$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa File: c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa (raw, json) Hash identifier: omM1LN4KqeXO470dBAdi3oPlcX2hiheHwAcVpsrh60U= Subject key identifier: 5A:84:E3:32:3B:38:4C:67:82:A6:2E:C2:A1:46:51:61:A8:7C:33:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D5114E3515C8E667B7650 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa Signing time: Tue 19 Nov 2024 13:34:50 +0000 ROA not before: Tue 19 Nov 2024 13:34:50 +0000 ROA not after: Mon 17 Feb 2025 13:34:50 +0000 asID: 36631 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:51:14:e3:51:5c:8e:66:7b:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:50 2024 GMT Not After : Feb 17 13:34:50 2025 GMT Subject: CN=6fcb0023-5e66-4d9e-a4e3-5c6d200a8c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:a8:fa:ea:7b:88:3c:b9:07:c2:9e:b7:4b: 28:0b:25:a2:86:c0:db:04:b4:de:1c:bc:19:4e:e1: ce:ff:88:13:83:79:e0:b2:df:db:6a:0d:aa:66:87: cd:9d:8f:fd:19:5f:7e:c9:86:f5:96:74:94:d9:10: f5:d1:67:5f:c4:b8:0e:d3:06:11:11:15:7b:ef:5c: ab:ee:e3:f6:78:04:ca:c6:70:5a:cf:58:07:17:a8: 37:95:a6:8d:95:56:8c:9c:95:ec:a7:2d:2d:51:63: 27:05:78:93:d1:dd:4d:68:04:63:36:07:f5:db:3f: 53:c0:a3:36:90:6a:1f:63:8d:d2:f4:18:53:14:0b: 00:09:38:19:f2:71:6f:66:61:a0:e4:0d:4a:3c:c8: c6:84:e3:c8:74:2b:09:a8:22:42:c2:bc:44:c2:74: 6e:aa:bd:93:cb:00:91:c2:51:1b:0b:05:72:5e:d5: 8c:98:66:dd:ef:00:94:57:fd:d2:28:2f:93:1f:a6: ce:5c:e8:3b:33:a9:c7:fc:7e:db:62:e1:92:20:b9: 4b:76:ee:1e:ae:ed:7f:76:82:0e:42:4c:27:02:40: 8b:48:6c:9e:6b:0c:49:64:5a:7c:81:c3:cf:0d:aa: d6:2b:b3:87:4a:ce:38:ba:eb:a0:0d:ec:a7:b6:58: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:84:E3:32:3B:38:4C:67:82:A6:2E:C2:A1:46:51:61:A8:7C:33:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7706a4f-b5f4-3e8c-9407-a3412dcde0cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0d:97:4a:8a:f8:d9:8f:6a:c5:31:f7:f4:e0:b4:34:d8:19: 70:0b:8a:3c:b9:7e:ae:cc:e1:b0:84:7a:d8:a8:3b:6a:0f:e6: 57:ee:5b:f3:8a:4c:80:80:34:8a:ac:3c:d2:0a:41:b9:eb:81: 6d:35:47:09:b1:bc:d2:31:ad:ef:98:9d:75:18:8b:50:54:d9: 9d:4b:c1:6b:da:46:f2:f7:b7:b2:35:d1:fa:bf:fe:61:36:a1: 08:5a:84:24:22:f2:18:9d:32:ff:5d:a7:4e:79:63:68:75:b8: 24:c5:04:1e:6b:ac:be:0f:3c:ef:51:6b:42:86:8d:e7:68:24: 62:df:66:db:a5:bb:0f:43:67:98:1e:65:5c:67:ed:c2:82:ad: 12:55:5f:d3:26:d7:cb:03:97:e0:22:55:bc:89:82:b0:c2:ab: 9f:9f:1d:bd:15:35:0d:5f:81:5c:96:65:7a:33:d5:25:54:37: c9:ad:69:60:80:e1:23:cd:95:ce:32:9a:7e:f8:50:75:6e:6e: 44:f2:69:ec:6d:80:b8:ab:9f:44:aa:47:20:cb:b3:db:51:3f: e4:2c:0d:f1:d1:11:81:36:d3:63:66:c7:84:61:56:20:72:16: 7b:56:81:be:d0:0b:dd:af:07:7d:c1:1a:54:65:87:cc:e1:13: d4:48:9a:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVEU41FcjmZ7dlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk NmZjYjAwMjMtNWU2Ni00ZDllLWE0ZTMtNWM2ZDIwMGE4YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkSo+up7iDy5B8Ket0soCyWihsDbBLTeHLwZ TuHO/4gTg3ngst/bag2qZofNnY/9GV9+yYb1lnSU2RD10WdfxLgO0wYRERV771yr 7uP2eATKxnBaz1gHF6g3laaNlVaMnJXspy0tUWMnBXiT0d1NaARjNgf12z9TwKM2 kGofY43S9BhTFAsACTgZ8nFvZmGg5A1KPMjGhOPIdCsJqCJCwrxEwnRuqr2TywCR wlEbCwVyXtWMmGbd7wCUV/3SKC+TH6bOXOg7M6nH/H7bYuGSILlLdu4eru1/doIO QkwnAkCLSGyeawxJZFp8gcPPDarWK7OHSs44uuugDeyntljARwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFqE4zI7OExngqYuwqFGUWGofDOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzc3MDZhNGYtYjVmNC0z ZThjLTk0MDctYTM0MTJkY2RlMGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqDZdKivjZj2rFMff04LQ02BlwC4o8uX6uzOGwhHrYqDtqD+ZX7lvz ikyAgDSKrDzSCkG564FtNUcJsbzSMa3vmJ11GItQVNmdS8Fr2kby97eyNdH6v/5h NqEIWoQkIvIYnTL/XadOeWNodbgkxQQea6y+DzzvUWtCho3naCRi32bbpbsPQ2eY HmVcZ+3Cgq0SVV/TJtfLA5fgIlW8iYKwwqufnx29FTUNX4FclmV6M9UlVDfJrWlg gOEjzZXOMpp++FB1bm5E8mnsbYC4q59Eqkcgy7PbUT/kLA3x0RGBNtNjZseEYVYg chZ7VoG+0Avdrwd9wRpUZYfM4RPUSJo9 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:23 2024 by rpki-client on console-ams.rpki-client.org