$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa File: aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa (raw, json) Hash identifier: r4OWoC2fb9r1HfWS1r8H+187GZcE7Yc3oPeq82UWLvw= Subject key identifier: 97:24:BF:A3:C7:A4:9E:9F:3D:3F:61:3B:50:FB:B2:57:35:28:6F:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5CCF66A9B3926D2C4B980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 396585 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:cc:f6:6a:9b:39:26:d2:c4:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=f861f3f8-d3dc-45c3-92b9-29c30f3c7345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:d1:f3:3b:3d:ae:b9:60:3f:26:af:a3:44: 0e:70:f4:49:55:11:95:83:4b:fa:cf:f6:60:e2:ac: 98:e7:78:78:df:28:02:e0:62:92:3c:e4:1f:f0:95: b3:12:df:ec:62:69:bc:02:a4:9b:ae:44:b0:29:9c: 05:83:9d:a9:1e:10:99:25:07:8e:cd:16:30:2e:43: 9c:7f:65:8a:44:c6:25:9b:80:2c:34:9c:b5:17:da: 14:05:17:f4:bc:b5:07:98:62:0f:e4:71:61:f0:66: cf:4d:b0:a5:0b:e0:d9:b1:18:f5:12:cf:e2:05:cd: 92:5b:90:a5:03:9e:d4:33:5b:34:a7:1f:a7:08:71: 1d:31:4e:93:c9:26:6c:2f:8f:2a:c7:e5:ea:80:f0: e6:c7:ea:94:28:1c:40:de:a2:1d:0d:2a:88:5a:23: 2c:82:6d:19:da:4a:90:65:d0:1d:8b:87:90:26:b8: 17:34:1d:a6:c6:50:2c:1b:a1:d3:1e:e2:71:c2:20: ca:c0:86:b5:fd:42:bc:46:7b:d0:e0:4c:6f:97:5d: 42:f5:e1:97:70:56:68:9e:d9:0b:b8:00:1c:59:e5: db:03:86:66:a6:40:97:cd:86:12:fc:86:0f:9a:63: 40:6d:9e:27:cb:cd:ad:33:1e:cc:6e:9c:61:80:06: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:BF:A3:C7:A4:9E:9F:3D:3F:61:3B:50:FB:B2:57:35:28:6F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e9:d8:29:c9:07:d4:77:dc:55:bf:34:dd:76:45:af:3d:05: d0:46:9c:e1:98:d4:37:10:58:b5:5f:4d:37:3f:66:d4:fe:7f: c1:b3:8e:91:1f:f8:25:9a:07:18:8b:9a:74:b0:d1:bd:49:cd: ff:c6:8d:c9:12:a6:f8:5d:fb:7f:dd:67:22:81:27:f3:b0:49: 16:0a:4c:12:00:2b:b1:a2:cb:33:2a:cf:4d:9c:c1:c9:37:db: 1e:6c:db:6d:b7:76:bc:a4:16:b6:33:51:7c:f3:f0:e9:b9:c6: a2:c8:14:60:af:84:e0:06:96:f5:21:80:04:84:05:90:79:2f: fe:8e:65:cd:bb:58:fc:a4:08:59:ac:8e:f3:23:38:ef:32:d9: a1:98:e5:f3:50:50:51:4c:f1:74:e6:f0:42:19:34:06:bf:8f: f4:cb:60:22:37:2b:ea:f7:92:f7:6c:b4:07:82:b6:cb:0c:c5: 61:ad:5a:44:a1:a4:3d:e2:5f:9c:88:3a:e3:ec:e0:42:8d:86: d5:3a:dd:d0:48:88:98:39:6c:79:cb:cf:0f:14:5a:d7:0d:cc: 5f:84:db:80:f4:1a:46:be:f6:78:4c:c3:4e:62:0c:2b:3d:d4: 43:5c:2e:66:97:00:15:5c:39:8d:4f:45:42:d3:65:5d:3f:9b: 4c:8b:10:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1cz2aps5JtLEuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Zjg2MWYzZjgtZDNkYy00NWMzLTkyYjktMjljMzBmM2M3MzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusDR8zs9rrlgPyavo0QOcPRJVRGVg0v6z/Zg 4qyY53h43ygC4GKSPOQf8JWzEt/sYmm8AqSbrkSwKZwFg52pHhCZJQeOzRYwLkOc f2WKRMYlm4AsNJy1F9oUBRf0vLUHmGIP5HFh8GbPTbClC+DZsRj1Es/iBc2SW5Cl A57UM1s0px+nCHEdMU6TySZsL48qx+XqgPDmx+qUKBxA3qIdDSqIWiMsgm0Z2kqQ ZdAdi4eQJrgXNB2mxlAsG6HTHuJxwiDKwIa1/UK8RnvQ4Exvl11C9eGXcFZontkL uAAcWeXbA4ZmpkCXzYYS/IYPmmNAbZ4ny82tMx7MbpxhgAbd/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJckv6PHpJ6fPT9hO1D7slc1KG9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNmRlNWUtMWVjZS0z MmZlLWJhMTMtNmJlZTMyYTczZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA56dgpyQfUd9xVvzTddkWvPQXQRpzhmNQ3EFi1X003P2bU/n/Bs46R H/glmgcYi5p0sNG9Sc3/xo3JEqb4Xft/3WcigSfzsEkWCkwSACuxosszKs9NnMHJ N9sebNttt3a8pBa2M1F88/DpucaiyBRgr4TgBpb1IYAEhAWQeS/+jmXNu1j8pAhZ rI7zIzjvMtmhmOXzUFBRTPF05vBCGTQGv4/0y2AiNyvq95L3bLQHgrbLDMVhrVpE oaQ94l+ciDrj7OBCjYbVOt3QSIiYOWx5y88PFFrXDcxfhNuA9BpGvvZ4TMNOYgwr PdRDXC5mlwAVXDmNT0VC02VdP5tMixAY -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-ams.rpki-client.org