$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9c995fb4-5ccc-3574-a75d-ea9890715889.roa File: 9c995fb4-5ccc-3574-a75d-ea9890715889.roa (raw, json) Hash identifier: UGxzRS+Nzfv6vxwerBCxInz/jZ74zhzyj43geMkbrYI= Subject key identifier: 97:A7:D5:5D:D2:5C:94:9A:4D:B2:C1:F7:13:30:32:EC:1C:71:30:CC Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F432858476F6639F53DA07F288DD11300 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9c995fb4-5ccc-3574-a75d-ea9890715889.roa Signing time: Sat 05 Oct 2024 01:00:31 +0000 ROA not before: Sat 05 Oct 2024 01:00:31 +0000 ROA not after: Fri 03 Jan 2025 02:00:31 +0000 asID: 36352 IP address blocks: 45.42.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6f:66:39:f5:3d:a0:7f:28:8d:d1:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Oct 5 01:00:31 2024 GMT Not After : Jan 3 02:00:31 2025 GMT Subject: CN=6a85d8b4-423b-43ba-be16-b4087e43618a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:0c:2b:fe:a4:76:68:01:74:8f:b7:32:71: 1d:31:3d:a3:dc:9c:fc:10:dc:b6:7f:24:5e:88:47: 01:0c:23:12:57:53:91:16:f0:a5:15:6f:7d:eb:0e: 6c:c7:56:f5:9a:c4:f1:1f:e1:39:ec:11:0d:0e:3d: 76:4a:e1:6e:ca:d6:10:f4:6f:34:0a:fd:fe:dc:c6: c0:8b:c7:82:31:e9:9b:0b:37:bb:31:7f:78:9b:61: 24:b7:7a:5e:6d:85:0e:97:b8:5e:33:cf:d1:d3:bf: ac:23:de:49:8f:3e:32:37:96:11:b6:b2:d0:cd:49: 6e:e7:02:67:ad:ef:20:bf:e9:0a:31:e2:cc:a9:a3: 2e:61:73:07:82:2c:db:12:f9:63:21:59:16:8e:a0: 35:d8:55:1e:20:c5:6d:fe:1f:c2:bf:07:a3:85:40: a5:ae:35:3d:90:98:61:99:b6:93:20:26:48:46:40: e1:3c:eb:09:df:39:0f:2f:54:c4:4a:86:4a:ba:bc: 2e:ac:65:a5:4c:52:7f:04:6e:48:dc:ad:b7:2c:2e: e7:81:cf:59:98:15:9f:76:da:e8:66:ca:19:0e:80: e7:c4:94:d0:ce:17:22:83:17:d6:89:ea:0c:5f:6d: 49:7b:80:d0:c8:aa:a5:0c:b3:dd:ef:e1:e4:2a:88: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A7:D5:5D:D2:5C:94:9A:4D:B2:C1:F7:13:30:32:EC:1C:71:30:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9c995fb4-5ccc-3574-a75d-ea9890715889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 45.42.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:99:2d:6b:ab:f5:4b:64:fb:25:83:5e:f8:73:05:63:75:99: e2:84:e9:ef:fa:e9:6f:af:a0:9d:b6:c5:fd:a8:c5:4e:dd:c3: a7:f8:e3:3c:50:0c:96:7e:bb:09:0a:8e:af:fa:25:e5:68:01: 77:01:49:ef:21:08:8e:50:78:d5:a2:ad:65:57:74:ac:4a:95: f7:d0:ba:f0:f1:2c:e3:62:93:96:b8:2b:95:a6:07:c2:96:8b: 76:6c:ba:ad:08:3f:58:16:e0:2d:fd:d0:c7:0a:b9:9a:6a:fa: f8:d3:54:3d:26:ec:ab:b6:e6:ff:ec:1a:48:e6:e5:6e:71:40: fc:0d:b8:3e:e3:b7:b3:4c:09:48:a1:cc:dd:17:00:0e:19:d6: 9c:91:17:48:a2:39:38:5f:0f:e6:54:f7:a0:3d:2b:aa:b0:0b: b3:ca:59:75:90:08:1c:e7:54:7a:96:15:ef:a4:b2:8e:5c:b1: b8:8c:ee:f2:cf:b4:d1:b3:9e:56:a4:10:38:a1:f4:4e:cf:c6: 09:23:29:6e:c2:7b:f7:f6:cc:7a:e0:cd:5b:fd:cc:d9:d6:ab: d3:1e:41:07:71:8c:ac:7d:67:6f:6c:99:91:4d:2a:3a:78:0a: 91:4a:4f:ac:5d:6f:e6:52:59:b6:64:39:b1:b5:9d:41:2d:a3: a1:b5:c0:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdvZjn1PaB/KI3REwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk NmE4NWQ4YjQtNDIzYi00M2JhLWJlMTYtYjQwODdlNDM2MThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrIMK/6kdmgBdI+3MnEdMT2j3Jz8ENy2fyRe iEcBDCMSV1ORFvClFW996w5sx1b1msTxH+E57BENDj12SuFuytYQ9G80Cv3+3MbA i8eCMembCze7MX94m2Ekt3pebYUOl7heM8/R07+sI95Jjz4yN5YRtrLQzUlu5wJn re8gv+kKMeLMqaMuYXMHgizbEvljIVkWjqA12FUeIMVt/h/CvwejhUClrjU9kJhh mbaTICZIRkDhPOsJ3zkPL1TESoZKurwurGWlTFJ/BG5I3K23LC7ngc9ZmBWfdtro ZsoZDoDnxJTQzhcigxfWieoMX21Je4DQyKqlDLPd7+HkKojj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJen1V3SXJSaTbLB9xMwMuwccTDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOWM5OTVmYjQtNWNjYy0z NTc0LWE3NWQtZWE5ODkwNzE1ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+ZLWur9Utk+yWDXvhzBWN1meKE6e/66W+voJ22xf2oxU7dw6f44zxQ DJZ+uwkKjq/6JeVoAXcBSe8hCI5QeNWirWVXdKxKlffQuvDxLONik5a4K5WmB8KW i3Zsuq0IP1gW4C390McKuZpq+vjTVD0m7Ku25v/sGkjm5W5xQPwNuD7jt7NMCUih zN0XAA4Z1pyRF0iiOThfD+ZU96A9K6qwC7PKWXWQCBznVHqWFe+kso5csbiM7vLP tNGznlakEDih9E7PxgkjKW7Ce/f2zHrgzVv9zNnWq9MeQQdxjKx9Z29smZFNKjp4 CpFKT6xdb+ZSWbZkObG1nUEto6G1wC4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:32 2024 by rpki-client on console-fra.rpki-client.org