$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa File: b313aef3-68e7-3ec0-a977-f3576f2ee078.roa (raw, json) Hash identifier: KHmoDl5nDzCT23lt+0HIMNSH2dmKG87wm7hD+E1D0d4= Subject key identifier: 85:8B:99:D6:BF:28:E1:A0:58:53:53:7B:89:1B:78:BD:15:1B:2A:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D51604121502FC0FC2200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa Signing time: Tue 19 Nov 2024 13:34:50 +0000 ROA not before: Tue 19 Nov 2024 13:34:50 +0000 ROA not after: Mon 17 Feb 2025 13:34:50 +0000 asID: 397203 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:51:60:41:21:50:2f:c0:fc:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:50 2024 GMT Not After : Feb 17 13:34:50 2025 GMT Subject: CN=0e19da26-4495-46f5-bcc9-df97a794f24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:ca:ed:66:6a:13:e4:c4:72:07:d3:d8:41: e5:45:87:f9:08:37:1d:83:34:d1:0b:75:4d:a7:9b: 0d:92:e5:20:1d:f9:99:f6:a5:4c:15:6b:53:9c:75: fe:0d:1a:62:86:8d:16:dd:53:36:a1:97:08:e5:fa: d8:7a:c6:ae:83:7c:40:59:41:16:1c:37:36:63:d6: c9:dd:4d:e2:e6:85:1b:5b:64:5f:26:f3:65:84:3b: eb:54:78:3d:30:d2:55:79:a2:99:01:6f:fb:f5:72: 8d:e3:21:3a:04:1f:b5:67:9c:b4:fe:c8:86:ff:10: f4:58:94:7e:74:c8:27:3f:49:d3:ce:a1:fa:e2:84: cc:1d:49:9f:ea:e2:4f:0b:ce:39:6b:63:b3:e4:8c: a1:b2:5b:06:7d:50:c9:12:e7:00:c6:35:d6:bf:da: 35:36:97:5f:6a:c7:d2:39:ac:96:54:68:95:62:45: ae:78:eb:d9:fa:5c:d5:96:e2:c1:69:67:f8:03:2c: 56:b0:ef:fb:af:d2:12:c8:3c:ea:50:db:4c:44:0b: 1b:e8:34:18:6b:f2:92:cd:f7:6f:37:b5:4b:13:b2: ca:9a:8d:57:79:e6:95:e2:69:4a:72:6d:ae:23:97: cf:02:7c:8a:de:33:f5:2e:f2:19:f9:ca:6c:42:d3: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8B:99:D6:BF:28:E1:A0:58:53:53:7B:89:1B:78:BD:15:1B:2A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2c:d1:17:26:ed:04:0f:2e:c5:10:ba:a7:54:31:cf:46:c2: 45:79:59:a0:7a:a4:d4:2d:12:0c:39:45:39:71:5f:48:70:37: 26:5c:80:e9:2a:5a:eb:6d:6d:9f:08:69:7d:cb:85:46:8b:d8: e6:91:19:52:7f:63:e2:7f:f0:b0:c5:51:57:b2:90:86:02:09: 88:7f:18:33:78:0e:31:59:2f:b1:44:33:10:6f:76:b2:9c:76: 20:ba:82:64:e6:71:a0:87:b1:f4:02:01:d0:de:e3:d1:9f:61: b2:b4:6f:99:36:e3:da:b2:79:99:fd:c1:7e:95:11:54:39:65: e1:87:79:90:22:eb:51:73:cd:ea:d0:2f:82:a5:61:d1:a8:ba: 17:d2:79:81:dc:6c:64:b2:1f:9b:67:71:f7:67:dc:b0:83:d6: 63:e6:94:40:9f:7a:f2:e5:b2:07:87:28:5d:9d:30:1c:b7:dd: be:e7:2f:fe:af:03:34:a9:4f:0f:0a:3a:32:b8:28:6d:8b:0b: b8:d1:20:42:78:eb:3a:8a:61:80:91:86:0f:0d:92:e9:9e:42: 8b:87:05:c5:a0:07:3b:eb:20:ed:af:86:46:bc:91:0e:98:63: b2:e7:f6:f7:4c:37:7c:1d:0a:19:f5:8d:85:73:b0:63:5a:d4: 87:44:38:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVFgQSFQL8D8IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk MGUxOWRhMjYtNDQ5NS00NmY1LWJjYzktZGY5N2E3OTRmMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn3K7WZqE+TEcgfT2EHlRYf5CDcdgzTRC3VN p5sNkuUgHfmZ9qVMFWtTnHX+DRpiho0W3VM2oZcI5frYesaug3xAWUEWHDc2Y9bJ 3U3i5oUbW2RfJvNlhDvrVHg9MNJVeaKZAW/79XKN4yE6BB+1Z5y0/siG/xD0WJR+ dMgnP0nTzqH64oTMHUmf6uJPC845a2Oz5IyhslsGfVDJEucAxjXWv9o1NpdfasfS OayWVGiVYkWueOvZ+lzVluLBaWf4AyxWsO/7r9ISyDzqUNtMRAsb6DQYa/KSzfdv N7VLE7LKmo1XeeaV4mlKcm2uI5fPAnyK3jP1LvIZ+cpsQtNJawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIWLmda/KOGgWFNTe4kbeL0VGypjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjMxM2FlZjMtNjhlNy0z ZWMwLWE5NzctZjM1NzZmMmVlMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCLNEXJu0EDy7FELqnVDHPRsJFeVmgeqTULRIMOUU5cV9IcDcmXIDp KlrrbW2fCGl9y4VGi9jmkRlSf2Pif/CwxVFXspCGAgmIfxgzeA4xWS+xRDMQb3ay nHYguoJk5nGgh7H0AgHQ3uPRn2GytG+ZNuPasnmZ/cF+lRFUOWXhh3mQIutRc83q 0C+CpWHRqLoX0nmB3Gxksh+bZ3H3Z9ywg9Zj5pRAn3ry5bIHhyhdnTAct92+5y/+ rwM0qU8PCjoyuChtiwu40SBCeOs6imGAkYYPDZLpnkKLhwXFoAc76yDtr4ZGvJEO mGOy5/b3TDd8HQoZ9Y2Fc7BjWtSHRDg4 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-ams.rpki-client.org