$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/da1066b9-b6c6-37c2-a9d0-cd5460a56673.roa File: da1066b9-b6c6-37c2-a9d0-cd5460a56673.roa (raw, json) Hash identifier: osSRMOkD1ON6L1NIVI20EPVJ7kRahmxhcbfreKOhxCw= Subject key identifier: 0F:DF:6A:D6:F1:F7:B4:5F:54:10:3D:E2:69:74:97:83:7F:0D:4A:E8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858477230F5AB79E73CF61B488E50 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/da1066b9-b6c6-37c2-a9d0-cd5460a56673.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 212238 IP address blocks: 45.74.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:f5:ab:79:e7:3c:f6:1b:48:8e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=3e729ab9-054c-4f17-a8cc-47e4728e4f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:d4:c1:f9:ee:7f:f1:0f:d5:89:9e:53:12: 19:b6:13:b9:d7:23:1a:1d:71:be:b9:92:7d:18:b1: 50:12:90:5e:fc:f0:8c:3e:5f:4a:9d:45:5c:4b:ab: 4f:c6:0d:1f:83:77:9c:0a:90:c9:77:ec:be:b4:ab: 75:10:98:cc:e0:0a:8a:ba:cf:dc:4f:f8:29:88:4f: 93:a3:a7:4e:38:09:c2:10:95:fc:23:92:9e:2b:17: bd:91:d6:76:e1:5f:20:7b:5e:3d:f6:56:f8:f8:27: c5:76:bb:80:a9:bc:7d:2d:53:a0:b0:bd:48:31:8f: 1a:51:16:d0:c5:22:0e:9f:9a:8d:f7:1d:8e:d5:65: 42:95:30:4a:5c:37:8f:1e:c7:5b:61:89:96:93:b7: 69:07:c2:d0:09:a9:da:65:0b:97:61:dd:ad:d5:d3: 89:ba:5f:ae:d2:e9:4f:6c:da:e0:3e:2e:75:a3:cf: 79:20:1a:79:af:16:dc:24:9b:21:ae:87:1e:c3:d4: f5:3e:c3:2c:80:7c:45:63:08:df:72:72:9c:a8:d2: cd:40:e3:bc:34:34:c7:85:dd:d9:fa:1b:b6:a5:54: fe:fd:29:3f:95:e7:81:9d:fd:26:57:a9:5a:4f:4f: 9f:1b:cb:03:db:51:2d:15:5d:a7:e7:d4:f4:5a:f1: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DF:6A:D6:F1:F7:B4:5F:54:10:3D:E2:69:74:97:83:7F:0D:4A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/da1066b9-b6c6-37c2-a9d0-cd5460a56673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cf:76:0e:d8:1c:bd:a8:4d:02:18:90:f6:46:11:96:d8:3d: 44:f0:46:aa:2a:29:4d:51:65:48:fa:43:92:46:2f:f2:de:32: ea:94:c1:2a:d4:e2:36:8a:0b:9c:ce:7a:cb:00:62:79:bd:41: 78:ec:81:0e:dc:64:7f:c2:ba:77:65:65:96:d8:a2:a7:3d:59: cb:9b:ea:1f:f4:18:2e:c4:f7:c1:86:8b:f3:c4:9b:66:b9:5b: 30:81:05:df:83:7e:8f:97:a8:f3:19:47:27:d2:e3:50:33:5b: db:a5:a4:bf:6c:4b:0c:ca:ba:be:ed:00:b0:2e:e4:0c:16:7a: ce:7b:15:0f:e6:15:3d:60:37:45:3e:80:5b:5d:d3:e5:8f:65: 7f:bd:7a:e7:3c:2a:57:53:e5:ce:d5:ba:dd:00:ae:30:b9:3f: 4e:e7:26:c8:de:e5:25:e6:1a:fe:c5:6d:24:60:14:da:db:07: 2b:08:c7:30:2f:59:3a:a0:62:69:46:2e:89:0a:45:bb:9e:97: 92:08:1b:c5:5f:d3:c8:72:1c:0d:84:de:df:57:dd:2a:c4:38: 02:15:86:25:12:41:73:78:86:48:db:b6:aa:db:2c:29:83:56: 96:5c:9e:92:cd:3c:41:4e:45:a3:fd:2d:dd:4f:9f:52:bf:6c: 71:15:01:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPWreec89htIjlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk M2U3MjlhYjktMDU0Yy00ZjE3LWE4Y2MtNDdlNDcyOGU0ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8nUwfnuf/EP1YmeUxIZthO51yMaHXG+uZJ9 GLFQEpBe/PCMPl9KnUVcS6tPxg0fg3ecCpDJd+y+tKt1EJjM4AqKus/cT/gpiE+T o6dOOAnCEJX8I5KeKxe9kdZ24V8ge1499lb4+CfFdruAqbx9LVOgsL1IMY8aURbQ xSIOn5qN9x2O1WVClTBKXDePHsdbYYmWk7dpB8LQCanaZQuXYd2t1dOJul+u0ulP bNrgPi51o895IBp5rxbcJJshrocew9T1PsMsgHxFYwjfcnKcqNLNQOO8NDTHhd3Z +hu2pVT+/Sk/leeBnf0mV6laT0+fG8sD21EtFV2n59T0WvG/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/fatbx97RfVBA94ml0l4N/DUroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGExMDY2YjktYjZjNi0z N2MyLWE5ZDAtY2Q1NDYwYTU2NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITPdg7YHL2oTQIYkPZGEZbYPUTwRqoqKU1RZUj6Q5JGL/LeMuqUwSrU 4jaKC5zOessAYnm9QXjsgQ7cZH/CundlZZbYoqc9Wcub6h/0GC7E98GGi/PEm2a5 WzCBBd+Dfo+XqPMZRyfS41AzW9ulpL9sSwzKur7tALAu5AwWes57FQ/mFT1gN0U+ gFtd0+WPZX+9euc8KldT5c7Vut0ArjC5P07nJsje5SXmGv7FbSRgFNrbBysIxzAv WTqgYmlGLokKRbuel5IIG8Vf08hyHA2E3t9X3SrEOAIVhiUSQXN4hkjbtqrbLCmD VpZcnpLNPEFORaP9Ld1Pn1K/bHEVAVg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:34 2024 by rpki-client on console-ams.rpki-client.org