$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa File: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (raw, json) Hash identifier: x5mYumWKTUJJqOlXdVKghiIN/GtGCRsfG5hFwbiH0bM= Subject key identifier: D2:88:92:B0:32:C3:E2:53:90:B9:A1:35:1F:51:BD:8F:B2:E2:88:48 Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F43285847802646A312B08FA36D522540 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 30204 IP address blocks: 45.45.194.0/24 maxlen: 24 2602:fc39:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:46:a3:12:b0:8f:a3:6d:52:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=04e2859e-2516-4552-918d-2fde1d0a9b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:19:45:f9:d5:ae:3f:47:bf:10:1b:d6:c7: 3c:b8:0e:ea:98:7d:50:cd:92:85:d2:a9:76:cc:85: 5c:04:02:26:49:29:61:7d:10:e4:70:e5:71:88:8d: 08:44:87:e1:3a:42:ea:c6:ef:d8:46:7c:74:a2:b2: e4:75:9b:76:f6:85:d1:bc:91:f8:e1:51:a4:b7:82: 35:72:18:4a:cb:88:3d:d3:78:c9:3f:d6:de:ea:e9: 3b:fb:f8:c3:d6:94:a9:29:7c:22:33:6d:72:6a:c7: 44:fd:b5:b5:fd:64:eb:74:f1:e6:be:f4:f6:c2:ad: 35:e2:65:16:83:87:b7:82:e9:57:f4:65:d3:6e:0a: d2:95:b6:1e:94:dc:b7:61:9a:b2:61:b1:cb:a6:e4: e6:67:f2:3b:68:1e:99:66:47:04:73:73:43:4a:23: d6:cb:e9:20:c3:8f:f0:5e:a6:ca:3e:c1:1d:17:0c: 28:d9:7c:92:ea:88:80:dd:01:bf:10:78:42:f7:06: 1b:1a:c0:12:21:c7:de:98:8f:10:f7:c7:9d:69:f2: 47:2f:a1:45:16:f4:32:e7:5a:63:ae:80:d0:04:5d: e2:7a:43:89:98:82:cf:d3:19:3d:1e:35:75:51:d3: 44:4e:ab:2a:e0:c1:42:4a:3e:bb:21:ca:31:92:bd: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:88:92:B0:32:C3:E2:53:90:B9:A1:35:1F:51:BD:8F:B2:E2:88:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: 45.45.194.0/24 IPv6: 2602:fc39:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:01:fc:57:c5:9e:be:99:18:bd:89:f2:64:0e:89:8c:f6:a8: d9:39:2f:a2:69:f5:ad:83:38:9e:95:5b:c9:ad:da:4e:53:8e: c9:cd:4c:79:b8:17:4d:49:69:e6:f3:2a:37:73:1e:a3:db:44: ab:09:4a:96:d8:59:73:40:41:36:37:86:19:aa:56:73:da:d4: d7:bb:08:b3:5f:2a:ea:f0:53:41:1d:62:41:25:dd:cf:8e:38: e8:7d:43:50:70:82:e4:5c:e1:58:65:9b:87:1e:3e:92:7f:cc: 43:3c:55:46:a7:6c:44:3b:f8:4b:14:08:ba:7f:0a:37:63:7e: be:d0:b9:26:4c:64:5d:46:95:09:ef:d9:69:0f:b9:5a:96:20: d8:b5:b5:1e:9a:5e:49:ce:f5:97:04:0c:70:a3:33:6f:45:4a: a6:8b:80:a6:28:85:22:83:40:80:e7:af:99:cc:cd:d5:69:fc: c3:07:53:9c:16:e3:f2:15:b0:f0:e2:b6:16:ed:03:81:3e:ff: 87:02:2e:f6:60:8a:f6:43:3a:c6:fc:89:72:2e:ca:82:80:8d: 7a:3e:ec:6b:b6:b9:f5:57:48:56:03:95:5e:8f:ab:ed:77:08: 7f:75:91:e8:08:cf:73:77:58:74:c3:5a:7b:b7:f3:7e:95:c5: 02:84:c2:7b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEeAJkajErCPo21SJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk MDRlMjg1OWUtMjUxNi00NTUyLTkxOGQtMmZkZTFkMGE5YjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf8ZRfnVrj9HvxAb1sc8uA7qmH1QzZKF0ql2 zIVcBAImSSlhfRDkcOVxiI0IRIfhOkLqxu/YRnx0orLkdZt29oXRvJH44VGkt4I1 chhKy4g903jJP9be6uk7+/jD1pSpKXwiM21yasdE/bW1/WTrdPHmvvT2wq014mUW g4e3gulX9GXTbgrSlbYelNy3YZqyYbHLpuTmZ/I7aB6ZZkcEc3NDSiPWy+kgw4/w XqbKPsEdFwwo2XyS6oiA3QG/EHhC9wYbGsASIcfemI8Q98edafJHL6FFFvQy51pj roDQBF3iekOJmILP0xk9HjV1UdNETqsq4MFCSj67Icoxkr0KtwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNKIkrAyw+JTkLmhNR9RvY+y4ohIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvNzk1NWVkMGYtMTE1My0z ODk2LWE1MWUtNWQzNjdiZjBjYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALS3CMA8E AgACMAkDBwAmAvw5AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIwH8V8WevpkYvYnyZA6JjPao2Tkvomn1 rYM4npVbya3aTlOOyc1MebgXTUlp5vMqN3Meo9tEqwlKlthZc0BBNjeGGapWc9rU 17sIs18q6vBTQR1iQSXdz4446H1DUHCC5FzhWGWbhx4+kn/MQzxVRqdsRDv4SxQI un8KN2N+vtC5JkxkXUaVCe/ZaQ+5WpYg2LW1HppeSc71lwQMcKMzb0VKpouApiiF IoNAgOevmczN1Wn8wwdTnBbj8hWw8OK2Fu0DgT7/hwIu9mCK9kM6xvyJci7KgoCN ej7sa7a59VdIVgOVXo+r7XcIf3WR6AjPc3dYdMNae7fzfpXFAoTCew== -----END CERTIFICATE-----Generated at Fri Nov 22 09:32:29 2024 by rpki-client on console-fra.rpki-client.org