$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa File: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (raw, json) Hash identifier: 0IBPL/3a6yk6WvNATHmAXZrt+IzZbqiy7rXnrzmUobo= Subject key identifier: C8:EE:5D:AF:3B:2A:E0:5D:8D:F0:A4:C8:D2:8F:2D:F4:4F:E1:A2:85 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F4328584765A0EE770E08D66D66A01080 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 399769 IP address blocks: 45.45.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:ee:77:0e:08:d6:6d:66:a0:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=d915468f-f0ce-43f1-bc9d-c971666c75e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:2c:60:69:32:51:b6:04:16:5c:b3:21:1f: b0:1e:c6:1e:71:36:dd:9e:7a:1c:ef:e9:3e:41:0c: 8d:b3:8d:1c:58:b3:d9:77:00:8a:00:e5:8d:52:02: 1e:d1:0b:3c:62:11:57:fc:68:8d:a6:42:c9:c7:1b: cb:7a:7f:55:e7:d1:48:2c:2a:26:bc:81:fa:43:62: b3:29:fc:02:61:5d:db:c2:e8:2e:41:c6:f8:ab:90: e8:97:a7:c4:f9:ec:b4:13:f4:0f:00:d2:9d:15:60: d1:6f:97:9c:9a:04:ba:e2:8b:91:ae:f5:fc:5b:b5: e8:1f:2b:9a:5d:17:0a:39:73:46:bf:b7:82:99:21: 3c:a4:60:22:bf:2b:52:a4:8b:53:4f:74:d0:36:b6: f2:d2:40:8b:f1:30:8e:97:ba:fc:d0:b9:f2:da:51: 15:1d:a8:fd:94:03:37:65:c0:9a:69:00:2d:c9:7b: e1:b6:da:77:ac:94:b1:20:53:19:3b:94:e8:d7:93: 02:61:e5:42:22:2a:3b:aa:a8:7c:4e:88:b4:6d:34: 9d:4e:1b:b7:09:45:6e:91:74:98:9c:68:4c:e0:8e: 57:7b:e0:fd:eb:42:fc:e7:91:46:32:25:03:a9:4f: 03:91:d0:5b:2d:9f:37:6b:a5:5b:9b:c5:d7:b3:47: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:5D:AF:3B:2A:E0:5D:8D:F0:A4:C8:D2:8F:2D:F4:4F:E1:A2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: 45.45.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:66:18:39:30:2d:3b:41:46:4d:aa:d6:7d:70:d2:de:1c:d4: ce:ee:a9:3f:f7:c3:1c:91:6e:04:46:00:cd:b5:9d:a3:9f:fa: 6c:83:56:8b:7d:39:1e:72:41:d0:60:4e:f3:bc:ca:a1:56:cf: 46:7e:49:29:79:84:99:c6:a1:6d:d3:e8:47:93:6b:6b:86:28: 33:7c:58:00:39:78:2b:82:1f:4c:bd:43:df:94:18:ad:f9:78: a5:3f:b1:a1:c7:5c:a1:9a:94:f0:aa:af:d8:4f:46:e7:dd:24: bc:c1:d4:c6:c6:e4:7d:5d:eb:4b:fe:fb:5f:d9:da:29:d6:3f: 23:ff:29:1c:f5:98:38:c6:90:35:c3:7b:3e:86:28:de:87:92: 2e:a0:e9:f2:7d:6c:ef:99:83:40:2e:02:35:46:da:9b:13:0d: 75:50:9d:f7:17:14:52:0d:c7:00:17:d1:95:d5:05:8a:8a:95: 56:5d:85:55:a4:c9:8e:92:ac:e2:dc:87:c6:a8:8f:20:c5:a0: 94:cd:44:2d:42:0b:8f:a1:a5:53:c1:0c:a3:78:49:13:a3:d5: 0c:c2:03:a0:18:5b:bb:ae:ae:ae:96:15:20:46:32:f9:58:c8: 57:99:88:9f:0f:87:c9:54:2d:c2:7f:74:9e:26:db:01:46:38: 30:ad:7c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloO53DgjWbWagEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk ZDkxNTQ2OGYtZjBjZS00M2YxLWJjOWQtYzk3MTY2NmM3NWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FksYGkyUbYEFlyzIR+wHsYecTbdnnoc7+k+ QQyNs40cWLPZdwCKAOWNUgIe0Qs8YhFX/GiNpkLJxxvLen9V59FILComvIH6Q2Kz KfwCYV3bwuguQcb4q5Dol6fE+ey0E/QPANKdFWDRb5ecmgS64ouRrvX8W7XoHyua XRcKOXNGv7eCmSE8pGAivytSpItTT3TQNrby0kCL8TCOl7r80Lny2lEVHaj9lAM3 ZcCaaQAtyXvhttp3rJSxIFMZO5To15MCYeVCIio7qqh8Toi0bTSdThu3CUVukXSY nGhM4I5Xe+D960L855FGMiUDqU8DkdBbLZ83a6Vbm8XXs0cwvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjuXa87KuBdjfCkyNKPLfRP4aKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvNWUwMDg1OWYtYmYyMC0z ODhkLWE0MDAtOTRlNGMwOWUzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFmGDkwLTtBRk2q1n1w0t4c1M7uqT/3wxyRbgRGAM21naOf+myDVot9 OR5yQdBgTvO8yqFWz0Z+SSl5hJnGoW3T6EeTa2uGKDN8WAA5eCuCH0y9Q9+UGK35 eKU/saHHXKGalPCqr9hPRufdJLzB1MbG5H1d60v++1/Z2inWPyP/KRz1mDjGkDXD ez6GKN6Hki6g6fJ9bO+Zg0AuAjVG2psTDXVQnfcXFFINxwAX0ZXVBYqKlVZdhVWk yY6SrOLch8aojyDFoJTNRC1CC4+hpVPBDKN4SROj1QzCA6AYW7uurq6WFSBGMvlY yFeZiJ8Ph8lULcJ/dJ4m2wFGODCtfMM= -----END CERTIFICATE-----Generated at Fri Nov 22 12:10:51 2024 by rpki-client on console-ams.rpki-client.org