$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa File: 0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa (raw, json) Hash identifier: dHfH/w1u6lVf+lljy6MKwbW/iavUmdw4SJbYsn4wFWw= Subject key identifier: C5:51:53:55:86:F0:69:1F:77:FA:F9:01:F6:10:8D:CB:B2:E5:0B:E8 Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F43285847DF2F533764B463D5D8D36880 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 33189 IP address blocks: 151.159.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:53:37:64:b4:63:d5:d8:d3:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=e66b842c-126b-417f-86e8-3adec32e48a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:e0:d7:c8:07:0f:79:c8:e2:07:b0:e1:9c: f6:ae:cf:23:2a:45:cf:40:20:39:0d:a8:40:df:4b: 14:8c:4d:3e:66:a2:42:4e:ef:b9:9c:cd:18:6f:e2: d2:1a:04:e3:ab:b5:cd:23:26:5d:5f:f4:cc:8d:f4: 19:a6:92:2c:95:a5:30:2a:c5:80:7b:b7:3d:9a:48: f3:fd:25:05:2b:5d:05:43:93:30:92:0a:88:ba:75: 4a:08:d2:52:9d:1a:f1:e3:0b:f5:51:ec:7b:0d:4c: 99:a5:c7:2e:5f:89:35:f7:71:ba:96:30:cb:be:2b: 97:c6:95:ed:81:06:4f:7d:b8:97:ea:95:70:34:f9: 5b:39:c8:4c:e1:09:e1:d2:f5:5f:8a:a6:91:97:71: 25:37:c0:bb:7e:e6:89:f0:05:d7:a5:24:70:d8:b3: d5:97:ce:b6:57:af:3b:91:1b:dd:0e:40:8b:9e:e1: 55:78:1c:b3:b7:8f:fb:ad:98:cd:ce:aa:a4:57:95: 62:9a:93:40:6c:7d:bc:16:af:ea:62:cd:21:8f:61: f5:fa:5b:b1:16:8d:66:33:b2:8b:de:63:a6:0f:c7: 1a:71:8d:78:20:26:86:ca:f0:d7:3f:10:b0:a1:33: e0:6b:c7:bd:67:25:a4:d8:32:ab:54:b2:8f:2e:6f: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:51:53:55:86:F0:69:1F:77:FA:F9:01:F6:10:8D:CB:B2:E5:0B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: 151.159.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:99:6b:c5:cf:ce:50:95:e4:df:c6:c7:15:40:ba:44:14:8d: c8:6b:7f:9b:dc:46:36:ee:0f:f4:e5:64:31:c4:fb:26:16:b3: 14:a4:4e:9e:0f:66:56:fe:71:2c:5f:fd:32:c6:0b:e7:27:e4: 0e:f2:74:07:4a:db:a8:04:fa:cd:50:0b:c4:e9:e1:c8:9f:ba: 76:15:ca:c6:1c:47:bb:fc:aa:a4:91:67:b1:66:2c:bb:ca:ad: 4c:3b:d0:6c:89:77:3b:8c:e9:ff:91:cf:44:a7:d3:3a:f4:d9: 4f:37:cf:ac:13:87:5a:f7:4c:6f:30:f9:44:e7:b8:02:17:a7: 8b:56:fe:33:88:fc:0b:63:3f:45:6e:1e:fa:8a:55:24:de:a7: 1e:2d:0c:70:6b:49:95:96:27:8a:c5:e3:03:6d:66:80:e9:02: f6:38:c7:39:52:09:b1:36:17:0d:e6:93:6f:aa:3e:73:56:ab: c5:fb:b9:4a:cb:43:de:8f:5d:90:dc:b2:0d:f5:4c:5a:b5:1a: 07:75:6e:80:4d:32:f3:95:c7:4b:ca:2a:3c:d9:19:c6:bd:32: 8b:f6:c5:f6:f0:46:de:c8:59:b3:16:bb:e5:18:4a:18:23:d8: 40:80:74:91:ea:ba:59:b7:3f:66:34:76:7f:67:17:d9:0e:94: 36:87:2e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1M3ZLRj1djTaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk ZTY2Yjg0MmMtMTI2Yi00MTdmLTg2ZTgtM2FkZWMzMmU0OGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXrg18gHD3nI4gew4Zz2rs8jKkXPQCA5DahA 30sUjE0+ZqJCTu+5nM0Yb+LSGgTjq7XNIyZdX/TMjfQZppIslaUwKsWAe7c9mkjz /SUFK10FQ5MwkgqIunVKCNJSnRrx4wv1Uex7DUyZpccuX4k193G6ljDLviuXxpXt gQZPfbiX6pVwNPlbOchM4Qnh0vVfiqaRl3ElN8C7fuaJ8AXXpSRw2LPVl862V687 kRvdDkCLnuFVeByzt4/7rZjNzqqkV5VimpNAbH28Fq/qYs0hj2H1+luxFo1mM7KL 3mOmD8cacY14ICaGyvDXPxCwoTPga8e9ZyWk2DKrVLKPLm+6lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVRU1WG8Gkfd/r5AfYQjcuy5QvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvMGNiMzRmZTktMWNjZS0z Y2NhLWJjNDktZjU4ZjFiMmYzZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl5/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWZa8XPzlCV5N/GxxVAukQUjchrf5vcRjbuD/TlZDHE+yYWsxSkTp4P Zlb+cSxf/TLGC+cn5A7ydAdK26gE+s1QC8Tp4cifunYVysYcR7v8qqSRZ7FmLLvK rUw70GyJdzuM6f+Rz0Sn0zr02U83z6wTh1r3TG8w+UTnuAIXp4tW/jOI/AtjP0Vu HvqKVSTepx4tDHBrSZWWJ4rF4wNtZoDpAvY4xzlSCbE2Fw3mk2+qPnNWq8X7uUrL Q96PXZDcsg31TFq1Ggd1boBNMvOVx0vKKjzZGca9Mov2xfbwRt7IWbMWu+UYShgj 2ECAdJHqulm3P2Y0dn9nF9kOlDaHLjQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:22:14 2024 by rpki-client on console-ams.rpki-client.org