$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa File: 1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa (raw, json) Hash identifier: zoCDwX2upaUBzNHl4oyqbu5Bl4sjnzP8DzQ3JbDo9eQ= Subject key identifier: 76:34:BD:C3:F2:AC:D5:F4:E1:CC:F8:0F:98:42:3C:3C:7B:2E:92:C5 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F432858476C9DB07F7956079207EE2200 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 3257 IP address blocks: 45.41.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b0:7f:79:56:07:92:07:ee:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=3c42f9ab-3c1d-4977-bb13-4919cafa65ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:65:b8:1a:0d:5e:e7:1e:5a:04:90:6e:16: bb:31:7d:de:cf:12:3d:41:17:5f:05:72:44:b7:d0: 9c:e4:ce:c2:b3:6c:5b:20:bf:44:88:0d:41:39:93: 64:95:69:a8:16:29:cf:f3:af:3c:7f:4f:9c:a2:70: cd:8c:15:ec:19:38:e6:5e:ef:cd:1c:76:32:c5:24: e8:20:5f:3a:d0:d5:10:33:80:58:db:e1:8e:74:4a: e2:af:cb:6f:47:54:5a:6c:a1:7a:56:c9:a5:5b:ed: f5:bc:04:4d:95:4d:50:35:bd:6f:88:47:70:3d:a2: 43:c4:0c:78:d1:e6:f8:e8:32:c9:0e:58:e0:d0:ee: bd:7a:0f:94:9d:d4:dc:64:ac:fa:b0:b0:fd:72:23: 3c:be:f4:0b:69:bc:b0:fb:39:31:00:93:5d:1a:b9: 62:9b:2a:2f:dc:bb:6d:b0:c0:a3:ef:56:8b:dd:58: 9b:9c:73:fc:e1:b3:96:0e:8b:42:cd:ef:2c:c1:7c: 75:83:f1:59:52:f5:a6:e6:80:c7:54:19:d6:b0:29: ed:9d:8b:fb:d1:2b:ed:63:83:76:3b:65:58:ff:d9: ed:33:9b:65:9b:d1:05:d3:7b:d2:9f:20:88:91:f5: 95:df:83:6b:3f:76:70:b9:9b:d8:7c:de:48:67:12: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:34:BD:C3:F2:AC:D5:F4:E1:CC:F8:0F:98:42:3C:3C:7B:2E:92:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 45.41.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a1:90:9e:1a:2c:5e:b0:94:bb:29:82:d2:7c:33:20:82:43: 83:45:ce:6f:85:9a:05:15:2f:33:45:62:22:99:ae:f3:3f:e8: 7f:68:6a:4b:2f:d0:c7:35:7c:91:f1:4d:e4:ce:99:e1:26:0a: 31:4d:da:07:ad:97:3e:0b:42:a5:73:41:9e:fc:27:38:f0:70: 9a:38:c9:ab:a8:6b:17:de:29:a0:4f:3a:fe:82:cd:ff:5b:b4: ec:3d:41:8a:9f:ef:32:7e:1c:0c:0b:43:3c:0d:dc:ac:0f:36: 9a:09:d0:42:27:42:c5:72:06:3d:70:4c:00:a2:af:54:1d:74: 4f:83:8b:e8:b8:97:c5:78:a7:fd:f7:e6:57:c2:91:44:5a:6e: c7:f0:de:ac:7d:c4:2f:0a:ab:95:3d:94:8e:d7:dd:80:ff:5b: 8e:2b:73:51:39:58:14:48:c4:63:fe:82:9a:44:ce:e6:f4:1d: 61:66:a1:b3:01:9a:d4:2c:2c:f7:0f:63:23:a9:5d:2c:73:0f: df:95:7a:c5:aa:71:ed:d5:34:65:5e:41:30:c0:eb:28:24:3c: 75:51:be:b0:8c:ab:5b:c8:ad:76:fd:1b:b9:22:81:b4:20:df: da:e9:88:c5:bc:3a:4d:63:9f:43:ca:38:23:9e:be:c6:b5:02: ed:6a:6a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbB/eVYHkgfuIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2M0MmY5YWItM2MxZC00OTc3LWJiMTMtNDkxOWNhZmE2NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv51luBoNXuceWgSQbha7MX3ezxI9QRdfBXJE t9Cc5M7Cs2xbIL9EiA1BOZNklWmoFinP8688f0+conDNjBXsGTjmXu/NHHYyxSTo IF860NUQM4BY2+GOdErir8tvR1RabKF6VsmlW+31vARNlU1QNb1viEdwPaJDxAx4 0eb46DLJDljg0O69eg+UndTcZKz6sLD9ciM8vvQLabyw+zkxAJNdGrlimyov3Ltt sMCj71aL3VibnHP84bOWDotCze8swXx1g/FZUvWm5oDHVBnWsCntnYv70SvtY4N2 O2VY/9ntM5tlm9EF03vSnyCIkfWV34NrP3ZwuZvYfN5IZxLuUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY0vcPyrNX04cz4D5hCPDx7LpLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvMWU2OWRiZDYtNjk0Zi0z YzVkLTg5ZmItYTVjNGE4MWRmNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGChkJ4aLF6wlLspgtJ8MyCCQ4NFzm+FmgUVLzNFYiKZrvM/6H9oaksv 0Mc1fJHxTeTOmeEmCjFN2getlz4LQqVzQZ78JzjwcJo4yauoaxfeKaBPOv6Czf9b tOw9QYqf7zJ+HAwLQzwN3KwPNpoJ0EInQsVyBj1wTACir1QddE+Di+i4l8V4p/33 5lfCkURabsfw3qx9xC8Kq5U9lI7X3YD/W44rc1E5WBRIxGP+gppEzub0HWFmobMB mtQsLPcPYyOpXSxzD9+VesWqce3VNGVeQTDA6ygkPHVRvrCMq1vIrXb9G7kigbQg 39rpiMW8Ok1jn0PKOCOevsa1Au1qagA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:30 2024 by rpki-client on console-ams.rpki-client.org