$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa File: c3a4120a-832f-3d49-9b46-e10f35565a99.roa (raw, json) Hash identifier: 1+CrV+Q8qUkK8ZWqjha9SgkXKTxRRCXYOZrSlEp0kLM= Subject key identifier: DF:48:42:B7:85:73:3D:27:B8:F6:A9:3F:19:B3:B0:20:2E:5A:57:1A Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F432858471DFE6F07F82A06D97EF6AB80 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa Signing time: Thu 05 Sep 2024 21:11:03 +0000 ROA not before: Thu 05 Sep 2024 21:11:03 +0000 ROA not after: Wed 04 Dec 2024 22:11:03 +0000 asID: 31898 IP address blocks: 174.137.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1d:fe:6f:07:f8:2a:06:d9:7e:f6:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Sep 5 21:11:03 2024 GMT Not After : Dec 4 22:11:03 2024 GMT Subject: CN=4d1b862b-8c37-4b5a-bf7f-327e6e3da4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:0c:a6:f4:32:99:77:f9:45:f7:69:8c:a7: 00:a7:90:88:d8:94:aa:29:3c:d1:58:e5:e7:cd:d9: c0:60:10:d9:32:fa:d2:00:63:bc:87:87:30:f2:cb: 34:8e:20:2b:b7:cd:dd:fb:89:82:7c:30:ad:7d:6d: 0e:9b:2a:23:47:0d:63:46:12:44:58:48:84:0b:27: 24:22:46:30:7a:cb:87:58:fc:c9:6e:db:fa:1e:4d: e1:c8:f0:f5:0a:6f:ae:2a:70:55:50:f5:b0:87:91: 62:8a:15:2b:4a:21:45:46:ec:69:05:9e:78:6f:98: 59:37:fc:df:6c:23:5a:4c:dd:f2:7a:6b:71:71:cf: 89:bd:43:25:60:2a:f0:1d:d5:76:30:a9:ff:c5:64: 76:71:bd:ec:9b:25:f5:c5:52:37:73:14:d9:ee:f5: cd:51:43:91:1b:91:e0:48:64:ac:e2:f3:01:73:6b: 8e:14:ac:bd:f7:0d:b6:f0:77:c6:a6:f5:bf:ba:57: 5d:87:d4:2f:aa:08:4e:4e:13:81:e2:b6:11:e9:a4: da:2b:b4:13:4d:d0:bd:df:d0:39:14:4b:dd:4a:eb: 21:00:57:a5:dc:1d:81:6a:fc:5b:23:94:fe:c5:09: 49:a1:bc:7c:0a:dd:cd:f8:7f:05:c1:54:b1:79:8c: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:48:42:B7:85:73:3D:27:B8:F6:A9:3F:19:B3:B0:20:2E:5A:57:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c3a4120a-832f-3d49-9b46-e10f35565a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f7:cd:e7:f2:0f:d5:5e:39:a3:cb:a7:44:58:f4:0c:f1:bf: 24:2c:af:91:e8:98:7d:66:ee:d8:42:69:f3:0a:fc:ba:ca:0f: df:a3:33:7e:13:c0:76:f6:3b:e2:9d:14:3c:90:85:a1:33:18: b7:e9:fb:b8:de:6c:ab:d5:2e:09:68:66:1e:98:ef:ce:3a:2e: 64:35:94:1d:57:d8:c5:06:20:6d:73:5c:38:8a:30:6b:03:7e: 1e:0b:6f:3f:33:8a:9f:d3:3f:f1:e6:68:5b:3a:1a:5c:d8:c7: b5:02:b1:9a:cf:bd:67:71:3e:ef:27:40:17:d5:38:ae:e9:50: 66:b8:97:88:9b:15:eb:2f:5c:c5:1d:3b:7c:e0:e3:8b:6d:8c: f6:63:57:4b:15:b4:80:0b:12:f3:19:a5:94:f1:df:cc:33:19: 36:bb:0d:ef:c3:87:57:58:05:d4:47:e1:29:f4:31:15:d8:03: 68:70:3e:88:93:9e:f3:28:1a:15:b7:62:77:6e:59:8e:4d:58: 4f:19:f6:ed:a7:fd:c3:60:7a:a1:6b:12:04:94:40:64:cd:60: a2:7e:b4:a0:e2:aa:81:91:81:d3:7a:5b:3c:17:29:3f:70:d4: f1:d1:b4:40:d1:ae:13:ad:a8:b7:5b:09:49:50:33:37:f1:10: 2f:b2:ca:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcd/m8H+CoG2X72q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI0MDkwNTIxMTEwM1oXDTI0MTIwNDIyMTEwM1owLzEtMCsGA1UEAxMk NGQxYjg2MmItOGMzNy00YjVhLWJmN2YtMzI3ZTZlM2RhNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR8MpvQymXf5RfdpjKcAp5CI2JSqKTzRWOXn zdnAYBDZMvrSAGO8h4cw8ss0jiArt83d+4mCfDCtfW0OmyojRw1jRhJEWEiECyck IkYwesuHWPzJbtv6Hk3hyPD1Cm+uKnBVUPWwh5FiihUrSiFFRuxpBZ54b5hZN/zf bCNaTN3yemtxcc+JvUMlYCrwHdV2MKn/xWR2cb3smyX1xVI3cxTZ7vXNUUORG5Hg SGSs4vMBc2uOFKy99w228HfGpvW/ulddh9QvqghOThOB4rYR6aTaK7QTTdC939A5 FEvdSushAFel3B2BavxbI5T+xQlJobx8Ct3N+H8FwVSxeYxy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9IQreFcz0nuPapPxmzsCAuWlcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzNhNDEyMGEtODMyZi0z ZDQ5LTliNDYtZTEwZjM1NTY1YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP3zefyD9VeOaPLp0RY9AzxvyQsr5HomH1m7thCafMK/LrKD9+jM34T wHb2O+KdFDyQhaEzGLfp+7jebKvVLgloZh6Y7846LmQ1lB1X2MUGIG1zXDiKMGsD fh4Lbz8zip/TP/HmaFs6GlzYx7UCsZrPvWdxPu8nQBfVOK7pUGa4l4ibFesvXMUd O3zg44ttjPZjV0sVtIALEvMZpZTx38wzGTa7De/Dh1dYBdRH4Sn0MRXYA2hwPoiT nvMoGhW3YnduWY5NWE8Z9u2n/cNgeqFrEgSUQGTNYKJ+tKDiqoGRgdN6WzwXKT9w 1PHRtEDRrhOtqLdbCUlQMzfxEC+yylk= -----END CERTIFICATE-----Generated at Fri Sep 20 05:59:10 2024 by rpki-client on console-fra.rpki-client.org