$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa File: ae548fa2-acd0-3aa2-9463-b60c668965c8.roa (raw, json) Hash identifier: RlaHtn1TEYDti/uCt/QfP1tP3EgWFh+Dr1J+3nSjoKg= Subject key identifier: A7:91:FB:ED:D2:1C:36:E3:3A:CC:82:52:BE:F9:F6:39:0A:B4:C9:75 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F432858470A8A3337DA0CAAFCE38BE380 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa Signing time: Thu 29 Aug 2024 21:56:29 +0000 ROA not before: Thu 29 Aug 2024 21:56:29 +0000 ROA not after: Wed 27 Nov 2024 22:56:29 +0000 asID: 40495 IP address blocks: 174.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:0a:8a:33:37:da:0c:aa:fc:e3:8b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Aug 29 21:56:29 2024 GMT Not After : Nov 27 22:56:29 2024 GMT Subject: CN=ce45ffb6-6043-430f-8de7-c4ad4b70d8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:53:e8:38:2c:f5:99:8b:04:96:75:36:13:9a: bd:46:49:0c:90:43:6c:c1:f1:7d:e8:e5:a0:22:0c: 3a:ef:38:8c:49:b2:e7:83:fc:1f:36:34:18:63:89: f6:13:50:5e:c4:47:39:ad:80:13:29:89:0e:23:cf: 9b:81:92:eb:14:1b:4c:71:6e:38:48:1f:ff:59:fa: 81:57:44:09:e2:ba:4c:e3:c3:4e:b0:f1:26:cd:60: ef:35:5f:db:17:fe:a3:10:73:6c:55:96:50:6b:79: 17:54:32:ed:5e:f4:d2:c3:6f:07:5d:de:e9:5b:d4: b6:25:51:60:f6:23:a1:ed:ba:cd:6b:73:07:a3:3a: dc:79:f8:aa:84:f5:d2:62:9d:a5:ee:1b:ef:df:40: 50:ee:78:61:a1:2f:c5:19:09:86:99:af:df:49:b3: 4b:8e:e0:f7:02:4a:a1:d8:01:1a:7b:79:49:ed:5f: eb:e7:08:8e:1e:43:99:a9:2c:61:6d:74:ea:d6:2a: 38:a6:43:50:94:4b:d7:62:14:fa:04:62:e9:95:6a: 80:d1:2d:a8:5f:7a:16:0a:9f:05:5c:ef:ad:ad:c9: 2f:4a:23:18:e9:42:dd:1a:3a:cb:d1:a0:da:6f:b6: a1:2c:b2:df:7a:22:b7:98:2e:99:e8:6d:5d:f8:37: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:91:FB:ED:D2:1C:36:E3:3A:CC:82:52:BE:F9:F6:39:0A:B4:C9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cc:03:b0:d4:0f:8a:40:b7:e9:6a:c1:51:1e:58:f2:1c:ab: d9:68:7e:85:64:f7:40:42:fb:7a:ec:57:d5:35:05:16:3f:75: 6c:7a:dd:5c:d3:6d:53:49:48:ba:e2:46:3f:21:5c:de:c6:a8: 2f:78:b9:e3:2a:17:0a:fa:a2:56:03:46:06:c4:ec:56:61:01: 80:50:3c:db:ee:15:2f:c4:02:71:d4:55:62:29:9c:9a:5e:91: 07:2d:8f:bc:57:72:81:0f:c2:01:1a:b4:d6:25:f0:ab:b8:c3: e0:80:61:24:02:b0:33:3d:5c:10:50:63:39:c1:95:47:b1:30: c1:f2:52:62:58:5a:14:73:2e:8f:b1:b3:41:96:df:fd:d8:b3: 37:33:5b:22:d9:17:78:15:60:81:a1:11:ab:e3:3d:e0:58:af: 99:c5:03:81:4e:06:5b:68:b6:23:0f:e1:dd:de:8b:d7:c8:2f: 88:ca:b3:8c:0d:88:0d:b4:d1:51:bd:d2:10:df:54:4b:82:7d: 96:31:cb:af:9d:51:f8:a5:85:9d:c5:96:b7:76:5b:61:8e:f4: cc:a1:f7:da:b5:a8:ac:fa:c5:4b:77:e1:59:48:3a:b6:8e:b4: 70:de:67:e7:6b:31:5b:f9:f8:46:de:1b:20:83:9f:8e:24:c4: 0a:c9:15:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcKijM32gyq/OOL44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI0MDgyOTIxNTYyOVoXDTI0MTEyNzIyNTYyOVowLzEtMCsGA1UEAxMk Y2U0NWZmYjYtNjA0My00MzBmLThkZTctYzRhZDRiNzBkOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VPoOCz1mYsElnU2E5q9RkkMkENswfF96OWg Igw67ziMSbLng/wfNjQYY4n2E1BexEc5rYATKYkOI8+bgZLrFBtMcW44SB//WfqB V0QJ4rpM48NOsPEmzWDvNV/bF/6jEHNsVZZQa3kXVDLtXvTSw28HXd7pW9S2JVFg 9iOh7brNa3MHozrcefiqhPXSYp2l7hvv30BQ7nhhoS/FGQmGma/fSbNLjuD3Akqh 2AEae3lJ7V/r5wiOHkOZqSxhbXTq1io4pkNQlEvXYhT6BGLplWqA0S2oX3oWCp8F XO+trckvSiMY6ULdGjrL0aDab7ahLLLfeiK3mC6Z6G1d+DchgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeR++3SHDbjOsyCUr759jkKtMl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYWU1NDhmYTItYWNkMC0z YWEyLTk0NjMtYjYwYzY2ODk2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfMA7DUD4pAt+lqwVEeWPIcq9lofoVk90BC+3rsV9U1BRY/dWx63VzT bVNJSLriRj8hXN7GqC94ueMqFwr6olYDRgbE7FZhAYBQPNvuFS/EAnHUVWIpnJpe kQctj7xXcoEPwgEatNYl8Ku4w+CAYSQCsDM9XBBQYznBlUexMMHyUmJYWhRzLo+x s0GW3/3YszczWyLZF3gVYIGhEavjPeBYr5nFA4FOBltotiMP4d3ei9fIL4jKs4wN iA200VG90hDfVEuCfZYxy6+dUfilhZ3Flrd2W2GO9Myh99q1qKz6xUt34VlIOraO tHDeZ+drMVv5+EbeGyCDn44kxArJFdU= -----END CERTIFICATE-----Generated at Sun Nov 10 03:36:02 2024 by rpki-client on console-ams.rpki-client.org