$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa File: 8601d6b0-277f-3107-bcc4-c8b1dee37989.roa (raw, json) Hash identifier: Twuq1v3ag4wiRsIM/XhCKYMW7SsYSNFWIRT+P5zMFX4= Subject key identifier: 94:21:88:65:D0:59:3A:51:B2:48:F6:9F:3B:FB:C9:DA:C1:A8:2E:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5D8239B93EF38F68530E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 396560 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:d8:23:9b:93:ef:38:f6:85:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=e50bcad7-0adf-4641-bec5-f29d4536d944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:56:fc:63:2a:43:bf:35:e7:9e:15:85:04: 30:9a:af:92:56:2e:ac:61:3b:43:d4:a2:66:a1:7e: 77:cd:f7:aa:26:f6:31:1e:9d:01:20:1a:29:67:7a: bb:17:32:7c:4f:78:d8:60:06:13:46:21:5c:0f:48: f4:c7:07:90:fb:44:01:2f:6e:37:9e:c9:11:c6:89: c2:46:4b:ab:71:8d:dd:a8:a5:f2:5f:a7:d0:b6:26: ad:a7:cc:ec:40:6f:f8:62:84:ae:16:8d:4a:4c:03: 97:9d:39:bd:b4:2a:af:c5:8d:a8:14:3e:4d:93:76: 01:58:42:02:0b:f0:12:f3:1f:b0:eb:ec:a2:c5:f6: d8:44:ff:cd:59:9c:5a:d1:ce:83:1a:91:eb:b7:96: 13:38:b2:16:b9:97:6d:90:0a:e0:9e:59:10:09:3a: 39:e7:c5:e2:05:bd:93:7e:19:b5:b5:7f:5f:e2:08: 5d:16:d8:25:9b:4b:dd:b7:dd:33:3f:72:da:f6:7e: d6:1f:07:35:45:d8:e9:01:88:7b:8d:8c:0f:73:79: 4d:92:47:52:a0:d1:69:92:71:11:5e:e3:50:7f:42: a4:0a:36:04:7d:0e:44:4d:c8:dc:6e:b1:8c:1f:2b: 47:11:c0:e3:ba:b8:da:db:6b:0c:39:ff:90:d9:99: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:21:88:65:D0:59:3A:51:B2:48:F6:9F:3B:FB:C9:DA:C1:A8:2E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:46:ca:a7:59:da:61:65:ab:53:08:3f:25:07:fb:74:d1:1c: fb:84:0c:8f:56:d0:bb:0f:86:1d:53:6b:cb:3b:ee:21:6a:32: 4d:76:b4:16:61:68:fd:74:cf:34:04:24:c4:34:34:48:f3:2b: c6:52:8a:b1:43:f9:27:62:e9:5d:88:51:84:e5:d5:35:f5:2c: c4:d2:fe:d8:63:af:f6:6b:da:21:85:6f:f1:20:fa:73:f9:97: 75:37:a5:84:14:bb:ea:a4:7e:60:f8:fa:19:7d:b0:75:01:30: 9f:44:6a:f0:d6:e1:19:09:c4:2b:1e:8b:1d:30:8f:64:d2:de: 47:77:2e:ac:99:ea:9b:03:7e:ce:05:86:7f:96:16:f8:8b:52: 83:dc:aa:13:88:1f:4d:d5:a6:20:69:37:02:15:d3:3c:1b:eb: 03:90:cb:a7:0c:ef:f3:5d:c4:c0:6a:41:77:6c:04:e4:95:9b: 1a:05:e1:bb:b2:2a:03:c4:45:46:96:d7:dc:cf:c0:6b:b2:38: 02:ea:61:e0:8b:30:e9:d5:98:ff:74:39:58:51:08:4e:11:46: c8:7d:bd:40:8a:7c:33:10:9f:c6:7c:37:a9:bc:04:3c:7f:1e: 94:84:eb:27:c4:f6:dc:22:5a:5e:e8:c4:2f:c8:ce:8a:a7:6b: 14:0c:bd:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dgjm5PvOPaFMOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTUwYmNhZDctMGFkZi00NjQxLWJlYzUtZjI5ZDQ1MzZkOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzotW/GMqQ781554VhQQwmq+SVi6sYTtD1KJm oX53zfeqJvYxHp0BIBopZ3q7FzJ8T3jYYAYTRiFcD0j0xweQ+0QBL243nskRxonC RkurcY3dqKXyX6fQtiatp8zsQG/4YoSuFo1KTAOXnTm9tCqvxY2oFD5Nk3YBWEIC C/AS8x+w6+yixfbYRP/NWZxa0c6DGpHrt5YTOLIWuZdtkArgnlkQCTo558XiBb2T fhm1tX9f4ghdFtglm0vdt90zP3La9n7WHwc1RdjpAYh7jYwPc3lNkkdSoNFpknER XuNQf0KkCjYEfQ5ETcjcbrGMHytHEcDjurja22sMOf+Q2ZknQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJQhiGXQWTpRskj2nzv7ydrBqC6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYwMWQ2YjAtMjc3Zi0z MTA3LWJjYzQtYzhiMWRlZTM3OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIRsqnWdphZatTCD8lB/t00Rz7hAyPVtC7D4YdU2vLO+4hajJNdrQW YWj9dM80BCTENDRI8yvGUoqxQ/knYuldiFGE5dU19SzE0v7YY6/2a9ohhW/xIPpz +Zd1N6WEFLvqpH5g+PoZfbB1ATCfRGrw1uEZCcQrHosdMI9k0t5Hdy6smeqbA37O BYZ/lhb4i1KD3KoTiB9N1aYgaTcCFdM8G+sDkMunDO/zXcTAakF3bATklZsaBeG7 sioDxEVGltfcz8BrsjgC6mHgizDp1Zj/dDlYUQhOEUbIfb1AinwzEJ/GfDepvAQ8 fx6UhOsnxPbcIlpe6MQvyM6Kp2sUDL0N -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:39 2024 by rpki-client on console-fra.rpki-client.org