$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa File: 29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa (raw, json) Hash identifier: Fz28Lesk357XcRp88JECi6fXAQdvXSjYu3qQneyLU1E= Subject key identifier: 45:69:BE:87:E6:8A:7D:39:87:BF:41:57:14:9D:8D:9A:5D:CE:3A:73 Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F432858474420B2123E6723114137C800 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa Signing time: Thu 19 Sep 2024 13:00:42 +0000 ROA not before: Thu 19 Sep 2024 13:00:42 +0000 ROA not after: Wed 18 Dec 2024 14:00:42 +0000 asID: 32931 IP address blocks: 45.41.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:20:b2:12:3e:67:23:11:41:37:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Sep 19 13:00:42 2024 GMT Not After : Dec 18 14:00:42 2024 GMT Subject: CN=41ea92c1-dfb3-48c9-9633-691b7084affc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:aa:83:4b:3f:26:05:1e:82:89:c3:f6:84: 6b:1f:31:88:dc:e4:54:6c:96:38:1c:be:16:94:f8: 78:8b:0e:91:ed:24:1a:c8:9a:c4:91:13:7b:64:bd: 97:fd:30:d1:0f:d1:2a:93:32:db:b6:37:ec:ad:24: 8f:38:a7:43:b0:6c:f1:86:20:2a:64:b8:00:81:54: 64:af:71:7a:ee:74:dc:a0:32:e0:c9:67:ca:5f:92: 27:11:7a:da:82:35:bd:46:92:7a:9e:91:44:83:1b: e5:d9:7d:c9:86:48:86:64:af:de:dd:a0:51:c2:0b: 82:e5:c3:47:2f:db:d8:0e:2d:34:bf:46:59:05:ae: cb:73:86:fb:a4:94:3c:8c:76:78:dc:0d:7c:ec:88: 33:96:12:66:e3:64:d3:fa:22:ce:d2:ff:33:45:b0: be:cb:3f:16:e8:a7:f9:7f:68:dc:d8:11:ef:c8:2a: da:74:ed:f6:66:9e:3c:d2:a6:77:9d:5a:0f:23:a3: 9c:b9:1a:3e:23:62:b5:cb:47:8c:08:9b:ac:a1:a0: d1:42:8f:4d:57:9e:5b:07:57:29:79:a0:7d:de:43: b5:ff:b8:ba:3e:b4:74:db:49:1d:85:40:9b:87:f2: fa:97:0b:f7:b0:90:1a:a2:fb:72:ff:79:43:44:1a: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:69:BE:87:E6:8A:7D:39:87:BF:41:57:14:9D:8D:9A:5D:CE:3A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 45.41.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:16:e4:18:0b:dc:9c:1f:f3:9e:7c:8d:e4:17:ae:44:50:03: ea:8a:d9:f8:02:65:e3:18:5d:04:35:a0:52:33:04:4e:ad:7c: 2c:7c:0e:b3:09:87:34:0a:ab:ab:61:25:af:65:6b:e7:f1:ea: 09:d9:f4:b3:10:68:ae:0e:27:aa:49:a0:c5:71:1d:60:5a:c1: a7:d6:55:79:6d:5e:f9:28:1a:b2:dd:a8:64:48:45:f5:01:d8: c1:85:80:4e:cd:0a:e3:e1:ac:97:c4:44:6b:2a:99:2c:eb:9f: 04:98:ef:6f:dc:f1:66:4c:96:ff:ee:ec:0e:78:c9:7f:fe:5c: 02:41:6c:1d:4c:4b:c0:48:77:1a:66:97:70:cd:17:1e:8e:f1: 5c:97:e6:0a:72:2c:0f:3e:a7:bb:7d:7d:63:11:f5:ff:27:58: ae:c0:5d:4c:28:3a:a7:57:17:3e:34:e2:fe:75:d8:45:72:36: f3:07:5d:8c:03:67:d5:08:43:1d:de:01:18:b5:f3:b6:84:b1: 3e:36:d7:de:0d:fa:aa:80:db:63:27:d7:45:df:17:2f:5b:e8: b8:9c:28:54:57:a1:51:76:4f:b0:ad:59:bf:12:a6:0d:42:af: 86:22:ac:0f:95:85:17:c1:4d:44:10:04:c8:e6:9b:de:9d:99: 82:bd:b0:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdEILISPmcjEUE3yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk NDFlYTkyYzEtZGZiMy00OGM5LTk2MzMtNjkxYjcwODRhZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaSqg0s/JgUegonD9oRrHzGI3ORUbJY4HL4W lPh4iw6R7SQayJrEkRN7ZL2X/TDRD9EqkzLbtjfsrSSPOKdDsGzxhiAqZLgAgVRk r3F67nTcoDLgyWfKX5InEXragjW9RpJ6npFEgxvl2X3JhkiGZK/e3aBRwguC5cNH L9vYDi00v0ZZBa7Lc4b7pJQ8jHZ43A187IgzlhJm42TT+iLO0v8zRbC+yz8W6Kf5 f2jc2BHvyCradO32Zp480qZ3nVoPI6OcuRo+I2K1y0eMCJusoaDRQo9NV55bB1cp eaB93kO1/7i6PrR020kdhUCbh/L6lwv3sJAaovty/3lDRBqRGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVpvofmin05h79BVxSdjZpdzjpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvMjlhODk0ZWUtMDA4MC0z YTQ5LThiOTEtYTAxZTFiYmJiZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEW5BgL3Jwf8558jeQXrkRQA+qK2fgCZeMYXQQ1oFIzBE6tfCx8DrMJ hzQKq6thJa9la+fx6gnZ9LMQaK4OJ6pJoMVxHWBawafWVXltXvkoGrLdqGRIRfUB 2MGFgE7NCuPhrJfERGsqmSzrnwSY72/c8WZMlv/u7A54yX/+XAJBbB1MS8BIdxpm l3DNFx6O8VyX5gpyLA8+p7t9fWMR9f8nWK7AXUwoOqdXFz404v512EVyNvMHXYwD Z9UIQx3eARi187aEsT42194N+qqA22Mn10XfFy9b6LicKFRXoVF2T7CtWb8Spg1C r4YirA+VhRfBTUQQBMjmm96dmYK9sBU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:06 2024 by rpki-client on console-ams.rpki-client.org