$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa File: bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa (raw, json) Hash identifier: QjFq0UX7+aQxSp5oygOGQuSvBSwwmDT5vCcpg6pjSVw= Subject key identifier: A4:D5:40:3B:92:31:2C:F6:27:C6:DF:84:CC:8D:B1:0F:89:0E:6E:92 Certificate issuer: /CN=30d537f2-f871-4f81-b20b-ae04610c521d Certificate serial: 010D0C9F43285847A8A156800484F6A06FB29D40 Authority key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 7018 IP address blocks: 45.41.240.0/22 maxlen: 22 216.146.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:56:80:04:84:f6:a0:6f:b2:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d537f2-f871-4f81-b20b-ae04610c521d Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=38228be2-8e2d-4ec2-acc9-4017bcfba733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:83:bb:84:61:c8:2a:8c:b3:e5:83:08:61:73: 4c:03:2e:b3:78:cf:ac:ab:1c:b7:f2:4e:75:fa:7c: ab:4a:66:c0:c3:aa:b4:97:38:17:71:48:50:f9:32: 35:0a:06:aa:66:08:69:e5:11:e1:0e:b7:16:c0:a1: 53:56:ad:34:98:29:8f:40:8a:79:31:de:f7:92:7b: 49:79:91:b9:71:3f:7b:0d:2b:bc:fc:80:1c:0a:f8: a8:e0:2d:f3:15:ae:98:00:49:98:94:f4:ab:8a:c4: 4d:4e:19:b1:5b:f3:e2:90:6f:03:1d:b7:e9:5b:00: 82:d7:11:5b:b2:09:75:8e:39:c3:91:de:51:00:ed: 35:70:db:e1:dc:04:7f:18:db:29:45:0e:d5:14:6a: c9:d1:11:12:c8:74:0f:43:43:6a:8e:ec:cb:02:b1: c9:39:36:41:c6:fc:e5:45:fb:3a:e9:6a:22:84:54: 3b:27:03:a7:fe:96:ee:23:86:97:3f:05:80:f3:7f: 40:ee:5d:d8:80:59:9e:a2:03:d5:78:32:c3:fb:2e: 30:42:3b:73:da:96:9a:c1:3b:7a:73:50:1b:da:ee: 1c:d8:48:8b:a7:5b:9e:14:94:72:73:60:08:5c:ec: d5:a6:3d:29:c2:68:86:53:8f:80:05:9d:bd:da:7f: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D5:40:3B:92:31:2C:F6:27:C6:DF:84:CC:8D:B1:0F:89:0E:6E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/bc225c7a-0ddf-3c04-b7ea-2158e691a9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl X509v3 Authority Key Identifier: keyid:0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer sbgp-ipAddrBlock: critical IPv4: 45.41.240.0/22 216.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3c:c5:c9:36:96:17:7f:d5:16:19:a6:17:e0:42:ff:ff:84: 46:4b:bb:27:ad:5e:fa:91:0d:f4:38:9e:5b:6f:38:60:06:5b: 79:43:82:d3:0a:f0:26:a9:68:81:f8:83:1c:6c:9d:e5:6f:da: 38:3c:36:4e:88:ab:82:f9:c3:2c:e7:9e:d4:10:cd:33:79:ca: ad:bb:de:a3:6e:1a:33:d3:a1:f5:d7:ea:0f:53:27:89:37:8b: aa:5f:f6:c7:7f:ac:6d:b8:68:cc:26:6f:8f:a0:26:f8:d7:05: c7:ea:90:42:dc:6e:00:c4:a4:70:52:ec:5d:c7:e5:8a:b1:09: b0:40:4c:9e:c4:61:df:b6:db:35:59:92:f7:9c:12:4d:59:27: 0b:90:40:26:6f:25:b2:da:fd:42:de:ed:cd:09:ce:aa:ad:72: 60:e7:fb:30:15:a0:09:f7:ae:70:d9:42:6b:66:2e:03:4a:9a: ee:c0:86:6e:2c:29:04:0f:b3:d7:77:65:68:7d:70:f1:85:ae: 6c:35:b4:84:7a:00:ba:cf:7f:12:28:7f:16:fb:ed:dd:52:39: 67:0e:ee:4a:2a:e1:51:63:49:80:1e:31:a2:47:e0:a4:82:e3: 2d:85:ae:e0:84:41:c6:c1:1b:1a:fc:a7:a8:f2:b1:13:d7:cd: f9:30:8d:18 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeooVaABIT2oG+ynUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkNTM3ZjItZjg3MS00ZjgxLWIyMGItYWUwNDYxMGM1 MjFkMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk MzgyMjhiZTItOGUyZC00ZWMyLWFjYzktNDAxN2JjZmJhNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoO7hGHIKoyz5YMIYXNMAy6zeM+sqxy38k51 +nyrSmbAw6q0lzgXcUhQ+TI1CgaqZghp5RHhDrcWwKFTVq00mCmPQIp5Md73kntJ eZG5cT97DSu8/IAcCvio4C3zFa6YAEmYlPSrisRNThmxW/PikG8DHbfpWwCC1xFb sgl1jjnDkd5RAO01cNvh3AR/GNspRQ7VFGrJ0RESyHQPQ0NqjuzLArHJOTZBxvzl Rfs66WoihFQ7JwOn/pbuI4aXPwWA839A7l3YgFmeogPVeDLD+y4wQjtz2paawTt6 c1Ab2u4c2EiLp1ueFJRyc2AIXOzVpj0pwmiGU4+ABZ292n+8cwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKTVQDuSMSz2J8bfhMyNsQ+JDm6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMGQ1 MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0NjEwYzUyMWQvYmMyMjVjN2EtMGRkZi0z YzA0LWI3ZWEtMjE1OGU2OTFhOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzBkNTM3ZjItZjg3MS00ZjgxLWIy MGItYWUwNDYxMGM1MjFkLzMwZDUzN2YyLWY4NzEtNGY4MS1iMjBiLWFlMDQ2MTBj NTIxZC5jcmwwHwYDVR0jBBgwFoAUDtDEojmV9uViCgbKK8mEogXk5IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMGQ1MzdmMi1mODcxLTRmODEtYjIwYi1hZTA0 NjEwYzUyMWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLSnwAwQC 2JIUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFQ8xck2lhd/1RYZphfgQv//hEZLuyetXvqRDfQ4nltvOGAG W3lDgtMK8CapaIH4gxxsneVv2jg8Nk6Iq4L5wyznntQQzTN5yq273qNuGjPTofXX 6g9TJ4k3i6pf9sd/rG24aMwmb4+gJvjXBcfqkELcbgDEpHBS7F3H5YqxCbBATJ7E Yd+22zVZkvecEk1ZJwuQQCZvJbLa/ULe7c0JzqqtcmDn+zAVoAn3rnDZQmtmLgNK mu7Ahm4sKQQPs9d3ZWh9cPGFrmw1tIR6ALrPfxIofxb77d1SOWcO7koq4VFjSYAe MaJH4KSC4y2FruCEQcbBGxr8p6jysRPXzfkwjRg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:28 2024 by rpki-client on console-ams.rpki-client.org