$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa File: cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa (raw, json) Hash identifier: /AmZ8XwzpR7PVP/tXK1q49/D2Kg6b9Jx0EM4NUGwmow= Subject key identifier: BD:98:55:FC:38:0B:CC:3E:26:23:85:DA:AC:60:48:B8:1E:D2:0A:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5CA327074E212D85B4D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 397200 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:ca:32:70:74:e2:12:d8:5b:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=f8646110-75bf-4663-9b78-2c11d217151d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:48:52:36:2f:10:27:d6:4a:d2:b7:2c:54: bb:c4:f1:c4:60:12:dc:c2:38:67:f0:9a:2f:78:ca: dc:1c:3d:74:6a:bf:83:d0:8f:31:ad:99:fc:61:f5: 8f:47:c5:7b:cc:b6:f1:fb:95:ec:95:af:a3:be:f1: d8:ed:37:5f:61:e5:29:3c:ef:60:ff:04:77:a2:fc: 82:5f:ed:fa:66:31:a8:3e:b4:3f:77:a3:9a:09:c4: 20:18:b8:b2:4d:e0:26:fa:a1:69:60:ad:48:ff:e2: 9f:21:fe:34:d2:39:7b:c8:3e:f9:a5:7b:f1:26:19: 8b:3f:0e:c2:ef:4d:e1:e7:51:7b:0f:f6:25:c5:6a: 68:0c:2f:d1:3b:bc:66:f1:04:63:8d:bd:94:d6:a4: 8d:75:27:2c:e8:be:ea:13:70:bc:4f:fb:1f:63:da: cc:ed:5f:29:ae:bc:9f:e0:69:17:8e:d5:b7:93:4d: c9:d3:68:7c:46:41:fe:7e:83:0e:0b:17:b2:67:3f: cb:2b:fc:f0:52:2e:12:89:d4:d0:28:ec:4e:a0:e3: af:3b:a2:10:1f:2f:06:58:fe:66:23:ae:b3:08:3a: cf:38:46:e4:19:39:0c:e5:c0:fb:d0:15:e8:05:18: 62:53:25:e2:60:d8:78:93:1f:65:bd:fc:74:e1:89: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:98:55:FC:38:0B:CC:3E:26:23:85:DA:AC:60:48:B8:1E:D2:0A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2a:61:e7:5d:49:28:7f:dc:b9:87:11:83:49:06:5c:97:38: d1:5c:12:3d:90:51:18:17:38:e8:6f:f4:df:83:18:98:64:46: 0b:6e:c6:83:51:ae:72:82:12:c4:0c:31:1c:7f:bd:08:d0:28: 46:3b:cb:5a:0c:f1:73:39:3d:a2:3e:7b:c8:44:fd:7f:5d:2c: cd:0d:ad:34:e7:45:0c:49:43:34:08:c3:28:7b:8b:ac:e1:8c: 9c:28:fa:1c:1c:2b:35:ba:52:6c:9d:fa:31:0c:a4:9e:99:32: 06:a1:39:58:12:bf:cf:74:66:bb:7e:dc:24:5c:df:ff:80:28: 39:23:4b:79:95:a9:29:44:cc:fa:07:ae:39:37:b3:de:6f:6d: 06:3d:61:fe:ed:8b:95:4e:08:80:62:5d:d0:da:76:59:28:ee: 17:9f:04:c2:10:4f:f3:06:a0:4e:c9:0e:a1:07:02:73:c1:f3: 5b:d6:f1:5d:ae:0b:7c:b9:47:11:0a:71:5f:04:44:56:2c:c4: aa:a7:34:0b:a8:68:31:73:e4:b0:53:0f:81:8f:20:46:20:0a: c0:a0:82:70:91:d8:34:a7:e7:18:4b:ed:f1:5d:ac:7d:e4:25: ac:1f:31:3c:3f:d2:71:05:22:74:da:ac:ca:1e:9f:01:9f:6c: c7:9f:2b:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1coycHTiEthbTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Zjg2NDYxMTAtNzViZi00NjYzLTliNzgtMmMxMWQyMTcxNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYZIUjYvECfWStK3LFS7xPHEYBLcwjhn8Jov eMrcHD10ar+D0I8xrZn8YfWPR8V7zLbx+5Xsla+jvvHY7TdfYeUpPO9g/wR3ovyC X+36ZjGoPrQ/d6OaCcQgGLiyTeAm+qFpYK1I/+KfIf400jl7yD75pXvxJhmLPw7C 703h51F7D/YlxWpoDC/RO7xm8QRjjb2U1qSNdScs6L7qE3C8T/sfY9rM7V8prryf 4GkXjtW3k03J02h8RkH+foMOCxeyZz/LK/zwUi4SidTQKOxOoOOvO6IQHy8GWP5m I66zCDrPOEbkGTkM5cD70BXoBRhiUyXiYNh4kx9lvfx04Ylr9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL2YVfw4C8w+JiOF2qxgSLge0grdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4ZTc0ZjgtN2EyZi0z ZDg1LTk0NWEtZDNlMTU5MGJiYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbKmHnXUkof9y5hxGDSQZclzjRXBI9kFEYFzjob/TfgxiYZEYLbsaD Ua5yghLEDDEcf70I0ChGO8taDPFzOT2iPnvIRP1/XSzNDa0050UMSUM0CMMoe4us 4YycKPocHCs1ulJsnfoxDKSemTIGoTlYEr/PdGa7ftwkXN//gCg5I0t5lakpRMz6 B645N7Peb20GPWH+7YuVTgiAYl3Q2nZZKO4XnwTCEE/zBqBOyQ6hBwJzwfNb1vFd rgt8uUcRCnFfBERWLMSqpzQLqGgxc+SwUw+BjyBGIArAoIJwkdg0p+cYS+3xXax9 5CWsHzE8P9JxBSJ02qzKHp8Bn2zHnytn -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:45 2024 by rpki-client on console-fra.rpki-client.org