$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa File: b406d167-2ce2-3fa8-862b-3dcec677300a.roa (raw, json) Hash identifier: sb/86pmp7kDLwaQAneNGj4e60j23UOnuJXXygwjzk/g= Subject key identifier: AD:02:0C:36:72:0A:3E:A3:77:43:BC:EF:A9:2B:0C:CE:91:4F:79:CC Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F432858476C9DAE66435B1EC0EF652800 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 53828 IP address blocks: 45.61.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:ae:66:43:5b:1e:c0:ef:65:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=5922b6a3-8673-4ba1-b104-cc96beb3d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:fa:d3:86:31:19:4f:c6:a6:75:b2:06:29: af:86:e7:1f:aa:90:1f:b6:49:c3:50:07:b4:da:6c: 51:4d:50:24:4f:63:38:80:d1:e0:eb:33:a0:34:e8: 68:b1:fe:ac:c5:73:c4:e4:77:bd:ee:41:e3:27:98: fa:c6:fa:81:15:24:bc:fe:f1:6c:34:cc:0f:f1:83: ce:de:0f:ae:dc:2f:4a:51:1e:f5:de:91:c8:b6:c1: 59:d3:4c:23:ce:af:a6:dd:fb:42:e9:2b:bc:89:c6: 21:05:eb:cd:a4:94:3a:ff:8b:a9:36:ba:34:86:22: 80:38:a3:ad:10:10:5b:25:7f:f2:7d:ec:04:a6:cc: 4a:c4:cc:33:fb:47:6e:56:0e:b5:f5:02:c4:9e:f1: 28:f5:60:5e:bb:4a:80:b2:ea:ef:05:fc:65:5c:88: b8:38:a0:e0:fc:2b:95:5b:d9:4f:35:29:e2:0d:fd: d2:40:56:44:86:0b:09:68:b8:95:91:d7:8b:89:fc: b5:ba:81:4a:35:5a:f3:4f:bd:1c:79:cd:d1:ca:1b: b3:ff:c7:2f:53:44:0a:2e:a8:55:39:3e:65:40:1c: ba:dd:e6:4a:b4:54:d1:99:53:ef:fc:46:5c:18:7f: f3:da:bb:cd:56:81:86:7e:bc:27:86:98:47:85:bc: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:02:0C:36:72:0A:3E:A3:77:43:BC:EF:A9:2B:0C:CE:91:4F:79:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 45.61.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:53:43:76:92:9f:93:61:d4:a8:af:ba:6e:8d:5c:18:78:b4: 52:9d:66:a0:51:a5:ec:0f:74:01:fc:24:c6:5d:33:e6:17:7b: a8:0f:32:91:1d:26:0d:9a:d7:35:9b:19:25:17:06:db:a7:f9: e9:d5:cc:ea:77:6e:53:5d:eb:ef:a6:d0:86:ad:f7:4a:ae:e3: 82:ad:21:dd:bc:12:fc:9f:a2:ef:d5:2d:fb:71:4d:9b:ed:68: 3d:1f:b9:0d:36:32:9a:7b:73:c7:bf:46:f1:97:e3:cc:b7:36: 2f:ba:c3:0d:a1:07:80:32:6b:0b:43:22:2e:7d:a6:8d:09:d6: 08:c9:07:94:e1:e2:68:83:94:2b:b8:95:80:38:ea:1c:f1:f3: 78:f8:d4:6c:1b:c8:c1:66:25:a3:c6:0a:f7:55:88:75:db:b2: 08:c7:db:68:d4:6b:58:29:bf:a1:a7:88:42:21:93:13:a8:aa: 80:91:8d:46:94:93:86:8b:75:18:29:29:b7:5a:60:9d:64:c5: 16:77:b4:f4:a6:30:50:fe:70:bd:92:72:93:61:82:36:13:45: 81:80:61:5f:13:3b:2e:bb:73:c7:bc:5e:6f:24:68:ed:2f:e3: d6:dd:83:f1:3e:6b:ce:6a:5f:15:31:f0:34:c8:81:27:46:58: 16:d1:96:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsna5mQ1sewO9lKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTkyMmI2YTMtODY3My00YmExLWIxMDQtY2M5NmJlYjNkMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsD604YxGU/GpnWyBimvhucfqpAftknDUAe0 2mxRTVAkT2M4gNHg6zOgNOhosf6sxXPE5He97kHjJ5j6xvqBFSS8/vFsNMwP8YPO 3g+u3C9KUR713pHItsFZ00wjzq+m3ftC6Su8icYhBevNpJQ6/4upNro0hiKAOKOt EBBbJX/yfewEpsxKxMwz+0duVg619QLEnvEo9WBeu0qAsurvBfxlXIi4OKDg/CuV W9lPNSniDf3SQFZEhgsJaLiVkdeLify1uoFKNVrzT70cec3Ryhuz/8cvU0QKLqhV OT5lQBy63eZKtFTRmVPv/EZcGH/z2rvNVoGGfrwnhphHhbwE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0CDDZyCj6jd0O876krDM6RT3nMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYjQwNmQxNjctMmNlMi0z ZmE4LTg2MmItM2RjZWM2NzczMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELT0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdTQ3aSn5Nh1Kivum6NXBh4tFKdZqBRpewPdAH8JMZdM+YXe6gPMpEd Jg2a1zWbGSUXBtun+enVzOp3blNd6++m0Iat90qu44KtId28Evyfou/VLftxTZvt aD0fuQ02Mpp7c8e/RvGX48y3Ni+6ww2hB4AyawtDIi59po0J1gjJB5Th4miDlCu4 lYA46hzx83j41GwbyMFmJaPGCvdViHXbsgjH22jUa1gpv6GniEIhkxOoqoCRjUaU k4aLdRgpKbdaYJ1kxRZ3tPSmMFD+cL2ScpNhgjYTRYGAYV8TOy67c8e8Xm8kaO0v 49bdg/E+a85qXxUx8DTIgSdGWBbRlmM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:29 2024 by rpki-client on console-fra.rpki-client.org