$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa File: d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa (raw, json) Hash identifier: JYk8V7WOyptfwI4/RjFAqSqjrbXBowU8r4bbxp7Qy0s= Subject key identifier: D2:66:F7:A0:E5:65:59:E0:2F:D7:BA:77:C5:55:F1:2A:93:CF:62:AA Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Certificate serial: 010D0C9F43285847A1A68021BC9E19F2AF503D00 Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa Signing time: Wed 23 Oct 2024 01:00:32 +0000 ROA not before: Wed 23 Oct 2024 01:00:32 +0000 ROA not after: Tue 21 Jan 2025 02:00:32 +0000 asID: 400967 IP address blocks: 45.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a1:a6:80:21:bc:9e:19:f2:af:50:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2 Validity Not Before: Oct 23 01:00:32 2024 GMT Not After : Jan 21 02:00:32 2025 GMT Subject: CN=c7a1645a-29b7-4804-ad7d-59c4efaa25c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:ea:37:ad:01:58:15:62:9c:da:1d:82:de: e2:36:e2:ee:4d:1d:f1:64:54:53:51:90:13:d8:0c: 13:f1:b3:3f:e8:76:6e:d9:1c:6f:2c:05:0f:b3:a5: 97:26:8d:3c:05:0e:5f:f7:9e:4c:70:5a:8f:fe:c3: 14:43:cb:5a:be:99:7a:cd:83:31:f8:14:4e:2c:38: 3b:35:1c:ba:48:e2:2e:3f:19:68:e0:9d:c8:f9:ca: f5:fa:7c:d8:79:36:c1:15:0e:e5:91:0e:72:e2:30: 05:50:f5:d8:89:ce:fa:3a:64:bc:31:00:80:43:eb: ae:88:e1:28:e2:23:e0:69:b8:10:b7:c5:47:4a:cf: 3c:67:cf:9e:37:53:57:74:1a:ed:5c:ca:f8:ff:11: ef:f0:6d:59:8e:b5:86:77:79:53:3f:d3:3f:fc:78: a1:9c:fd:2e:39:13:e2:4d:80:f1:73:fd:c1:a9:bb: 0e:85:71:19:99:11:d6:5f:2e:a4:69:c9:dc:a6:c3: bd:49:2e:0d:18:1f:94:82:ef:87:ec:0a:a3:2a:71: 1f:35:33:e1:15:a9:56:5e:e1:66:1f:c4:34:14:1e: 99:58:4b:ef:25:61:e2:b3:75:e2:9d:07:4a:43:87: 45:57:9c:d2:95:99:fd:49:73:3e:a4:af:41:23:fa: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:66:F7:A0:E5:65:59:E0:2F:D7:BA:77:C5:55:F1:2A:93:CF:62:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/d3feff24-9cb3-3c7d-80c0-f4c76fe302b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl X509v3 Authority Key Identifier: keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer sbgp-ipAddrBlock: critical IPv4: 45.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:06:7d:15:e0:7b:3a:f4:e2:36:ae:12:cf:8a:c6:ee:25:42: 58:d1:8b:81:6f:e9:48:f2:01:27:e1:d3:67:4f:4b:7f:4f:43: eb:57:43:1a:ab:b2:cf:e1:c2:b6:04:75:62:24:66:8c:17:25: c0:3d:6f:09:50:17:0e:45:07:34:41:77:60:5e:d5:84:4c:74: 2b:b5:1b:9c:f0:b8:b3:13:6b:b3:6e:90:c6:a7:d2:76:e9:14: 0d:42:4c:fa:a0:b8:97:ee:39:58:23:7b:37:d3:02:d3:e2:b5: a0:84:93:a0:ca:ca:3e:ec:89:42:bf:44:6c:03:b7:da:42:69: 3a:69:d5:b7:5e:90:40:ef:6c:59:99:07:9a:81:da:00:26:ad: f7:bf:78:7d:4c:00:a8:6a:f1:c9:6f:09:c6:27:19:01:a3:fc: 6c:2e:32:56:a7:91:88:68:95:88:39:48:63:06:bd:1b:f1:70: 84:e0:84:93:46:50:00:22:0f:27:41:5c:b9:55:38:b0:e5:52: 49:12:bc:34:ca:52:53:27:ac:9c:44:5f:2e:0a:ce:1b:b9:b8: 0b:b1:04:97:f7:d3:ac:72:61:07:de:e5:04:3e:e4:84:0f:ed: 65:c3:10:f7:96:1d:f2:07:6c:7a:3b:ba:90:bb:29:fa:c4:dd: 06:01:e7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEehpoAhvJ4Z8q9QPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2 N2QyMB4XDTI0MTAyMzAxMDAzMloXDTI1MDEyMTAyMDAzMlowLzEtMCsGA1UEAxMk YzdhMTY0NWEtMjliNy00ODA0LWFkN2QtNTljNGVmYWEyNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcDqN60BWBVinNodgt7iNuLuTR3xZFRTUZAT 2AwT8bM/6HZu2RxvLAUPs6WXJo08BQ5f955McFqP/sMUQ8tavpl6zYMx+BROLDg7 NRy6SOIuPxlo4J3I+cr1+nzYeTbBFQ7lkQ5y4jAFUPXYic76OmS8MQCAQ+uuiOEo 4iPgabgQt8VHSs88Z8+eN1NXdBrtXMr4/xHv8G1ZjrWGd3lTP9M//HihnP0uORPi TYDxc/3BqbsOhXEZmRHWXy6kacncpsO9SS4NGB+Ugu+H7AqjKnEfNTPhFalWXuFm H8Q0FB6ZWEvvJWHis3XinQdKQ4dFV5zSlZn9SXM+pK9BI/o15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJm96DlZVngL9e6d8VV8SqTz2KqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvZDNmZWZmMjQtOWNiMy0z YzdkLTgwYzAtZjRjNzZmZTMwMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3 NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj NzFhNzY3ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwGfRXgezr04jauEs+Kxu4lQljRi4Fv6UjyASfh02dPS39PQ+tXQxqr ss/hwrYEdWIkZowXJcA9bwlQFw5FBzRBd2Be1YRMdCu1G5zwuLMTa7NukMan0nbp FA1CTPqguJfuOVgjezfTAtPitaCEk6DKyj7siUK/RGwDt9pCaTpp1bdekEDvbFmZ B5qB2gAmrfe/eH1MAKhq8clvCcYnGQGj/GwuMlankYholYg5SGMGvRvxcITghJNG UAAiDydBXLlVOLDlUkkSvDTKUlMnrJxEXy4Kzhu5uAuxBJf306xyYQfe5QQ+5IQP 7WXDEPeWHfIHbHo7upC7KfrE3QYB5x8= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:45 2024 by rpki-client on console-fra.rpki-client.org