$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efd81396-5147-3c24-9cee-58957a065927.roa File: efd81396-5147-3c24-9cee-58957a065927.roa (raw, json) Hash identifier: 9AoaMya8zPwxxhNPkcAC8UTou7NsvVPUmb+t1tR1FIg= Subject key identifier: 95:79:0A:A3:A1:49:72:B4:CB:77:16:22:E3:93:3E:5F:53:37:08:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5D6764E3F68AB1AA47500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efd81396-5147-3c24-9cee-58957a065927.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 36624 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:d6:76:4e:3f:68:ab:1a:a4:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=1a74b545-6ea0-4ac9-a885-19cca6dcf787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:fb:49:c4:8a:4e:7f:0a:b4:52:c0:2d:b5: 4c:99:4f:4c:70:fe:92:26:92:8f:1a:d0:31:2d:34: 80:83:04:94:fb:0b:6b:64:85:f8:67:b5:4d:a5:a1: 28:35:14:05:8b:5e:5d:62:1b:58:77:5e:d7:79:8c: f4:fd:93:3f:5c:0f:db:e6:68:91:6d:be:03:01:86: 6c:b1:b0:f0:e0:3a:46:c4:ff:76:90:37:38:89:2c: c2:ee:ac:eb:72:07:8a:e2:a2:82:0f:98:7d:d4:42: a0:7d:97:7f:78:29:10:35:a1:a5:8f:fe:70:34:26: 8a:d2:db:06:cd:b4:e1:aa:79:06:e7:61:75:ed:61: 7f:f4:7c:8a:55:b7:08:f9:72:bd:03:af:43:aa:8f: 28:40:a9:dc:51:1b:d5:d9:69:43:29:e6:b9:f5:f4: c0:1c:5d:c6:d8:f7:16:db:23:41:3c:c8:a6:8e:07: c6:cf:c2:46:a2:78:6f:49:cc:0b:d8:95:82:b0:ea: 89:26:21:d3:c9:b3:c3:6f:f4:02:7f:50:c0:39:99: 55:89:00:fe:74:b5:0a:b7:d4:b8:33:e3:9a:52:dc: 43:5e:07:0e:ec:07:d8:04:74:45:bb:23:56:e4:7f: 53:22:69:df:d7:d8:a3:28:69:0a:4c:c0:c3:a7:80: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:0A:A3:A1:49:72:B4:CB:77:16:22:E3:93:3E:5F:53:37:08:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efd81396-5147-3c24-9cee-58957a065927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:33:af:77:68:29:06:c4:0b:e3:c8:37:c1:31:e3:4d:d5:16: ec:24:26:da:04:14:73:7d:a2:61:63:bd:b4:6b:f8:ff:f7:bf: 02:df:7d:1f:1b:fe:d5:e4:ac:85:89:69:13:62:7c:97:93:ca: 15:65:d8:b2:9e:b1:f3:ec:74:0c:c0:c3:4d:8d:c4:61:f6:31: 17:b6:6e:b6:2b:67:4b:12:23:16:35:60:d9:06:b6:84:5d:51: 8d:88:14:d5:a1:d6:63:77:9e:d3:81:02:b7:80:e8:02:54:59: 1a:00:cc:27:eb:0a:9c:87:d0:3f:26:ab:3f:0f:b0:91:73:6f: 9b:62:d1:4a:d7:1d:fe:73:a5:da:c3:a0:fa:28:4d:a6:5d:d2: 42:f2:cb:db:c4:99:09:5f:ca:38:87:a0:f7:f4:00:db:8d:15: 88:01:c8:5b:90:9f:19:b1:c1:30:f6:5b:71:e9:1b:c8:e7:91: 7c:eb:26:8d:7b:fe:45:fa:99:80:e4:7f:2e:92:55:db:4c:ea: 0c:64:6f:fb:c5:6a:f1:66:b2:ea:40:3d:d3:90:db:ed:82:88: 94:c1:7c:16:cd:4b:8b:36:07:7d:50:5b:cb:78:fd:3e:9a:28: 30:6c:50:a1:23:18:01:de:f5:d5:29:52:b8:49:a3:91:96:4c: 9e:2e:ab:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dZ2Tj9oqxqkdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MWE3NGI1NDUtNmVhMC00YWM5LWE4ODUtMTljY2E2ZGNmNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoev7ScSKTn8KtFLALbVMmU9McP6SJpKPGtAx LTSAgwSU+wtrZIX4Z7VNpaEoNRQFi15dYhtYd17XeYz0/ZM/XA/b5miRbb4DAYZs sbDw4DpGxP92kDc4iSzC7qzrcgeK4qKCD5h91EKgfZd/eCkQNaGlj/5wNCaK0tsG zbThqnkG52F17WF/9HyKVbcI+XK9A69Dqo8oQKncURvV2WlDKea59fTAHF3G2PcW 2yNBPMimjgfGz8JGonhvScwL2JWCsOqJJiHTybPDb/QCf1DAOZlViQD+dLUKt9S4 M+OaUtxDXgcO7AfYBHRFuyNW5H9TImnf19ijKGkKTMDDp4De+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJV5CqOhSXK0y3cWIuOTPl9TNwiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWZkODEzOTYtNTE0Ny0z YzI0LTljZWUtNTg5NTdhMDY1OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNM693aCkGxAvjyDfBMeNN1RbsJCbaBBRzfaJhY720a/j/978C330f G/7V5KyFiWkTYnyXk8oVZdiynrHz7HQMwMNNjcRh9jEXtm62K2dLEiMWNWDZBraE XVGNiBTVodZjd57TgQK3gOgCVFkaAMwn6wqch9A/Jqs/D7CRc2+bYtFK1x3+c6Xa w6D6KE2mXdJC8svbxJkJX8o4h6D39ADbjRWIAchbkJ8ZscEw9ltx6RvI55F86yaN e/5F+pmA5H8uklXbTOoMZG/7xWrxZrLqQD3TkNvtgoiUwXwWzUuLNgd9UFvLeP0+ migwbFChIxgB3vXVKVK4SaORlkyeLqsL -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:26 2024 by rpki-client on console-ams.rpki-client.org