$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa File: dd445671-6815-3a61-a556-1bfd773ca1e6.roa (raw, json) Hash identifier: ulZTPGqB7zZ3hmdwXGetPbSV0iijzY8TwkVZdBWjk3k= Subject key identifier: 1C:B2:29:34:55:68:45:C8:64:9E:09:36:A2:BD:41:39:93:7C:73:09 Certificate issuer: /CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Certificate serial: 010D0C9F4328584769D0D87DB81F0FD4325DE9C0 Authority key identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 399134 IP address blocks: 52.124.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d8:7d:b8:1f:0f:d4:32:5d:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=50f561a0-1337-4ddc-b956-319d799294e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:ec:c1:0f:27:3b:3b:10:1f:ac:8b:c4:3e: 4d:89:83:cc:84:ea:d5:69:19:4b:ff:2c:ec:20:fa: 00:cb:69:92:14:21:04:fc:fb:c8:7c:eb:38:79:f7: 53:a0:cf:1d:51:82:d4:45:69:c9:c3:59:29:17:46: 55:c8:03:4e:70:41:56:df:f7:c3:b4:7e:4c:74:f9: 2a:2f:2b:8c:78:82:bc:97:28:91:f6:5c:d4:17:d3: 49:eb:39:78:ab:19:17:27:70:a0:23:dd:04:0c:57: ed:20:39:72:25:9f:61:a5:1e:a6:36:7c:56:c7:86: 74:d5:9a:65:ce:41:09:c5:1f:10:5b:e9:34:4b:b1: 6b:c3:63:33:3f:d5:62:f5:2e:86:ab:15:3d:65:70: 53:c7:64:f5:a2:9c:a5:06:d6:12:7e:98:49:bb:7a: f6:88:2e:3b:12:a7:fe:73:77:c5:74:0c:a8:27:ac: aa:21:39:94:98:03:e9:8c:62:ba:c9:26:3b:76:2c: 06:69:95:66:59:9b:ff:22:9c:78:4d:4c:42:f1:2d: fd:30:7c:09:04:bb:83:ce:ae:d1:7b:34:0a:1e:b2: ff:38:f3:20:99:34:e4:ba:2e:cf:6d:1c:c2:47:d3: bb:1d:6a:7a:60:49:b8:be:f4:68:07:a9:c9:76:ae: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:29:34:55:68:45:C8:64:9E:09:36:A2:BD:41:39:93:7C:73:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl X509v3 Authority Key Identifier: keyid:04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer sbgp-ipAddrBlock: critical IPv4: 52.124.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ee:34:f6:63:8a:26:22:47:59:40:f7:d4:fc:95:da:06:94: 6a:d9:b8:26:97:6e:08:be:f7:fc:42:35:8d:ff:c2:fb:de:c4: 35:1b:20:76:1f:f6:e8:c4:f0:5d:2a:61:d7:30:72:70:c1:f3: 8e:0f:f9:e8:ba:34:bb:9b:b8:63:f3:c9:d2:d2:3b:70:db:bb: 45:4d:eb:40:5e:5c:73:ab:33:5e:e0:8c:09:7c:45:0e:02:2f: f7:c0:92:b9:42:20:2f:8e:9b:68:f7:e4:ca:55:ff:58:cc:92: ce:0f:cf:ab:cb:bc:02:6c:be:34:88:71:58:59:1a:ae:c2:53: f7:e6:ed:a2:86:11:a6:f4:76:d6:e9:1b:f7:c4:70:65:25:96: f3:fa:21:7f:09:4c:14:fa:45:58:11:20:28:99:b5:6b:e0:26: 26:6e:6e:1c:b6:db:30:f2:3e:28:36:fa:b9:20:b9:b5:14:af: ae:8c:36:fd:e7:b7:73:1b:4c:1f:3f:74:7c:58:eb:7c:13:80: 93:f5:f1:62:60:c0:f5:e4:8d:39:e7:4d:a8:cf:36:e8:54:5a: c8:ff:d5:18:1c:47:12:3b:a3:63:cc:11:e4:17:64:f6:0c:a9: af:02:57:3c:92:fe:58:31:db:46:df:d6:0d:00:1a:30:2b:0c: cc:10:b9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0Nh9uB8P1DJd6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzMmZhNjctNzE1OC00NDM3LTllNjQtZjA5MjZjNGU0 ZDI2MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk NTBmNTYxYTAtMTMzNy00ZGRjLWI5NTYtMzE5ZDc5OTI5NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/PswQ8nOzsQH6yLxD5NiYPMhOrVaRlL/yzs IPoAy2mSFCEE/PvIfOs4efdToM8dUYLURWnJw1kpF0ZVyANOcEFW3/fDtH5MdPkq LyuMeIK8lyiR9lzUF9NJ6zl4qxkXJ3CgI90EDFftIDlyJZ9hpR6mNnxWx4Z01Zpl zkEJxR8QW+k0S7Frw2MzP9Vi9S6GqxU9ZXBTx2T1opylBtYSfphJu3r2iC47Eqf+ c3fFdAyoJ6yqITmUmAPpjGK6ySY7diwGaZVmWZv/Ipx4TUxC8S39MHwJBLuDzq7R ezQKHrL/OPMgmTTkui7PbRzCR9O7HWp6YEm4vvRoB6nJdq6efQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByyKTRVaEXIZJ4JNqK9QTmTfHMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMy ZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDkyNmM0ZTRkMjYvZGQ0NDU2NzEtNjgxNS0z YTYxLWE1NTYtMWJmZDc3M2NhMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQzMmZhNjctNzE1OC00NDM3LTll NjQtZjA5MjZjNGU0ZDI2LzBkMzJmYTY3LTcxNTgtNDQzNy05ZTY0LWYwOTI2YzRl NGQyNi5jcmwwHwYDVR0jBBgwFoAUBEx1DkW6xAnA6QI7v20+IM7/BdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDMyZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDky NmM0ZTRkMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATuNPZjiiYiR1lA99T8ldoGlGrZuCaXbgi+9/xCNY3/wvvexDUbIHYf 9ujE8F0qYdcwcnDB844P+ei6NLubuGPzydLSO3Dbu0VN60BeXHOrM17gjAl8RQ4C L/fAkrlCIC+Om2j35MpV/1jMks4Pz6vLvAJsvjSIcVhZGq7CU/fm7aKGEab0dtbp G/fEcGUllvP6IX8JTBT6RVgRICiZtWvgJiZubhy22zDyPig2+rkgubUUr66MNv3n t3MbTB8/dHxY63wTgJP18WJgwPXkjTnnTajPNuhUWsj/1RgcRxI7o2PMEeQXZPYM qa8CVzyS/lgx20bf1g0AGjArDMwQuSw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:40:44 2024 by rpki-client on console-ams.rpki-client.org