$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa File: 3c45d558-4110-3bb1-a881-a92d5ab92991.roa (raw, json) Hash identifier: bluLxtPPNVqvGHBocM7RCCnD6bsysQplvrGiwLlLnI0= Subject key identifier: B3:9B:19:BD:0E:23:51:6A:4B:AB:E7:AC:D0:A7:0C:A6:25:25:5A:58 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285847B9617B1CB33DB38BD2950C40 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 46261 IP address blocks: 45.33.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:7b:1c:b3:3d:b3:8b:d2:95:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=a4d5f399-b435-4115-a00a-cd37f668494b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:c8:0c:31:09:19:b7:9d:eb:91:95:40:b6: ff:8b:9d:4b:2b:08:72:50:a5:8d:e7:59:6a:9f:40: c4:d1:9c:70:c0:b1:d7:17:71:75:0a:e0:7e:af:5f: 36:db:32:0a:3b:6b:32:d6:17:5a:b4:35:76:2c:6f: 0c:4c:5b:40:84:6d:fb:81:66:8a:6b:63:b2:48:91: 3f:b0:fd:cc:92:27:c9:7c:43:7d:7e:70:24:f4:65: ea:45:52:d8:fd:bb:e3:38:f7:da:a4:e6:0e:ca:02: 84:fe:fa:78:7c:36:ed:4b:30:00:d2:19:b6:d9:c9: b9:f6:71:57:00:15:9b:15:9a:61:a9:38:38:21:b1: f2:48:ce:03:41:e0:04:df:ed:57:8c:a4:a1:71:43: f0:7e:77:12:0f:b0:d8:70:ec:7d:a6:95:63:ab:83: d9:44:0a:38:e7:a3:17:a0:ef:94:b4:f7:6a:dc:97: ac:6d:fb:e1:f1:25:f3:86:4a:46:b3:71:f5:bf:d6: d8:d0:91:eb:44:69:c7:7e:91:2f:09:ed:e3:4f:b8: 70:32:5c:f7:91:f5:1c:f5:3c:51:c6:43:df:54:19: 2d:e5:89:41:f6:d1:73:61:2c:30:fa:c0:3d:88:b8: 41:40:13:65:87:ab:ed:ff:f3:63:d7:9d:4c:68:ab: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9B:19:BD:0E:23:51:6A:4B:AB:E7:AC:D0:A7:0C:A6:25:25:5A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3c45d558-4110-3bb1-a881-a92d5ab92991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 45.33.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:04:f0:b2:e8:9b:60:27:23:5b:a4:b2:c8:e7:2e:f7:92:1b: 7a:1a:81:c9:15:0c:42:99:cb:d8:de:4f:b5:ac:56:f8:fb:d5: c9:4c:be:4a:9d:52:9f:23:c1:e7:b5:ed:46:c8:bc:79:76:70: dd:f5:04:f0:0d:fc:8c:8e:15:ea:84:8c:21:2e:af:40:1c:1c: b9:52:f4:3d:e7:fa:89:50:58:2c:75:82:1e:14:c6:61:bc:11: 39:70:85:11:35:67:41:c1:3a:96:8e:26:1d:86:56:ca:13:b4: de:be:d7:5a:c2:81:0d:e5:f2:68:ba:44:b9:26:93:56:fe:c9: 86:23:2a:a4:0f:9a:39:b1:81:6e:bd:36:b5:71:ca:72:27:53: de:50:12:57:7e:52:93:df:e0:f3:6c:31:8c:8b:d9:b5:d4:eb: eb:70:3b:f8:21:22:08:92:fa:b1:d2:b1:9d:f7:c7:80:29:84: 42:77:0f:26:01:5a:f1:c3:01:be:e1:a2:4e:11:50:d2:b1:79: e2:af:75:59:47:8c:35:65:93:7f:00:8f:e6:5b:79:10:62:5a: 32:2a:95:fe:75:58:b1:bb:1b:54:ae:4b:db:31:13:a4:15:f3: 00:e9:4c:6a:29:54:9b:42:39:96:8c:06:6d:3a:d1:22:28:22: 0f:ad:b0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXscsz2zi9KVDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk YTRkNWYzOTktYjQzNS00MTE1LWEwMGEtY2QzN2Y2Njg0OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCvIDDEJGbed65GVQLb/i51LKwhyUKWN51lq n0DE0ZxwwLHXF3F1CuB+r1822zIKO2sy1hdatDV2LG8MTFtAhG37gWaKa2OySJE/ sP3MkifJfEN9fnAk9GXqRVLY/bvjOPfapOYOygKE/vp4fDbtSzAA0hm22cm59nFX ABWbFZphqTg4IbHySM4DQeAE3+1XjKShcUPwfncSD7DYcOx9ppVjq4PZRAo456MX oO+UtPdq3Jesbfvh8SXzhkpGs3H1v9bY0JHrRGnHfpEvCe3jT7hwMlz3kfUc9TxR xkPfVBkt5YlB9tFzYSww+sA9iLhBQBNlh6vt//Nj151MaKub4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLObGb0OI1FqS6vnrNCnDKYlJVpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2M0NWQ1NTgtNDExMC0z YmIxLWE4ODEtYTkyZDVhYjkyOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkE8LLom2AnI1ukssjnLveSG3oagckVDEKZy9jeT7WsVvj71clMvkqd Up8jwee17UbIvHl2cN31BPAN/IyOFeqEjCEur0AcHLlS9D3n+olQWCx1gh4UxmG8 ETlwhRE1Z0HBOpaOJh2GVsoTtN6+11rCgQ3l8mi6RLkmk1b+yYYjKqQPmjmxgW69 NrVxynInU95QEld+UpPf4PNsMYyL2bXU6+twO/ghIgiS+rHSsZ33x4AphEJ3DyYB WvHDAb7hok4RUNKxeeKvdVlHjDVlk38Aj+ZbeRBiWjIqlf51WLG7G1SuS9sxE6QV 8wDpTGopVJtCOZaMBm060SIoIg+tsHg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org