$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa File: 0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json) Hash identifier: nlyiSefmyncg0ldV7tO/VWT4Zj36zvpLVux7hwFcqg4= Subject key identifier: E6:24:8D:3A:6E:08:18:18:6F:C6:9D:16:02:B8:C7:E2:90:A8:6B:B8 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F432858477660FAD6DE11BDF2F5423280 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 8987 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:60:fa:d6:de:11:bd:f2:f5:42:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=3cfe7821-a28e-4aeb-97bb-2f5033a9441a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:87:93:a5:7d:a5:e5:30:f4:6e:03:42:7c: c3:5e:ee:03:e2:77:78:81:2d:19:a6:50:bb:ac:4c: b0:28:51:8b:93:16:77:6e:1b:04:f7:58:41:98:bf: 95:29:a0:d3:43:79:d7:9f:65:36:96:28:6c:b9:30: f5:b4:63:ab:2e:d8:57:2a:2c:80:84:32:25:d3:01: b4:37:f3:69:17:75:0a:93:73:95:84:40:6e:f0:44: 07:d9:b1:37:db:bc:c9:bb:ed:5c:6d:03:7e:81:7f: e7:48:25:d3:2d:be:2b:28:29:d1:bb:10:23:ac:21: 22:8f:c5:f0:f7:f3:62:6f:e8:ee:4e:a8:30:1f:e5: 99:06:90:3d:9c:72:67:55:10:b5:12:2f:1e:74:81: c1:12:53:a9:97:f7:f0:35:76:66:c6:ab:ae:0a:ff: 6f:38:b6:52:a6:cf:40:66:a2:59:6f:f6:1f:2d:1a: fc:14:60:c1:4f:c0:76:41:45:12:a4:09:9a:26:39: f3:5b:3b:c2:1f:05:06:1d:8c:4d:cf:9e:57:fd:8e: 1c:9e:cd:14:7a:03:f3:3a:cc:20:98:6d:12:ac:18: 99:e8:68:1a:f2:a8:a5:7f:40:c8:c0:a2:6c:05:c4: 8b:3c:d2:2a:cc:aa:6e:22:c8:e5:92:82:13:76:56: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:24:8D:3A:6E:08:18:18:6F:C6:9D:16:02:B8:C7:E2:90:A8:6B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9f:df:e2:97:50:6f:83:4a:88:f2:fd:c3:93:cb:5a:79:5c: ac:37:ec:61:49:ea:bc:67:c3:d2:bf:9f:fb:ef:fb:e9:7f:d6: c6:f4:36:69:2c:59:8c:42:e7:df:87:8e:50:55:fc:8c:8c:fd: 9a:44:89:76:b5:52:f7:84:26:0d:15:f2:b0:7c:bf:6e:91:43: 06:39:50:f7:ee:af:69:79:14:e6:82:8f:37:64:d6:1e:85:b0: e1:a7:97:a3:2d:ac:67:7e:b9:cd:66:d7:e0:e4:ef:c2:9f:b3: ac:21:9e:49:8a:cc:eb:a3:e6:5a:a9:86:a5:45:1c:03:3a:bd: ba:02:05:ac:06:f0:1c:31:d6:36:d9:7d:a7:27:fe:24:8e:f9: ad:63:29:60:aa:9d:8d:a6:1b:ad:42:e4:b1:b7:d8:1a:76:4b: 3e:2b:d1:fa:54:83:f7:1f:db:fc:78:2d:7b:b9:4f:54:b1:53: 08:2f:20:02:95:5e:25:4c:0c:48:3c:15:fb:d4:e9:4e:a9:9d: 0b:68:6b:27:16:0e:c3:a1:92:76:9a:36:3d:e5:2b:2c:1c:67: 83:5f:68:73:81:43:13:80:48:42:61:c1:af:59:df:18:70:48: be:7e:3f:5b:4e:9f:e1:39:09:00:32:67:63:c1:ed:16:5e:6d: c0:b7:61:a0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEd2YPrW3hG98vVCMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk M2NmZTc4MjEtYTI4ZS00YWViLTk3YmItMmY1MDMzYTk0NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgySHk6V9peUw9G4DQnzDXu4D4nd4gS0ZplC7 rEywKFGLkxZ3bhsE91hBmL+VKaDTQ3nXn2U2lihsuTD1tGOrLthXKiyAhDIl0wG0 N/NpF3UKk3OVhEBu8EQH2bE327zJu+1cbQN+gX/nSCXTLb4rKCnRuxAjrCEij8Xw 9/Nib+juTqgwH+WZBpA9nHJnVRC1Ei8edIHBElOpl/fwNXZmxquuCv9vOLZSps9A ZqJZb/YfLRr8FGDBT8B2QUUSpAmaJjnzWzvCHwUGHYxNz55X/Y4cns0UegPzOswg mG0SrBiZ6Gga8qilf0DIwKJsBcSLPNIqzKpuIsjlkoITdlaD9wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFOYkjTpuCBgYb8adFgK4x+KQqGu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMGNkODc0OWYtZTgzYi0z NGQ4LWEyZWQtMjFhMzgzY2ZlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAuf3+KXUG+DSojy/cOTy1p5XKw3 7GFJ6rxnw9K/n/vv++l/1sb0NmksWYxC59+HjlBV/IyM/ZpEiXa1UveEJg0V8rB8 v26RQwY5UPfur2l5FOaCjzdk1h6FsOGnl6MtrGd+uc1m1+Dk78Kfs6whnkmKzOuj 5lqphqVFHAM6vboCBawG8Bwx1jbZfacn/iSO+a1jKWCqnY2mG61C5LG32Bp2Sz4r 0fpUg/cf2/x4LXu5T1SxUwgvIAKVXiVMDEg8FfvU6U6pnQtoaycWDsOhknaaNj3l KywcZ4NfaHOBQxOASEJhwa9Z3xhwSL5+P1tOn+E5CQAyZ2PB7RZebcC3YaA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org