$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa File: ceb06be8-602c-3b37-8ee5-ecc299990815.roa (raw, json) Hash identifier: Uf4eiVqoMjoKEFAGACbAenWaCSM+vYxzue5H6QEjHzY= Subject key identifier: C1:2B:CA:DA:49:BE:1B:F6:C3:4F:32:6B:69:65:C3:A6:DA:E1:72:FC Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Certificate serial: 010D0C9F43285847DF2F54DF512B670527EEB350 Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 394491 IP address blocks: 45.45.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:54:df:51:2b:67:05:27:ee:b3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=a134b093-473f-4ceb-87e7-49107ebf73ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:46:83:fb:b3:a5:9d:b2:c1:38:2a:ee:ba: b3:a0:6f:1f:32:22:c1:ab:3e:cf:c0:70:11:3b:4a: bc:12:53:f2:32:6c:5b:e0:74:0e:e7:ae:f3:b3:d5: 1f:15:7d:ea:77:c4:1b:ed:71:cc:35:97:79:09:2e: 3c:f3:1a:e1:62:37:62:49:87:95:ca:94:81:77:e6: 9b:4b:b6:fc:58:67:42:d9:83:f3:53:17:ff:8c:2a: 94:45:fb:13:db:3a:5c:a1:72:ec:43:4b:a8:f1:c3: 74:8c:b3:d8:93:ac:7e:18:b0:c8:65:6e:3c:c4:f5: ce:f7:c2:a0:d8:12:5f:1a:b7:75:64:6c:0c:62:be: 84:c6:f1:d1:db:9a:4b:8d:db:97:2e:cd:a2:d6:c6: b8:5d:af:2b:d9:83:38:0a:7a:aa:a9:4e:59:89:9b: a3:77:ad:12:7c:c1:87:a1:23:52:04:dd:15:0a:08: 06:3b:88:16:8a:7c:1b:09:77:db:2b:9c:6c:4d:0c: 3a:d3:86:29:9a:56:04:73:0f:75:a8:82:f9:26:34: 9a:3d:b8:dd:0b:f7:a2:31:24:0b:bf:11:68:88:d1: 7b:06:72:25:eb:35:50:bb:2d:43:fb:ac:9d:1a:3e: 52:28:53:86:ed:85:41:bc:da:59:90:93:86:0d:ed: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2B:CA:DA:49:BE:1B:F6:C3:4F:32:6B:69:65:C3:A6:DA:E1:72:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl X509v3 Authority Key Identifier: keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer sbgp-ipAddrBlock: critical IPv4: 45.45.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:52:55:8b:d2:fe:59:d9:4f:79:f4:68:00:fa:14:3b:bd:ee: d5:45:9a:00:2d:0e:71:26:b7:24:2a:6c:56:a9:76:e4:2a:ef: e1:dd:02:67:30:25:50:7e:37:71:ce:96:e9:8c:8a:9e:1c:98: e2:df:0f:72:75:e9:66:b1:33:41:95:c2:fd:48:29:d5:23:e5: 60:8e:74:f8:79:62:8d:65:48:b3:e8:6c:46:e9:17:ae:50:c8: f9:ac:9f:7a:5b:2c:d3:4b:67:5a:92:c4:16:40:fc:88:c1:9e: 07:78:73:e0:94:7e:ee:d6:9c:4b:55:56:8b:1b:38:88:87:f0: cc:1a:d3:cc:83:83:08:2c:a9:ee:de:d8:4c:ba:31:60:58:8a: dc:0c:1b:b2:13:62:e5:02:11:13:d9:28:7f:78:3c:a8:66:81: 21:f8:29:5d:5a:a6:4a:51:e3:77:8c:71:fb:4b:19:17:b6:ac: 7b:9d:78:1e:ec:22:7e:5e:77:b3:32:bf:f0:cd:ff:2c:99:a7: 7c:66:37:fe:c7:70:fa:ed:d3:81:be:1f:65:f0:81:2a:cf:b5: 53:c5:a8:00:24:5d:62:e6:a2:f5:26:55:b0:2a:71:2d:9e:f6: 26:bf:39:aa:4c:5c:cf:34:b2:9d:69:9a:0d:ba:8e:9e:34:fe: 84:5e:30:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1TfUStnBSfus1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTky OTMwMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk YTEzNGIwOTMtNDczZi00Y2ViLTg3ZTctNDkxMDdlYmY3M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiVGg/uzpZ2ywTgq7rqzoG8fMiLBqz7PwHAR O0q8ElPyMmxb4HQO567zs9UfFX3qd8Qb7XHMNZd5CS488xrhYjdiSYeVypSBd+ab S7b8WGdC2YPzUxf/jCqURfsT2zpcoXLsQ0uo8cN0jLPYk6x+GLDIZW48xPXO98Kg 2BJfGrd1ZGwMYr6ExvHR25pLjduXLs2i1sa4Xa8r2YM4CnqqqU5ZiZujd60SfMGH oSNSBN0VCggGO4gWinwbCXfbK5xsTQw604YpmlYEcw91qIL5JjSaPbjdC/eiMSQL vxFoiNF7BnIl6zVQuy1D+6ydGj5SKFOG7YVBvNpZkJOGDe1zxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMErytpJvhv2w08ya2llw6ba4XL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZi ZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvY2ViMDZiZTgtNjAyYy0z YjM3LThlZTUtZWNjMjk5OTkwODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTJmYmRhYzgtMjBjMC00ZGE0LTg2 NTQtMjdiNGJmNTkyOTMwLzUyZmJkYWM4LTIwYzAtNGRhNC04NjU0LTI3YjRiZjU5 MjkzMC5jcmwwHwYDVR0jBBgwFoAUg/WmWf8elpbI5bS53/Y9NykwpHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0 YmY1OTI5MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBSVYvS/lnZT3n0aAD6FDu97tVFmgAtDnEmtyQqbFapduQq7+HdAmcw JVB+N3HOlumMip4cmOLfD3J16WaxM0GVwv1IKdUj5WCOdPh5Yo1lSLPobEbpF65Q yPmsn3pbLNNLZ1qSxBZA/IjBngd4c+CUfu7WnEtVVosbOIiH8Mwa08yDgwgsqe7e 2Ey6MWBYitwMG7ITYuUCERPZKH94PKhmgSH4KV1apkpR43eMcftLGRe2rHudeB7s In5ed7Myv/DN/yyZp3xmN/7HcPrt04G+H2XwgSrPtVPFqAAkXWLmovUmVbAqcS2e 9ia/OapMXM80sp1pmg26jp40/oReMOI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org