$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3e51dfe5-6c68-3035-9a24-b51a12443593.roa File: 3e51dfe5-6c68-3035-9a24-b51a12443593.roa (raw, json) Hash identifier: QPoO6RMTZoy/+eV6I+WvTg7i7Xnxm7dyxB7gpNeXSH0= Subject key identifier: 5A:F3:00:07:51:1E:D1:B7:05:65:FB:45:B5:67:FF:BF:05:11:B1:C8 Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa Certificate serial: 010D0C9F432858477078A85EB01D19075CA88A80 Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3e51dfe5-6c68-3035-9a24-b51a12443593.roa Signing time: Sat 05 Oct 2024 10:13:36 +0000 ROA not before: Sat 05 Oct 2024 10:13:36 +0000 ROA not after: Fri 03 Jan 2025 11:13:36 +0000 asID: 14618 IP address blocks: 163.53.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:78:a8:5e:b0:1d:19:07:5c:a8:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa Validity Not Before: Oct 5 10:13:36 2024 GMT Not After : Jan 3 11:13:36 2025 GMT Subject: CN=15531a17-93ef-457b-adb5-7d77632f81fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:c0:8d:60:e5:f3:de:d5:77:3c:6e:81:d1: dd:34:7c:d9:6a:7c:5a:88:3f:b0:7c:60:61:e2:bd: 08:ee:8c:68:b3:eb:b5:aa:a4:0c:c4:cc:0c:40:d2: e0:69:4b:c1:92:97:e8:5f:0d:ed:da:6b:83:5b:09: 0d:75:2c:36:a4:e1:bf:d9:2b:63:a4:b7:07:de:75: 17:d3:a1:6c:36:83:61:56:d9:0c:0c:a6:bb:31:54: ee:d9:80:76:13:f2:e7:f1:8a:ab:bd:43:f5:64:48: 7d:35:17:7a:d1:ae:96:4b:ef:e9:81:e2:5b:ce:83: 47:ce:58:c3:73:c3:c7:d3:1e:f9:48:ae:77:29:68: 72:5b:ab:e4:a8:85:2e:75:a2:26:96:3f:3e:8f:84: 85:d1:3f:3a:62:16:70:e9:ac:4f:17:6e:f1:95:bb: 52:28:ea:75:29:54:aa:2c:ec:2e:71:68:45:ba:19: 0e:d9:61:d3:2e:02:78:3f:9d:47:96:47:d3:92:ca: 40:57:ba:7d:38:27:31:e2:ff:68:05:5c:c3:9f:58: 69:98:3b:1f:db:b4:e1:82:a3:0d:99:3f:8b:7c:05: f5:23:9d:1c:0a:c2:40:52:ac:e7:91:ac:46:64:ad: 6d:c8:44:b3:b3:ea:84:81:fc:4d:17:2d:62:21:69: 47:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:00:07:51:1E:D1:B7:05:65:FB:45:B5:67:FF:BF:05:11:B1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3e51dfe5-6c68-3035-9a24-b51a12443593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl X509v3 Authority Key Identifier: keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer sbgp-ipAddrBlock: critical IPv4: 163.53.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:43:55:28:56:2d:67:51:d6:dd:54:c0:87:81:1f:97:82:a3: b2:f0:1d:5c:92:b2:1f:dc:1b:d5:7f:ac:6b:4d:f6:f7:9b:c2: a2:3e:9b:af:ea:af:44:4f:34:7c:78:58:72:65:e7:b8:1e:c7: dc:06:6c:07:35:53:33:0a:a6:6f:70:55:f9:aa:49:4d:40:1f: 11:80:05:13:5c:9c:57:d8:a6:7f:1e:6e:6a:67:67:ca:60:ca: 1d:7b:1e:11:19:81:05:f5:38:20:ea:29:0d:92:9e:f9:98:b5: c8:bb:8f:39:88:2a:f2:b8:70:f1:5f:c5:f2:03:69:7f:b2:03: ba:d5:55:3d:ec:2b:e1:32:28:1d:e9:6e:37:5e:6d:eb:c5:aa: b2:6e:1e:0f:fb:c9:6c:61:a1:2c:5e:67:60:cf:35:22:68:e3: c4:6e:f6:a9:e8:0a:a4:f3:80:55:fa:a7:21:a2:1e:8f:d1:04: 31:2a:58:fc:72:ce:4d:13:99:a5:c2:de:76:b2:9f:d1:ac:80: 5c:75:56:62:a6:ad:38:fb:d4:5e:35:99:c5:db:84:71:86:ea: 8b:e1:81:92:3d:2f:19:f9:a1:6a:44:a7:fa:ca:fe:07:f8:4b: 4c:12:7d:35:ef:0d:e2:03:e4:bd:19:32:0d:e9:08:fc:0a:a7: 19:12:c8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdweKhesB0ZB1yoioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj YWZhMB4XDTI0MTAwNTEwMTMzNloXDTI1MDEwMzExMTMzNlowLzEtMCsGA1UEAxMk MTU1MzFhMTctOTNlZi00NTdiLWFkYjUtN2Q3NzYzMmY4MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLTAjWDl897VdzxugdHdNHzZanxaiD+wfGBh 4r0I7oxos+u1qqQMxMwMQNLgaUvBkpfoXw3t2muDWwkNdSw2pOG/2StjpLcH3nUX 06FsNoNhVtkMDKa7MVTu2YB2E/Ln8YqrvUP1ZEh9NRd60a6WS+/pgeJbzoNHzljD c8PH0x75SK53KWhyW6vkqIUudaImlj8+j4SF0T86YhZw6axPF27xlbtSKOp1KVSq LOwucWhFuhkO2WHTLgJ4P51HlkfTkspAV7p9OCcx4v9oBVzDn1hpmDsf27ThgqMN mT+LfAX1I50cCsJAUqznkaxGZK1tyESzs+qEgfxNFy1iIWlHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrzAAdRHtG3BWX7RbVn/78FEbHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvM2U1MWRmZTUtNmM2OC0z MDM1LTlhMjQtYjUxYTEyNDQzNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh N2I5ZWNhZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAozXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtDVShWLWdR1t1UwIeBH5eCo7LwHVySsh/cG9V/rGtN9vebwqI+m6/q r0RPNHx4WHJl57gex9wGbAc1UzMKpm9wVfmqSU1AHxGABRNcnFfYpn8ebmpnZ8pg yh17HhEZgQX1OCDqKQ2SnvmYtci7jzmIKvK4cPFfxfIDaX+yA7rVVT3sK+EyKB3p bjdebevFqrJuHg/7yWxhoSxeZ2DPNSJo48Ru9qnoCqTzgFX6pyGiHo/RBDEqWPxy zk0TmaXC3nayn9GsgFx1VmKmrTj71F41mcXbhHGG6ovhgZI9Lxn5oWpEp/rK/gf4 S0wSfTXvDeID5L0ZMg3pCPwKpxkSyPI= -----END CERTIFICATE-----Generated at Tue Oct 22 21:19:02 2024 by rpki-client on console-ams.rpki-client.org