$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa File: cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json) Hash identifier: BKZ7hiTHXmBo8Z1boPJqLHnbPF4pvnicJICq0lyPqB0= Subject key identifier: 24:A3:68:62:AC:84:2F:25:8D:72:C4:D2:10:9E:19:88:60:01:9D:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285847EE7D50D941B61F9669D37960 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa Signing time: Tue 19 Nov 2024 13:34:50 +0000 ROA not before: Tue 19 Nov 2024 13:34:50 +0000 ROA not after: Mon 17 Feb 2025 13:34:50 +0000 asID: 397204 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:7d:50:d9:41:b6:1f:96:69:d3:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 19 13:34:50 2024 GMT Not After : Feb 17 13:34:50 2025 GMT Subject: CN=e61814ad-7994-4f61-8c80-c9831308a995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c4:15:da:27:75:15:fe:3d:1a:7b:f8:8c:f7: 60:a3:b8:ad:85:e9:c4:25:f3:c3:ec:6b:27:4a:f3: bf:8a:11:98:3a:5f:3e:ba:ca:1f:60:3a:ac:ba:0e: 5e:13:96:b0:a1:e9:2b:f9:fd:f7:8e:ce:61:ef:d7: 29:cd:d0:b1:8a:b8:ad:67:8a:37:c8:0e:87:7b:ef: 74:97:9a:87:85:08:58:e7:4f:d8:0a:d0:c2:76:bc: 11:6e:87:76:a2:0b:35:eb:4a:b2:a0:03:d4:6d:3a: 24:c8:21:7c:a2:60:6c:cf:fc:e2:d3:fa:02:ab:6e: 35:21:3c:93:66:1d:bb:13:8e:9a:fe:51:62:01:52: e4:30:cc:50:da:0d:cb:55:6c:db:8c:03:89:b8:e1: 53:94:16:92:e7:94:3d:67:78:63:e3:b1:bd:b5:2c: 50:a1:86:7c:c8:59:12:45:1e:d9:e1:a1:04:16:f5: ff:32:01:6a:ab:bc:21:0d:32:f3:e3:dd:75:88:bf: 5f:41:5b:12:0c:26:2c:90:0c:d1:4d:f8:61:aa:39: 27:37:2b:e7:64:ee:15:00:f7:e8:b8:70:c0:9c:a0: 15:f6:be:5d:b5:4e:fb:a4:c6:72:bf:23:a2:c8:c2: 5b:3c:b0:da:1d:c3:9a:b1:ad:14:c5:62:72:79:7d: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A3:68:62:AC:84:2F:25:8D:72:C4:D2:10:9E:19:88:60:01:9D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0b:53:ca:fc:35:16:de:0d:2c:cf:64:17:d0:d6:14:9a:c5: 38:ef:40:27:b8:20:35:5a:84:c2:5d:76:04:2a:74:a7:6a:a5: 46:e7:0a:a7:02:ed:d4:84:c4:8a:f7:c7:c5:0d:b7:ee:da:0e: fb:37:f2:a0:10:cf:99:ca:9b:e3:a6:43:37:20:cc:d1:79:d4: 24:4d:1c:d2:54:71:ce:f4:59:61:ab:0e:e4:6f:fd:22:24:be: d8:3e:c4:2f:d0:86:c0:e7:64:27:55:87:c4:c0:0b:fa:df:63: 0b:8f:78:99:ef:06:e9:ba:7f:dc:72:e4:4f:aa:71:82:b0:00: 1b:05:5b:7f:ce:9d:89:67:33:f1:f1:a6:e3:8b:cc:16:f5:5e: 21:79:bc:d4:4b:79:b7:e7:6d:19:b3:b2:65:d8:6d:f9:1e:49: 82:ae:8e:9f:f9:b0:88:25:1c:d8:2c:8f:6c:ae:51:69:99:3e: d5:eb:aa:01:27:a4:2f:1f:b7:aa:6f:7d:e4:b2:49:c8:bf:d3: fc:55:85:52:e2:03:97:f7:88:a4:3b:c1:70:68:7c:35:92:3f: 9d:0b:63:e1:99:a4:df:e4:5f:17:df:c7:33:cd:50:02:e7:85: 8a:6e:01:fe:83:53:03:03:1f:ed:04:ac:c7:eb:f6:dc:21:43: 11:4b:cf:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVDZQbYflmnTeWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk ZTYxODE0YWQtNzk5NC00ZjYxLThjODAtYzk4MzEzMDhhOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksQV2id1Ff49Gnv4jPdgo7ithenEJfPD7Gsn SvO/ihGYOl8+usofYDqsug5eE5awoekr+f33js5h79cpzdCxiritZ4o3yA6He+90 l5qHhQhY50/YCtDCdrwRbod2ogs160qyoAPUbTokyCF8omBsz/zi0/oCq241ITyT Zh27E46a/lFiAVLkMMxQ2g3LVWzbjAOJuOFTlBaS55Q9Z3hj47G9tSxQoYZ8yFkS RR7Z4aEEFvX/MgFqq7whDTLz4911iL9fQVsSDCYskAzRTfhhqjknNyvnZO4VAPfo uHDAnKAV9r5dtU77pMZyvyOiyMJbPLDaHcOasa0UxWJyeX1odQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCSjaGKshC8ljXLE0hCeGYhgAZ24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALC1PK/DUW3g0sz2QX0NYUmsU470AnuCA1WoTCXXYEKnSnaqVG5wqn Au3UhMSK98fFDbfu2g77N/KgEM+ZypvjpkM3IMzRedQkTRzSVHHO9Flhqw7kb/0i JL7YPsQv0IbA52QnVYfEwAv632MLj3iZ7wbpun/ccuRPqnGCsAAbBVt/zp2JZzPx 8abji8wW9V4hebzUS3m3520Zs7Jl2G35HkmCro6f+bCIJRzYLI9srlFpmT7V66oB J6QvH7eqb33ksknIv9P8VYVS4gOX94ikO8FwaHw1kj+dC2PhmaTf5F8X38czzVAC 54WKbgH+g1MDAx/tBKzH6/bcIUMRS88n -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:45 2024 by rpki-client on console-fra.rpki-client.org