$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/293e8554-09ba-31aa-b67a-31a1bab4d060.roa File: 293e8554-09ba-31aa-b67a-31a1bab4d060.roa (raw, json) Hash identifier: H6lo+kHf4cHq8ejheqWqvLwsyGoRpKTRrhsttny68U8= Subject key identifier: 39:E9:23:AE:73:A6:71:73:CA:0F:58:96:04:A0:09:AA:8A:B1:BB:9B Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285847BC2C10A3D646A9E0AC5B1800 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/293e8554-09ba-31aa-b67a-31a1bab4d060.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 26658 IP address blocks: 45.41.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:10:a3:d6:46:a9:e0:ac:5b:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=5a43b29f-5017-4fc8-b0ae-87c40b3459d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:00:f4:25:c3:1e:97:a3:32:cc:0c:29:ec: 6b:b1:2f:44:e2:e2:bc:0a:2e:16:ef:d4:8a:4e:40: 33:5b:76:80:0f:3f:32:b5:30:21:bd:f2:0d:7b:4a: 58:ea:35:fa:2d:c2:e1:2d:7a:3c:14:9a:d2:1d:3d: 85:a8:64:15:af:83:76:7d:47:6c:19:62:f9:59:9c: 32:cb:70:e0:20:65:c8:62:ec:40:a0:45:f9:aa:ec: 30:54:d0:57:a1:4c:bd:91:58:f8:f1:a5:3e:0d:c2: 20:2b:9f:00:9f:0d:d1:c6:41:11:80:15:7e:37:03: 55:99:0a:95:f5:97:91:b5:32:df:8b:28:64:36:37: 83:0a:27:9d:55:60:29:15:dc:ef:65:f7:76:c0:af: 71:12:e0:1d:b1:5f:3f:21:43:49:39:31:c6:5a:90: e8:d1:cc:44:c3:5a:a5:4e:23:85:b3:2c:63:02:8e: 5b:3b:f5:2b:cc:8c:7d:55:77:f1:ac:6d:f7:3b:24: cc:68:44:94:61:4e:54:25:3e:d7:fc:34:21:ac:18: 28:01:ba:06:52:10:3b:14:2a:c4:8a:b9:16:9d:b9: 55:c3:99:ee:a9:43:06:b1:de:78:82:03:10:51:b9: 91:3e:73:7d:91:61:74:6b:b5:5d:2b:72:5f:fe:32: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E9:23:AE:73:A6:71:73:CA:0F:58:96:04:A0:09:AA:8A:B1:BB:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/293e8554-09ba-31aa-b67a-31a1bab4d060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 45.41.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3c:65:d6:69:f3:65:37:87:78:31:bf:be:ca:2a:87:bb:e4: c9:a2:96:51:ce:4d:08:5b:85:91:32:b0:21:9e:7c:8d:3a:6a: 6f:9b:a3:26:3b:7a:27:60:47:ff:78:5e:59:bb:1d:59:2a:6f: 84:3e:38:e4:7d:1c:dc:d9:fa:93:4a:81:98:67:c0:8a:41:08: 1b:c0:60:95:a0:c6:b6:85:75:5b:5d:33:69:84:88:74:e4:b7: cf:2a:bd:11:df:1e:6d:f2:10:e1:22:c4:73:a8:06:28:7b:cf: d5:b2:2d:0d:7d:01:e7:28:52:28:ce:47:61:c4:a9:04:25:54: 2a:ab:2a:59:01:95:4f:74:54:4a:bd:79:10:ae:b2:99:97:57: e6:b3:a4:22:89:f6:56:c1:14:b0:49:ba:17:22:84:6e:3f:d7: ca:ec:fb:a5:70:26:70:35:9b:09:f2:0e:a5:3a:f7:b4:7d:bc: 2d:8f:74:1f:49:7c:55:9b:74:53:16:34:99:64:f7:a2:5b:42: d3:55:84:33:fb:9f:87:35:61:ee:35:00:41:61:f8:d2:84:3b: 58:4f:e5:3d:ef:15:20:a1:df:ec:4b:00:01:2d:dd:96:16:fb: 0b:2b:85:af:70:7b:fc:78:46:a7:51:c4:de:48:d1:0c:c3:19: 0f:94:83:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe8LBCj1kap4KxbGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk NWE0M2IyOWYtNTAxNy00ZmM4LWIwYWUtODdjNDBiMzQ1OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF8A9CXDHpejMswMKexrsS9E4uK8Ci4W79SK TkAzW3aADz8ytTAhvfINe0pY6jX6LcLhLXo8FJrSHT2FqGQVr4N2fUdsGWL5WZwy y3DgIGXIYuxAoEX5quwwVNBXoUy9kVj48aU+DcIgK58Anw3RxkERgBV+NwNVmQqV 9ZeRtTLfiyhkNjeDCiedVWApFdzvZfd2wK9xEuAdsV8/IUNJOTHGWpDo0cxEw1ql TiOFsyxjAo5bO/UrzIx9VXfxrG33OyTMaESUYU5UJT7X/DQhrBgoAboGUhA7FCrE irkWnblVw5nuqUMGsd54ggMQUbmRPnN9kWF0a7VdK3Jf/jJ9pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnpI65zpnFzyg9YlgSgCaqKsbubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMjkzZTg1NTQtMDliYS0z MWFhLWI2N2EtMzFhMWJhYjRkMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw8ZdZp82U3h3gxv77KKoe75MmillHOTQhbhZEysCGefI06am+boyY7 eidgR/94Xlm7HVkqb4Q+OOR9HNzZ+pNKgZhnwIpBCBvAYJWgxraFdVtdM2mEiHTk t88qvRHfHm3yEOEixHOoBih7z9WyLQ19AecoUijOR2HEqQQlVCqrKlkBlU90VEq9 eRCuspmXV+azpCKJ9lbBFLBJuhcihG4/18rs+6VwJnA1mwnyDqU697R9vC2PdB9J fFWbdFMWNJlk96JbQtNVhDP7n4c1Ye41AEFh+NKEO1hP5T3vFSCh3+xLAAEt3ZYW +wsrha9we/x4RqdRxN5I0QzDGQ+Ug2c= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org