$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa File: fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa (raw, json) Hash identifier: 76zMne9DnXHO7FZKvf/PO5+tdX30R1jKpYs6Sz7AjWI= Subject key identifier: 44:9C:46:C4:6D:D1:4A:54:12:5C:16:DB:86:34:F5:CF:54:B5:80:03 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285847362B42E2EB92BD6CBBDE2400 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 16904 IP address blocks: 207.191.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:42:e2:eb:92:bd:6c:bb:de:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=d2d37894-b4c4-4c28-9542-cf27c4992590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:85:70:bb:52:7b:55:06:27:8e:c7:b7:fc: f7:56:18:07:58:4f:f8:af:27:bf:d3:15:f6:e9:e1: 9f:6c:a9:1d:6e:ae:32:5e:25:3c:1e:c0:c4:2d:6f: 18:70:63:e1:06:00:2e:7a:90:44:53:b8:a0:80:73: 47:5c:e9:d9:4e:c0:58:f1:1c:21:43:36:ac:83:89: 82:b6:69:41:e1:c9:31:3f:22:7e:c3:d2:e6:14:de: 2a:9a:9d:bf:5a:12:a7:f1:2f:7a:8f:d6:ef:26:50: b8:3f:f2:da:be:4f:6d:f1:08:54:f4:1f:64:ff:57: 3c:fd:bd:d3:ef:ce:14:3a:7a:fb:32:c4:f9:4d:52: fc:b8:56:2c:0a:8f:4b:cb:9c:58:c6:08:99:bc:60: 83:76:7b:6c:9c:90:e7:00:d8:09:e3:4b:9b:e0:99: ff:75:52:46:9d:9d:d4:69:a0:bc:52:91:7d:af:68: 5c:a6:b7:f3:1d:d7:b9:4e:82:b2:d9:d4:7c:94:de: 97:7d:ba:d9:0d:7b:54:0f:08:88:79:c2:e5:f3:83: 67:65:b0:15:f4:9d:c4:1f:ec:06:0f:42:ac:b8:ac: a3:fe:4e:8e:33:1d:95:be:6c:21:14:3c:3f:e2:39: 8c:15:45:cc:f9:92:31:2d:0a:93:6f:88:3e:81:22: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9C:46:C4:6D:D1:4A:54:12:5C:16:DB:86:34:F5:CF:54:B5:80:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 207.191.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:aa:4b:af:30:4f:27:40:31:2f:c0:08:5d:5e:7a:79:fc:17: f1:c5:5a:ee:2f:a8:ee:71:ea:b5:56:71:65:a7:ff:15:df:24: 0a:05:11:98:0c:72:1b:ae:41:96:f4:99:35:24:b0:38:c2:bd: a7:2f:91:0b:ff:cb:cc:24:6c:ed:2a:f2:67:54:d4:44:bd:22: 0c:c4:34:36:65:b9:88:6c:01:9a:c1:92:65:7e:14:72:27:38: 34:ed:c0:04:cc:aa:f3:b1:a4:b6:fc:da:df:e0:9b:18:ef:95: 71:12:b2:1b:f7:97:98:d2:2a:dc:13:44:0a:16:75:48:31:b6: f2:dc:01:8f:50:40:77:c6:3f:3e:87:9b:19:30:e1:c7:57:41: 32:15:14:1b:b2:8b:b2:f0:0f:ff:4f:c0:c5:ee:fa:5b:05:aa: 56:7e:d8:4e:eb:57:1a:47:b9:c9:ed:a5:8c:4f:02:42:bd:89: 48:40:22:9f:b5:31:59:83:65:09:f6:d5:78:33:4f:2f:85:bf: b0:f4:19:83:44:24:34:0d:2f:45:17:77:e7:31:64:38:52:98: 49:7f:a5:20:b1:d4:3c:67:12:d0:5c:d0:ef:b9:ca:02:92:a3: 4d:25:3e:1c:d7:d5:eb:e2:c7:56:3c:76:f3:03:89:33:b4:39: ba:e9:32:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K0Li65K9bLveJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDJkMzc4OTQtYjRjNC00YzI4LTk1NDItY2YyN2M0OTkyNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVGFcLtSe1UGJ47Ht/z3VhgHWE/4rye/0xX2 6eGfbKkdbq4yXiU8HsDELW8YcGPhBgAuepBEU7iggHNHXOnZTsBY8RwhQzasg4mC tmlB4ckxPyJ+w9LmFN4qmp2/WhKn8S96j9bvJlC4P/Lavk9t8QhU9B9k/1c8/b3T 784UOnr7MsT5TVL8uFYsCo9Ly5xYxgiZvGCDdntsnJDnANgJ40ub4Jn/dVJGnZ3U aaC8UpF9r2hcprfzHde5ToKy2dR8lN6XfbrZDXtUDwiIecLl84NnZbAV9J3EH+wG D0KsuKyj/k6OMx2VvmwhFDw/4jmMFUXM+ZIxLQqTb4g+gSIFpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEScRsRt0UpUElwW24Y09c9UtYADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvZmU1NzZjZjAtMjQ5Yy0z MWRlLTg1ZDUtMmU2ZWUwYmQ5ZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz7+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiqS68wTydAMS/ACF1eenn8F/HFWu4vqO5x6rVWcWWn/xXfJAoFEZgM chuuQZb0mTUksDjCvacvkQv/y8wkbO0q8mdU1ES9IgzENDZluYhsAZrBkmV+FHIn ODTtwATMqvOxpLb82t/gmxjvlXESshv3l5jSKtwTRAoWdUgxtvLcAY9QQHfGPz6H mxkw4cdXQTIVFBuyi7LwD/9PwMXu+lsFqlZ+2E7rVxpHucntpYxPAkK9iUhAIp+1 MVmDZQn21XgzTy+Fv7D0GYNEJDQNL0UXd+cxZDhSmEl/pSCx1DxnEtBc0O+5ygKS o00lPhzX1evix1Y8dvMDiTO0ObrpMrM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:26 2024 by rpki-client on console-ams.rpki-client.org