$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa File: a4929e82-06a7-3c2d-85b3-300947e9fa74.roa (raw, json) Hash identifier: dAVhOPbqkg/r8NdaTTmJcUpi/l341FGiGy57YSjCnT0= Subject key identifier: 13:C1:4D:6A:2E:28:8C:A9:54:C0:AD:CD:AB:48:C6:9C:83:59:D9:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D52D76B617671715E2B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa Signing time: Tue 19 Nov 2024 13:34:51 +0000 ROA not before: Tue 19 Nov 2024 13:34:51 +0000 ROA not after: Mon 17 Feb 2025 13:34:51 +0000 asID: 397198 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:52:d7:6b:61:76:71:71:5e:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:51 2024 GMT Not After : Feb 17 13:34:51 2025 GMT Subject: CN=e85571b2-25e7-4dc4-8bb0-762181d098b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:3c:52:e8:db:0c:4f:74:f7:bf:97:63:84: c3:4c:21:81:d6:f0:fd:5a:67:54:73:69:6b:99:0f: 81:a3:a2:ce:b2:eb:32:3e:27:55:e2:06:2b:3b:56: 60:e5:53:a0:1f:cd:71:35:9e:e9:58:6e:c1:ae:ef: 35:4c:da:93:77:ca:90:bc:2d:e8:93:13:24:d6:47: 3c:24:b3:58:7b:1d:5e:0b:55:68:ac:a5:c5:c7:f5: 4f:60:58:f2:28:f8:a2:3a:ff:af:32:2a:85:92:8a: 8a:14:4d:61:9e:65:fa:93:39:f3:64:eb:ad:97:33: ec:ec:cd:8e:8c:63:8a:c7:b6:fe:39:1a:d3:6d:59: d1:c8:6a:98:d9:66:9a:91:cb:ae:63:ec:a1:b5:9f: 78:de:fa:6e:2c:54:26:34:5f:e5:aa:1e:03:1a:99: 11:c5:a3:41:2b:bd:0b:e5:ba:ee:ae:ea:c2:17:3f: cc:b1:78:c7:52:1c:88:d2:ca:95:8e:30:31:d9:25: 90:2f:ae:65:4e:25:5a:e4:63:45:c0:02:13:d8:f1: 30:2d:4f:b4:70:2e:98:ea:e2:30:42:12:93:47:07: 12:ec:e9:26:a1:d5:b6:a9:65:3c:dd:72:76:b3:dc: 9e:29:d5:d0:ef:ca:80:ef:04:e2:05:80:ca:2f:bc: 1b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:4D:6A:2E:28:8C:A9:54:C0:AD:CD:AB:48:C6:9C:83:59:D9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e9:8c:ea:0e:54:02:08:4b:76:83:0c:36:9a:3b:34:b5:0c: eb:20:e0:3a:8c:b3:bb:d2:36:25:b8:f0:8e:15:6c:b9:db:4d: b7:3f:d2:fb:cf:f3:83:ee:a7:a2:75:6e:2c:d9:22:1e:8d:dd: f7:c6:44:75:0b:0b:68:34:4d:7f:5b:92:cd:22:96:49:29:2c: ec:f0:59:4f:c5:5f:22:c4:80:5d:d9:fe:9f:de:8e:77:66:1d: 57:f4:8d:56:f7:ac:34:2e:5d:9a:6b:1f:4f:61:13:23:43:8e: 35:22:fd:e8:16:58:db:a8:0a:b9:2b:73:0c:c4:c9:e7:8e:3d: d5:97:3a:c8:44:f5:de:ef:3b:2b:ec:7e:4a:c6:a2:88:b2:79: 00:87:4f:0e:fa:76:48:9e:9a:e9:bb:fe:01:58:6c:65:4a:7f: 2f:bf:49:41:20:3d:0d:ff:35:ec:f1:9c:ec:d8:a8:3c:0f:7d: 81:b1:6c:e2:2a:44:6f:e1:b1:12:29:49:f7:67:0e:5e:b7:17: ba:67:b5:84:65:c9:a5:e4:bd:c4:a2:42:76:49:51:70:ec:4e: f8:82:0c:a1:2d:fa:f8:ef:c4:5c:3e:dd:ac:3b:ee:15:02:cc: f7:c1:9c:f8:e1:dc:74:c2:10:01:9b:b3:a6:98:1b:72:4b:66: ce:37:c6:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVLXa2F2cXFeKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MVoXDTI1MDIxNzEzMzQ1MVowLzEtMCsGA1UEAxMk ZTg1NTcxYjItMjVlNy00ZGM0LThiYjAtNzYyMTgxZDA5OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dE8UujbDE9097+XY4TDTCGB1vD9WmdUc2lr mQ+Bo6LOsusyPidV4gYrO1Zg5VOgH81xNZ7pWG7Bru81TNqTd8qQvC3okxMk1kc8 JLNYex1eC1VorKXFx/VPYFjyKPiiOv+vMiqFkoqKFE1hnmX6kznzZOutlzPs7M2O jGOKx7b+ORrTbVnRyGqY2WaakcuuY+yhtZ943vpuLFQmNF/lqh4DGpkRxaNBK70L 5brururCFz/MsXjHUhyI0sqVjjAx2SWQL65lTiVa5GNFwAIT2PEwLU+0cC6Y6uIw QhKTRwcS7OkmodW2qWU83XJ2s9yeKdXQ78qA7wTiBYDKL7wb7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBPBTWouKIypVMCtzatIxpyDWdmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ5MjllODItMDZhNy0z YzJkLTg1YjMtMzAwOTQ3ZTlmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAA6YzqDlQCCEt2gww2mjs0tQzrIOA6jLO70jYluPCOFWy52023P9L7 z/OD7qeidW4s2SIejd33xkR1CwtoNE1/W5LNIpZJKSzs8FlPxV8ixIBd2f6f3o53 Zh1X9I1W96w0Ll2aax9PYRMjQ441Iv3oFljbqAq5K3MMxMnnjj3VlzrIRPXe7zsr 7H5KxqKIsnkAh08O+nZInprpu/4BWGxlSn8vv0lBID0N/zXs8Zzs2Kg8D32BsWzi KkRv4bESKUn3Zw5etxe6Z7WEZcml5L3EokJ2SVFw7E74ggyhLfr478RcPt2sO+4V Asz3wZz44dx0whABm7OmmBtyS2bON8Y3 -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:42 2024 by rpki-client on console-fra.rpki-client.org