:49:58:6e: e5:c0:9c:bc:90:82:dc:b0:06:73:90:fa:2a:df:5f: c2:b9:20:e9:ef:d6:06:37:27:34:42:d2:23:59:f3: 8f:38:0c:19:fb:20:68:f4:67:b5:6d:b8:29:2e:27: da:4d:0d:37:bb:e3:c8:94:c8:d7:9a:28:81:66:fc: de:eb:46:f9:78:26:59:3c:fd:30:65:82:7c:f8:f4: a9:65:55:92:7a:51:f4:1b:9b:b7:2f:e8:b9:f7:3a: 07:a1:3b:1f:ba:24:5d:43:f1:57:ef:8f:0b:aa:0d: 0d:ce:43:f2:97:e0:fe:90:eb:74:0a:46:ff:5b:e6: a0:c5:95:62:31:0e:d4:7e:4f:c0:78:40:57:20:90: 74:c5:ed:4b:0c:53:63:b2:b8:f3:69:ce:58:56:90: 53:d9:f6:61:df:0a:eb:70:5e:94:3b:19:6f:03:92: da:ba:9c:fb:e6:f2:72:c9:4b:40:25:e6:84:77:87: 37:d9:71:61:41:82:63:55:56:19:06:38:49:cc:0e: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:0A:D2:61:B4:B2:6A:82:F4:EC:B9:B9:1C:FC:E6:E1:CB:02:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:10:48:d6:02:07:0f:28:4b:02:b5:c8:fd:df:83:4d:a7:a4: 5a:17:69:6a:f7:81:c2:06:99:aa:31:a7:b1:23:2c:07:eb:cd: 8f:12:0b:b5:80:0a:05:8b:30:58:cd:fd:b2:ec:90:5b:0a:79: be:bc:df:ae:c5:7a:50:62:bb:a0:d2:4f:bd:93:74:24:a5:cc: ea:c6:93:8b:9f:13:7a:70:cf:12:c4:ad:2b:fb:09:e1:fa:b7: d7:7f:28:fb:93:1c:33:7d:ad:05:45:db:5a:e3:42:72:e3:de: c7:7e:f5:74:b8:7e:66:61:15:94:ef:8d:14:ee:87:01:8f:2a: 0c:a8:24:1b:d6:f3:a5:e1:9e:68:ef:2d:62:87:89:f5:40:96: be:a4:4c:cd:17:60:fb:6d:af:e0:8a:e6:c1:9f:d2:16:33:3f: f7:55:c7:52:8e:2a:11:e3:e3:93:e1:c7:be:b4:06:9e:72:af: ee:c4:34:71:21:06:71:5d:14:31:ea:a6:a8:4b:f8:56:37:2a: 97:f8:65:1b:1b:b8:88:29:ff:ed:ae:06:d4:f3:7c:56:85:ef: c6:2c:ba:ee:e6:ef:35:a7:13:d1:d7:73:20:78:3a:a9:b0:2d: c0:ad:6a:ac:8f:21:d0:c4:7f:bb:6a:23:c7:0d:91:ff:19:ed: bb:1c:26:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dKkVh5QTUuOIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZWYxZWFjYjEtMDhhZS00OTNkLTgzZDAtZTRiNTQ4MGQwNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+nyC/bDjt4xi2smAlmfELRg1UceAtt66Qs+ 6QxfAbK+hBKdwKbYW3akvOCpEBmx9tqmJJUHm3tJWG7lwJy8kILcsAZzkPoq31/C uSDp79YGNyc0QtIjWfOPOAwZ+yBo9Ge1bbgpLifaTQ03u+PIlMjXmiiBZvze60b5 eCZZPP0wZYJ8+PSpZVWSelH0G5u3L+i59zoHoTsfuiRdQ/FX748Lqg0NzkPyl+D+ kOt0Ckb/W+agxZViMQ7Ufk/AeEBXIJB0xe1LDFNjsrjzac5YVpBT2fZh3wrrcF6U OxlvA5Laupz75vJyyUtAJeaEd4c32XFhQYJjVVYZBjhJzA7Y0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBJECtJhtLJqgvTsubkc/ObhywJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzZlOTlhYzAtMGJmZi0z Y2IxLTljZGItNzMzNTk2NzkxMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDEEjWAgcPKEsCtcj934NNp6RaF2lq94HCBpmqMaexIywH682PEgu1 gAoFizBYzf2y7JBbCnm+vN+uxXpQYrug0k+9k3QkpczqxpOLnxN6cM8SxK0r+wnh +rfXfyj7kxwzfa0FRdta40Jy497HfvV0uH5mYRWU740U7ocBjyoMqCQb1vOl4Z5o 7y1ih4n1QJa+pEzNF2D7ba/giubBn9IWMz/3VcdSjioR4+OT4ce+tAaecq/uxDRx IQZxXRQx6qaoS/hWNyqX+GUbG7iIKf/trgbU83xWhe/GLLru5u81pxPR13MgeDqp sC3ArWqsjyHQxH+7aiPHDZH/Ge27HCZ5 -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:38 2024 by rpki-client on console-fra.rpki-client.org