$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa File: ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa (raw, json) Hash identifier: cndzzIBNgz8C+ghsbfRKWnfm3td6b4eiQ8L+ts/eyQg= Subject key identifier: 3B:21:76:AE:3D:F6:86:00:EE:D9:1B:8B:38:1B:FB:7C:BC:67:EA:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D5389BDD2FEE34EE65D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa Signing time: Tue 19 Nov 2024 13:34:51 +0000 ROA not before: Tue 19 Nov 2024 13:34:51 +0000 ROA not after: Mon 17 Feb 2025 13:34:51 +0000 asID: 20362 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:53:89:bd:d2:fe:e3:4e:e6:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:51 2024 GMT Not After : Feb 17 13:34:51 2025 GMT Subject: CN=2267772e-350a-4923-ac77-c6d92a9c7e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:42:8d:7d:b7:82:73:12:ce:fa:a1:a3:ed: 95:4e:19:60:d9:c7:4b:94:52:f6:8f:83:de:67:6f: 70:db:22:8f:f9:b3:7e:41:62:d3:25:f1:ef:25:12: d5:2b:16:d2:bb:6d:de:0e:4a:b8:fe:81:cc:d1:04: a3:2e:02:67:7d:07:61:19:8c:66:33:2f:0e:31:09: a0:f2:e6:13:78:a7:1f:c2:77:e0:24:49:27:41:f8: 44:c0:5a:6e:91:52:80:0f:4f:83:88:26:fc:48:6d: 3e:2a:9a:ac:ff:a6:42:4e:d1:25:55:49:5c:59:ca: 2e:d0:a0:ac:5f:96:2e:48:e3:87:c6:d1:4f:5e:75: 71:e9:e8:6e:02:8a:6f:b8:05:30:5f:77:6d:79:c1: 43:cb:05:86:36:52:9c:e6:41:fd:a2:09:01:82:ee: 86:83:39:5d:d7:4a:52:ea:0a:7a:c1:9c:6e:c8:74: 8a:cd:e4:30:44:f1:97:66:58:af:32:16:df:46:6e: 9e:f8:98:0a:e3:f1:b2:85:7e:c1:7f:7b:df:31:c0: 95:48:4e:62:f9:51:5e:ac:6f:06:05:31:09:0d:96: 8c:1c:f6:2f:5f:34:89:b4:fd:fe:a2:98:c0:9b:0a: 21:75:65:d6:49:33:43:95:9e:22:e7:8e:40:d0:62: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:21:76:AE:3D:F6:86:00:EE:D9:1B:8B:38:1B:FB:7C:BC:67:EA:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:15:e1:c0:5c:eb:75:50:d3:92:f4:b0:62:63:3f:47:b9:95: c8:12:47:bc:35:86:f1:d1:a2:91:4c:2a:b0:6d:96:b6:2a:3b: d7:4c:69:db:e8:36:6e:c8:6f:a5:99:f5:88:4c:df:e7:13:48: 72:e2:3e:36:92:a7:9c:bc:a6:08:cf:48:11:e8:2a:4e:b1:f2: f9:82:5d:c8:b3:8f:39:a0:96:cd:42:a7:29:b8:dc:4c:6c:7f: ee:4d:5a:ff:86:30:c9:74:39:3b:1d:19:77:86:60:3f:90:1e: 64:86:69:6c:5a:63:3d:e7:e9:d3:63:63:30:e2:49:9c:c5:85: c2:0e:35:a3:d2:ad:a0:2d:de:8f:07:c7:19:c2:ae:d0:ab:1a: 28:05:65:52:40:5b:fb:da:d0:5f:73:b6:21:1d:5c:50:78:e2: 11:07:5c:0a:30:01:59:99:76:41:c4:bb:03:98:13:11:db:4f: 6b:d3:96:2c:8e:8b:7d:a4:f6:53:ce:8a:ef:70:cd:2d:2b:68: c8:f4:97:19:31:1c:f9:2e:74:09:c3:ee:9a:10:ca:8b:63:d2: 08:b3:c5:4e:4c:07:16:61:d1:71:9d:3f:f3:44:7f:40:17:b5: 7a:ec:58:b9:9e:de:4f:1b:8e:44:4b:bd:0f:0e:80:aa:72:84: 40:c8:a8:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVOJvdL+407mXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MVoXDTI1MDIxNzEzMzQ1MVowLzEtMCsGA1UEAxMk MjI2Nzc3MmUtMzUwYS00OTIzLWFjNzctYzZkOTJhOWM3ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXFCjX23gnMSzvqho+2VThlg2cdLlFL2j4Pe Z29w2yKP+bN+QWLTJfHvJRLVKxbSu23eDkq4/oHM0QSjLgJnfQdhGYxmMy8OMQmg 8uYTeKcfwnfgJEknQfhEwFpukVKAD0+DiCb8SG0+Kpqs/6ZCTtElVUlcWcou0KCs X5YuSOOHxtFPXnVx6ehuAopvuAUwX3dtecFDywWGNlKc5kH9ogkBgu6Ggzld10pS 6gp6wZxuyHSKzeQwRPGXZlivMhbfRm6e+JgK4/GyhX7Bf3vfMcCVSE5i+VFerG8G BTEJDZaMHPYvXzSJtP3+opjAmwohdWXWSTNDlZ4i545A0GJKjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDshdq499oYA7tkbizgb+3y8Z+pnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU5ZDkzYmQtNTdmMC0z NzEzLTlkYjEtZjcxNThkOGNjYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGFeHAXOt1UNOS9LBiYz9HuZXIEke8NYbx0aKRTCqwbZa2KjvXTGnb 6DZuyG+lmfWITN/nE0hy4j42kqecvKYIz0gR6CpOsfL5gl3Is485oJbNQqcpuNxM bH/uTVr/hjDJdDk7HRl3hmA/kB5khmlsWmM95+nTY2Mw4kmcxYXCDjWj0q2gLd6P B8cZwq7QqxooBWVSQFv72tBfc7YhHVxQeOIRB1wKMAFZmXZBxLsDmBMR209r05Ys jot9pPZTzorvcM0tK2jI9JcZMRz5LnQJw+6aEMqLY9IIs8VOTAcWYdFxnT/zRH9A F7V67Fi5nt5PG45ES70PDoCqcoRAyKg2 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-ams.rpki-client.org