$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa File: c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa (raw, json) Hash identifier: be2Pn3day+gABF3+B1MQYTQuHoMRJ4QOnMO5ZezLQ2A= Subject key identifier: 50:72:88:DB:20:2D:0F:7F:51:AE:2A:1D:74:9E:D6:10:F7:B8:23:B3 Certificate issuer: /CN=53047e29-2570-4585-9e69-b23797196c26 Certificate serial: 010D0C9F43285847316CF984771F1B8BE5130180 Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa Signing time: Thu 12 Sep 2024 20:14:08 +0000 ROA not before: Thu 12 Sep 2024 20:14:08 +0000 ROA not after: Wed 11 Dec 2024 21:14:08 +0000 asID: 397183 IP address blocks: 158.116.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:6c:f9:84:77:1f:1b:8b:e5:13:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53047e29-2570-4585-9e69-b23797196c26 Validity Not Before: Sep 12 20:14:08 2024 GMT Not After : Dec 11 21:14:08 2024 GMT Subject: CN=d20d2a7f-38f3-4e6c-b977-f4c5ebc292b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:f5:88:c8:30:28:57:59:ed:f5:09:29:b0: 30:2e:dc:5d:c0:68:66:00:69:ce:0d:2e:eb:4e:b2: ce:8d:35:e1:aa:58:1d:dc:19:16:53:05:4e:1d:10: 2e:8d:93:de:57:02:8b:15:6a:ad:09:77:9c:12:d7: d9:2e:41:68:3a:21:26:da:36:66:bd:01:6c:2b:3e: 95:7a:55:ee:57:5f:8f:d4:85:91:b9:d8:f6:c0:23: 25:c3:11:bf:9d:93:ec:13:df:9a:2e:96:c4:46:a5: 53:69:49:7f:a1:22:88:3e:8b:85:42:8a:10:8a:c9: 14:53:e7:a2:e8:65:d4:84:64:51:9e:c2:2c:e5:77: 0b:30:fb:75:4b:24:c6:c4:6f:b8:9c:d6:82:b3:f2: e5:dd:20:ca:cd:dd:55:77:62:d7:5d:b9:b2:da:af: f7:df:78:83:29:63:55:ef:1e:95:dd:52:21:fe:35: 4a:1d:62:3c:07:ec:2c:2a:24:66:37:80:64:e6:17: dd:9c:99:91:8c:b5:ae:b4:94:72:df:8c:31:3b:b7: 14:a4:83:22:c7:96:91:11:f2:33:9c:33:2d:f7:bf: ae:dc:cd:ee:47:42:21:b8:09:4a:e9:8b:0c:ba:66: 34:d3:59:3d:60:3a:f4:c8:5f:4b:95:4f:86:bb:3d: 3f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:72:88:DB:20:2D:0F:7F:51:AE:2A:1D:74:9E:D6:10:F7:B8:23:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/c41c541a-4219-32dd-ac05-b9bbf1ddec94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl X509v3 Authority Key Identifier: keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer sbgp-ipAddrBlock: critical IPv4: 158.116.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:61:9c:22:85:c6:28:25:dc:d6:59:35:e2:b2:c9:53:87:f5: fd:fa:57:96:d3:4c:13:fb:d2:d6:6b:63:9b:40:ee:36:43:f7: 16:63:e5:1b:9e:ec:74:a8:95:af:21:39:1a:ff:50:77:b6:26: fa:24:0b:38:bd:b8:40:fd:11:56:d8:f0:11:44:54:f9:71:b7: 7d:1b:d9:0a:4a:2b:ff:53:1a:1b:06:88:b0:86:fd:bb:ec:46: da:b5:e7:b0:fb:20:5f:f4:f0:f6:08:75:f3:1b:78:2a:38:aa: 43:0c:98:62:5a:03:67:c2:1e:6a:7a:ec:28:3b:a4:6c:5b:df: b6:31:50:e4:94:f9:47:78:48:f3:88:bb:09:9a:ac:2f:13:b0: 2c:0f:87:2a:a1:95:78:04:56:e9:b5:f9:a3:37:17:8c:ff:c9: 89:95:02:8b:62:72:8d:c0:17:3a:66:a6:1e:f7:de:f5:45:be: d8:83:0a:ac:0f:4e:85:cb:29:2d:29:ee:c4:86:3a:09:32:36: e6:a1:af:cf:d2:ab:8d:bf:f6:9a:88:c7:36:8a:f6:ac:86:06: b8:5e:e9:d7:5d:9a:85:52:d4:10:e7:60:27:84:97:06:08:06: f5:4c:9c:24:85:1f:46:b7:42:91:53:ab:e5:ac:f3:4e:62:18: ed:82:8b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxbPmEdx8bi+UTAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2 YzI2MB4XDTI0MDkxMjIwMTQwOFoXDTI0MTIxMTIxMTQwOFowLzEtMCsGA1UEAxMk ZDIwZDJhN2YtMzhmMy00ZTZjLWI5NzctZjRjNWViYzI5MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8z1iMgwKFdZ7fUJKbAwLtxdwGhmAGnODS7r TrLOjTXhqlgd3BkWUwVOHRAujZPeVwKLFWqtCXecEtfZLkFoOiEm2jZmvQFsKz6V elXuV1+P1IWRudj2wCMlwxG/nZPsE9+aLpbERqVTaUl/oSKIPouFQooQiskUU+ei 6GXUhGRRnsIs5XcLMPt1SyTGxG+4nNaCs/Ll3SDKzd1Vd2LXXbmy2q/333iDKWNV 7x6V3VIh/jVKHWI8B+wsKiRmN4Bk5hfdnJmRjLWutJRy34wxO7cUpIMix5aREfIz nDMt97+u3M3uR0IhuAlK6YsMumY001k9YDr0yF9LlU+Guz0/iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFByiNsgLQ9/Ua4qHXSe1hD3uCOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0 N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvYzQxYzU0MWEtNDIxOS0z MmRkLWFjMDUtYjliYmYxZGRlYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5 NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3 OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRhnCKFxigl3NZZNeKyyVOH9f36V5bTTBP70tZrY5tA7jZD9xZj5Rue 7HSola8hORr/UHe2JvokCzi9uED9EVbY8BFEVPlxt30b2QpKK/9TGhsGiLCG/bvs Rtq157D7IF/08PYIdfMbeCo4qkMMmGJaA2fCHmp67Cg7pGxb37YxUOSU+Ud4SPOI uwmarC8TsCwPhyqhlXgEVum1+aM3F4z/yYmVAotico3AFzpmph733vVFvtiDCqwP ToXLKS0p7sSGOgkyNuahr8/Sq42/9pqIxzaK9qyGBrhe6dddmoVS1BDnYCeElwYI BvVMnCSFH0a3QpFTq+Ws805iGO2Ci5Q= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:09 2024 by rpki-client on console-ams.rpki-client.org