$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa File: 4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa (raw, json) Hash identifier: LXF3PVIYxNy4WhSm0uIxeao6OjIxIJ8CPZGBzSVNrpk= Subject key identifier: F8:F5:6F:0B:0F:4E:40:23:53:EC:EA:3D:70:78:7C:BE:2C:55:93:CD Certificate issuer: /CN=03f68bb7-1e42-452b-a9a1-99c7586beba0 Certificate serial: 010D0C9F432858473095FB2CFEA4A867D5CD4280 Authority key identifier: 4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 13652 IP address blocks: 162.212.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:fb:2c:fe:a4:a8:67:d5:cd:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f68bb7-1e42-452b-a9a1-99c7586beba0 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=5a5be2ff-ee62-4f0e-815d-8fba111e1a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:f6:a7:e4:a0:12:f6:04:b6:e6:2c:aa:ea: 1f:31:45:2a:55:9f:a4:89:a0:00:05:72:75:a5:77: 16:0b:a5:76:69:29:62:a2:ef:31:06:4d:0c:d2:95: cb:7e:01:01:f0:e5:68:27:f5:c5:a7:59:90:74:01: 72:75:c8:75:32:97:4f:98:09:77:dc:ab:9e:05:db: 5c:d2:32:7d:09:32:1c:e5:55:7f:43:c8:ff:95:33: 1f:cb:00:f4:73:54:c0:9e:b8:80:4b:34:27:b4:df: ec:cc:c0:10:5a:cd:8a:f7:28:c3:49:0f:be:97:13: d5:d5:34:9f:65:ea:58:e7:88:68:fd:b0:7b:9f:ae: 9e:d1:79:46:ea:f1:fa:1e:f7:04:3f:46:94:cc:4a: 7a:42:e5:82:73:d0:46:3e:79:d6:20:c3:b2:b7:fc: b5:5c:5a:a2:87:b1:b3:92:8d:8f:85:dc:78:ae:70: 73:79:bd:1f:fa:97:57:3e:b1:17:3c:fd:cb:88:63: 36:7b:26:93:a1:07:73:02:e2:83:d0:e6:e1:09:80: 5d:48:4e:d6:ee:9a:79:be:95:12:68:2c:c4:a6:dc: 7e:04:a5:ee:1b:86:7e:bf:9e:03:96:e1:8f:30:8a: c9:5b:d3:17:a8:db:95:82:de:36:f3:f1:29:fc:02: fd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F5:6F:0B:0F:4E:40:23:53:EC:EA:3D:70:78:7C:BE:2C:55:93:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl X509v3 Authority Key Identifier: keyid:4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer sbgp-ipAddrBlock: critical IPv4: 162.212.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:71:a7:fa:e7:e1:85:e3:67:7e:cf:19:2a:75:74:f5:7f:2f: 66:b2:54:5c:30:49:99:ec:a3:58:3c:48:28:91:2d:72:74:db: f0:ea:42:a9:d0:80:dd:c2:3c:a4:c6:05:76:1e:0e:28:ae:25: 49:b9:c0:90:3b:03:a0:4e:60:fc:5f:aa:b7:22:7a:07:be:4e: 46:77:0d:86:2e:72:b3:2a:6c:49:24:f5:f0:a5:00:e0:ce:d6: d5:b6:88:9b:1f:e1:28:76:40:8e:f8:2c:08:cd:4b:3d:ad:19: a1:7c:f6:2b:cc:67:fa:a8:3b:d0:f4:5a:d7:09:dc:0b:87:ba: 87:ee:93:38:a7:58:ae:7a:3a:1b:87:cd:08:4a:15:b1:fd:0a: 7e:07:30:05:ad:7a:30:fc:10:a4:a9:9a:7c:13:92:3c:8b:16: be:5a:02:37:de:c1:f4:2a:2f:8d:b6:eb:b0:5d:68:1d:e4:97: 85:3c:d4:3d:9f:73:4c:6c:26:6e:8b:29:01:a0:81:46:77:2b: 6d:45:ed:be:02:a7:7e:ce:23:9b:82:02:43:fe:c1:33:b3:67: d3:3e:2f:b2:8b:59:db:07:64:84:bf:cf:7c:9e:d8:9f:5e:f2: d4:db:a0:d8:b8:6e:0e:43:19:88:0a:32:be:12:e4:ca:1f:82: c6:2f:2f:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlfss/qSoZ9XNQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNmNjhiYjctMWU0Mi00NTJiLWE5YTEtOTljNzU4NmJl YmEwMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk NWE1YmUyZmYtZWU2Mi00ZjBlLTgxNWQtOGZiYTExMWUxYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0n2p+SgEvYEtuYsquofMUUqVZ+kiaAABXJ1 pXcWC6V2aSliou8xBk0M0pXLfgEB8OVoJ/XFp1mQdAFydch1MpdPmAl33KueBdtc 0jJ9CTIc5VV/Q8j/lTMfywD0c1TAnriASzQntN/szMAQWs2K9yjDSQ++lxPV1TSf ZepY54ho/bB7n66e0XlG6vH6HvcEP0aUzEp6QuWCc9BGPnnWIMOyt/y1XFqih7Gz ko2Phdx4rnBzeb0f+pdXPrEXPP3LiGM2eyaToQdzAuKD0ObhCYBdSE7W7pp5vpUS aCzEptx+BKXuG4Z+v54DluGPMIrJW9MXqNuVgt428/Ep/AL9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj1bwsPTkAjU+zqPXB4fL4sVZPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2 OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3NTg2YmViYTAvNGE5ZjRkZjAtNWQwZS0z YTJhLWJhNTMtZTAwMmZmNDFmODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDNmNjhiYjctMWU0Mi00NTJiLWE5 YTEtOTljNzU4NmJlYmEwLzAzZjY4YmI3LTFlNDItNDUyYi1hOWExLTk5Yzc1ODZi ZWJhMC5jcmwwHwYDVR0jBBgwFoAUSv4UcYhi1ik6o3u+cxOtoeiMSVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3 NTg2YmViYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJxp/rn4YXjZ37PGSp1dPV/L2ayVFwwSZnso1g8SCiRLXJ02/DqQqnQ gN3CPKTGBXYeDiiuJUm5wJA7A6BOYPxfqrciege+TkZ3DYYucrMqbEkk9fClAODO 1tW2iJsf4Sh2QI74LAjNSz2tGaF89ivMZ/qoO9D0WtcJ3AuHuofukzinWK56OhuH zQhKFbH9Cn4HMAWtejD8EKSpmnwTkjyLFr5aAjfewfQqL42267BdaB3kl4U81D2f c0xsJm6LKQGggUZ3K21F7b4Cp37OI5uCAkP+wTOzZ9M+L7KLWdsHZIS/z3ye2J9e 8tTboNi4bg5DGYgKMr4S5MofgsYvLxE= -----END CERTIFICATE-----Generated at Thu Nov 21 15:38:35 2024 by rpki-client on console-fra.rpki-client.org