$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa File: c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa (raw, json) Hash identifier: pf5usOTQKuT+/rEfta84cc3DHPn9nys5i+fNYT42xPI= Subject key identifier: BA:60:81:C4:36:70:08:83:42:6B:CA:C8:C2:6E:E4:7A:BB:57:C7:22 Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F43285847792BB96F73C76CBD6DBF2BC0 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 30722 IP address blocks: 47.53.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:b9:6f:73:c7:6c:bd:6d:bf:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=bd50bac1-16d5-49e5-b4ab-e443c4c06aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:56:f6:b6:99:1e:a7:94:d6:f0:94:ab:6c: 68:fd:8b:31:de:90:d6:36:1c:2f:39:c5:a8:61:1f: 35:2b:a9:e2:37:5d:03:a6:06:67:5a:a4:99:ac:52: 8d:ef:e4:1a:df:6f:20:36:58:d6:46:9a:a0:46:f8: 37:41:b4:9c:09:1a:6c:fb:30:da:70:cf:40:d6:09: aa:22:1e:8b:41:17:e9:3b:a7:61:23:34:95:7c:45: d8:c0:ff:5f:4d:7f:e2:10:74:ff:41:e4:c0:84:52: 95:c9:b3:2b:2a:ce:20:d6:c4:37:16:6d:02:0a:08: 91:c4:65:25:ae:4b:2b:7d:e6:35:f2:73:88:26:a1: fb:2a:67:3d:8a:df:54:40:f5:52:6e:8a:36:8f:78: 82:5a:f1:7f:61:27:79:2b:85:ca:44:b4:df:54:59: c4:05:61:31:c5:6a:06:68:87:f3:9a:fe:93:e7:97: 24:0d:bb:24:c9:25:cf:10:06:dc:12:02:18:30:59: 25:aa:21:b3:d1:a5:1e:00:09:35:58:70:79:a2:d1: 7a:dd:e4:f7:d8:8f:29:cd:92:d9:7d:fa:69:23:c3: 0c:2a:b3:5e:a0:1a:62:f0:ff:71:4c:18:36:72:82: 9b:a7:e0:3a:7d:55:42:0b:e1:67:93:c9:11:ad:4e: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:60:81:C4:36:70:08:83:42:6B:CA:C8:C2:6E:E4:7A:BB:57:C7:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.53.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e4:e4:40:1d:c4:c5:1e:20:ca:ae:96:39:12:61:37:3c:f3: 50:c1:fa:ae:3e:7c:7a:fc:6e:ce:7e:9c:01:b5:40:b9:d8:39: 84:df:bb:86:87:db:34:c3:37:64:1b:8b:cf:2f:74:de:45:1a: a5:29:a1:33:45:b8:e4:cc:e4:2b:cc:65:df:14:ae:09:8c:1c: d3:1c:d8:02:cc:83:d4:a7:f9:e4:64:64:2f:64:e6:ff:2d:56: f8:3f:74:8b:ef:68:83:3d:82:00:5a:76:c2:57:a1:d2:b9:e0: b6:c2:31:e0:da:a9:b5:e9:22:a2:5e:d0:c6:29:e6:9c:6e:0e: bf:17:94:19:e8:18:32:ab:39:b0:ec:fe:31:fa:39:d0:90:31: f7:9d:c3:98:4c:b7:40:01:20:d8:30:7b:54:5c:45:64:99:e5: 2e:1b:4b:da:36:e6:66:3e:af:54:54:35:a3:03:83:2e:aa:35: 7d:e3:6c:74:e8:73:93:cc:0d:fc:64:c5:cf:84:7a:e9:62:29: ad:14:7e:cb:e2:05:10:69:ae:8d:9d:73:f3:76:51:83:97:0f: 3c:41:67:e3:db:e2:6c:33:b6:51:4c:2e:fe:da:0c:c4:7a:d2: 42:96:62:8e:0a:d8:4a:6d:cc:43:33:ee:08:54:7e:b4:f3:19: e2:c2:bb:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K7lvc8dsvW2/K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YmQ1MGJhYzEtMTZkNS00OWU1LWI0YWItZTQ0M2M0YzA2YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ5W9raZHqeU1vCUq2xo/Ysx3pDWNhwvOcWo YR81K6niN10DpgZnWqSZrFKN7+Qa328gNljWRpqgRvg3QbScCRps+zDacM9A1gmq Ih6LQRfpO6dhIzSVfEXYwP9fTX/iEHT/QeTAhFKVybMrKs4g1sQ3Fm0CCgiRxGUl rksrfeY18nOIJqH7Kmc9it9UQPVSboo2j3iCWvF/YSd5K4XKRLTfVFnEBWExxWoG aIfzmv6T55ckDbskySXPEAbcEgIYMFklqiGz0aUeAAk1WHB5otF63eT32I8pzZLZ ffppI8MMKrNeoBpi8P9xTBg2coKbp+A6fVVCC+Fnk8kRrU4qlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpggcQ2cAiDQmvKyMJu5Hq7V8ciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvYzExZDdmYWQtNWIyNS0z NmJjLTg0OTctNDVjODZlOWJlYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELzXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTk5EAdxMUeIMquljkSYTc881DB+q4+fHr8bs5+nAG1QLnYOYTfu4aH 2zTDN2Qbi88vdN5FGqUpoTNFuOTM5CvMZd8UrgmMHNMc2ALMg9Sn+eRkZC9k5v8t Vvg/dIvvaIM9ggBadsJXodK54LbCMeDaqbXpIqJe0MYp5pxuDr8XlBnoGDKrObDs /jH6OdCQMfedw5hMt0ABINgwe1RcRWSZ5S4bS9o25mY+r1RUNaMDgy6qNX3jbHTo c5PMDfxkxc+EeuliKa0UfsviBRBpro2dc/N2UYOXDzxBZ+Pb4mwztlFMLv7aDMR6 0kKWYo4K2EptzEMz7ghUfrTzGeLCu/k= -----END CERTIFICATE-----Generated at Mon Nov 25 13:53:12 2024 by rpki-client on console-ams.rpki-client.org