$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: bYIGFSf7rbqStulTsnHrqjNZw05UtDBsQHwyga4rOK0= Subject key identifier: 14:41:91:98:30:94:C1:97:21:A1:4B:33:D6:F5:38:14:10:18:AE:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D4F621E7D1CFC3A82620C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Tue 19 Nov 2024 13:34:49 +0000 ROA not before: Tue 19 Nov 2024 13:34:49 +0000 ROA not after: Mon 17 Feb 2025 13:34:49 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:4f:62:1e:7d:1c:fc:3a:82:62:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:49 2024 GMT Not After : Feb 17 13:34:49 2025 GMT Subject: CN=e2c6f3d5-a493-4002-99ab-0f40c88b8696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:df:12:6e:08:ef:4f:a3:8e:6b:25:65:f7: 0b:f2:c7:d0:ce:1a:44:37:82:ed:17:14:20:b2:f2: fe:ff:98:71:ed:6f:4b:48:72:77:49:67:38:dd:ab: 04:87:52:b4:2d:0a:22:6d:ab:6e:46:29:5a:94:c9: db:e2:f5:4e:29:1d:24:3c:42:0a:1f:45:fe:d3:7c: cc:2a:0d:7f:a1:85:ca:45:2c:16:42:8c:47:d8:26: 9c:2f:cf:c2:57:a3:e8:cc:1f:fb:0e:22:80:67:01: a7:f9:d1:2a:39:6f:9d:00:c1:76:2a:79:bb:e4:db: 79:93:82:0f:66:a1:53:51:f9:54:91:65:f9:6c:2c: 3d:32:3b:e3:23:e4:bc:e2:90:47:50:e9:d0:da:18: 66:fe:4b:57:61:87:0b:b6:5f:83:f2:14:23:aa:e5: c1:9c:a9:d4:62:97:1e:68:5e:36:f5:5d:a2:f7:3f: 24:b7:c5:eb:33:e3:ed:4c:e2:92:c6:56:2b:69:9e: 34:26:b0:03:cd:b1:16:03:f9:48:7c:53:0b:6c:66: cd:ea:fd:53:52:f7:17:2f:7f:cf:1a:d9:d0:d0:2d: f1:5e:9e:f2:37:a7:28:20:4a:01:3c:3e:91:c7:58: 20:4e:5b:c4:79:e9:53:8b:40:2a:61:5a:b4:6f:ec: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:91:98:30:94:C1:97:21:A1:4B:33:D6:F5:38:14:10:18:AE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c6:c5:fb:1d:a9:88:7d:c6:25:68:9b:bf:db:89:33:20:4e: e8:89:4e:b8:b5:8c:e4:99:f0:00:33:21:a7:53:7b:3b:d4:e8: 52:c8:10:6a:9e:9b:a6:21:bd:fa:e1:d3:2e:de:8d:17:66:33: e1:b8:12:ab:22:ad:13:cf:dd:8b:0f:47:ca:71:47:16:c3:f7: 83:a6:ad:a4:14:ee:c3:3d:61:9e:a2:5c:ff:a9:69:35:b0:da: 4a:01:8d:53:98:28:a4:ac:75:4b:40:d9:f3:d9:d3:8d:18:b9: b1:e1:94:fe:b9:9f:ee:8d:b7:cc:09:90:32:29:b9:d5:df:7b: 64:f5:3a:0d:e1:db:f9:63:ca:29:27:24:46:70:d2:1e:13:55: 9a:e9:63:93:58:36:5a:ce:90:38:0b:eb:69:a5:26:ce:7c:e0: 4d:25:44:48:3c:5b:99:61:20:0d:c8:81:db:5a:c5:94:4b:ff: af:9d:9e:81:95:50:7c:ce:49:da:2f:45:2a:3a:93:cd:71:09: df:9e:84:dc:15:6b:0c:21:86:02:eb:10:5c:63:ea:04:7a:6f: 7e:90:fe:58:de:20:f4:6a:11:3f:63:92:d0:35:c4:86:e1:46: dd:63:13:93:be:48:26:b2:fc:b3:03:48:4a:6c:c3:4b:60:77: 70:17:09:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufU9iHn0c/DqCYgwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ0OVoXDTI1MDIxNzEzMzQ0OVowLzEtMCsGA1UEAxMk ZTJjNmYzZDUtYTQ5My00MDAyLTk5YWItMGY0MGM4OGI4Njk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdDfEm4I70+jjmslZfcL8sfQzhpEN4LtFxQg svL+/5hx7W9LSHJ3SWc43asEh1K0LQoibatuRilalMnb4vVOKR0kPEIKH0X+03zM Kg1/oYXKRSwWQoxH2CacL8/CV6PozB/7DiKAZwGn+dEqOW+dAMF2Knm75Nt5k4IP ZqFTUflUkWX5bCw9MjvjI+S84pBHUOnQ2hhm/ktXYYcLtl+D8hQjquXBnKnUYpce aF429V2i9z8kt8XrM+PtTOKSxlYraZ40JrADzbEWA/lIfFMLbGbN6v1TUvcXL3/P GtnQ0C3xXp7yN6coIEoBPD6Rx1ggTlvEeelTi0AqYVq0b+wN7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBRBkZgwlMGXIaFLM9b1OBQQGK6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJxsX7HamIfcYlaJu/24kzIE7oiU64tYzkmfAAMyGnU3s71OhSyBBq npumIb364dMu3o0XZjPhuBKrIq0Tz92LD0fKcUcWw/eDpq2kFO7DPWGeolz/qWk1 sNpKAY1TmCikrHVLQNnz2dONGLmx4ZT+uZ/ujbfMCZAyKbnV33tk9ToN4dv5Y8op JyRGcNIeE1Wa6WOTWDZazpA4C+tppSbOfOBNJURIPFuZYSANyIHbWsWUS/+vnZ6B lVB8zknaL0UqOpPNcQnfnoTcFWsMIYYC6xBcY+oEem9+kP5Y3iD0ahE/Y5LQNcSG 4UbdYxOTvkgmsvyzA0hKbMNLYHdwFwmT -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:42 2024 by rpki-client on console-fra.rpki-client.org