$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa File: c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa (raw, json) Hash identifier: VNVjWK8Wa/0MawsnwzcegNr3kxGs2YQkEZdmFcxozsw= Subject key identifier: E1:DE:0D:8D:54:28:35:03:7C:48:CE:EC:8B:98:15:39:B9:C2:D0:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5D6DD453B3A6F39A0F040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 397204 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:d6:dd:45:3b:3a:6f:39:a0:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=f7801423-40c8-4c7f-b9cb-07d96ea6ff82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bd:04:a4:93:8f:60:56:94:b4:f3:5c:e2:f1: 1e:9b:fc:7f:e4:e5:c9:68:3c:3b:88:63:2e:86:e6: 7a:25:bd:a5:64:17:8f:d3:95:9c:61:bf:8d:47:a9: f0:51:c1:ba:dc:d0:a3:d7:3c:bb:09:6d:98:9c:1a: 00:9d:9d:83:fa:81:30:b1:e3:b3:fb:8b:2b:75:c9: fb:04:29:fb:2b:bf:f1:76:e2:a3:66:54:76:0c:97: 33:6c:26:f3:4f:64:fd:8c:56:bf:61:b3:b4:e6:d2: 1c:29:2b:d2:a5:70:6f:0d:aa:f5:44:85:cc:89:91: 0c:84:73:c8:fa:c7:80:e6:50:a2:ec:f4:d9:44:26: 7c:63:52:7e:36:82:ef:d8:d2:de:85:f6:fd:02:68: ff:18:7f:e9:4b:6b:50:f0:4e:1b:3e:81:0f:81:80: 5d:cb:f7:b9:44:39:3c:6c:cc:fe:eb:38:4c:17:b9: 65:9a:09:6e:c4:fb:dc:1c:07:4b:07:ff:bc:fd:1b: 44:e2:d7:22:8b:39:25:c0:3b:08:6f:ff:f3:af:cc: 06:60:51:9c:f7:53:47:eb:aa:25:30:23:f0:a9:be: 5d:c4:9d:a5:8c:ee:5f:3f:e1:97:58:5c:b0:6b:a4: c4:a1:e1:0b:8e:13:60:40:9c:5b:75:9d:06:5d:4c: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:0D:8D:54:28:35:03:7C:48:CE:EC:8B:98:15:39:B9:C2:D0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:29:40:ff:86:70:91:44:32:f8:29:5b:e7:bc:a5:43:7a:a3: db:7e:24:d4:62:71:9b:bb:1b:21:8c:b4:5f:7b:5d:22:f6:5c: 6f:47:3d:30:d0:22:50:64:71:c3:8c:3c:2f:9c:4a:37:6a:66: 30:fd:85:20:9c:43:1a:ee:5c:d9:8d:40:94:3c:c5:b3:8b:57: 9b:ab:a6:7f:d5:ae:63:c1:69:16:eb:31:67:f4:45:8a:14:51: ca:ac:db:4c:b7:1f:71:84:a9:63:c1:2f:99:14:b9:35:1d:65: d7:71:99:38:48:c7:57:b6:ac:20:37:b4:22:32:7e:9b:5c:5c: bd:de:27:bb:26:8f:c6:38:4d:25:45:e5:3d:c1:30:59:10:83: 0e:99:e2:e1:c4:04:d7:34:2c:15:da:61:86:7c:d0:c9:cd:12: b2:4f:56:44:72:dd:de:05:f0:7d:cb:d0:2c:38:c7:ef:f0:f7: 3e:33:60:31:9e:bd:52:b8:83:a4:91:fc:eb:50:ec:b0:3e:03: 39:1c:a0:82:da:64:75:96:93:b1:b0:81:96:c8:74:cb:6d:39: ac:10:f4:d6:09:19:eb:97:e5:0d:c3:ef:1e:42:45:30:ce:49: 8b:f1:b1:8e:2a:fa:8c:af:52:16:eb:79:ab:9d:ba:f1:e1:1c: 7e:ce:0d:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dbdRTs6bzmg8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Zjc4MDE0MjMtNDBjOC00YzdmLWI5Y2ItMDdkOTZlYTZmZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA370EpJOPYFaUtPNc4vEem/x/5OXJaDw7iGMu huZ6Jb2lZBeP05WcYb+NR6nwUcG63NCj1zy7CW2YnBoAnZ2D+oEwseOz+4srdcn7 BCn7K7/xduKjZlR2DJczbCbzT2T9jFa/YbO05tIcKSvSpXBvDar1RIXMiZEMhHPI +seA5lCi7PTZRCZ8Y1J+NoLv2NLehfb9Amj/GH/pS2tQ8E4bPoEPgYBdy/e5RDk8 bMz+6zhMF7llmgluxPvcHAdLB/+8/RtE4tciizklwDsIb//zr8wGYFGc91NH66ol MCPwqb5dxJ2ljO5fP+GXWFywa6TEoeELjhNgQJxbdZ0GXUyDTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOHeDY1UKDUDfEjO7IuYFTm5wtCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzNiYzFlYTktM2JhYi0z OTY0LTlmNTktMzAzMmE0YzNjZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0KUD/hnCRRDL4KVvnvKVDeqPbfiTUYnGbuxshjLRfe10i9lxvRz0w 0CJQZHHDjDwvnEo3amYw/YUgnEMa7lzZjUCUPMWzi1ebq6Z/1a5jwWkW6zFn9EWK FFHKrNtMtx9xhKljwS+ZFLk1HWXXcZk4SMdXtqwgN7QiMn6bXFy93ie7Jo/GOE0l ReU9wTBZEIMOmeLhxATXNCwV2mGGfNDJzRKyT1ZEct3eBfB9y9AsOMfv8Pc+M2Ax nr1SuIOkkfzrUOywPgM5HKCC2mR1lpOxsIGWyHTLbTmsEPTWCRnrl+UNw+8eQkUw zkmL8bGOKvqMr1IW63mrnbrx4Rx+zg3+ -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:44 2024 by rpki-client on console-fra.rpki-client.org