$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa File: 26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa (raw, json) Hash identifier: 1Dx/OoiWDsYMwlxt+Ry6rpVanzPw/bkUvLoKp13sWVA= Subject key identifier: AF:F2:D4:98:2B:CC:BB:47:D5:E7:6F:F1:A8:1B:19:BE:45:35:57:93 Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F43285847299B24846E5E27C77BE69600 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 40027 IP address blocks: 45.57.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:24:84:6e:5e:27:c7:7b:e6:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=dea09cee-d1e0-46c6-a6bd-3eaa50d22a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e1:8f:46:15:bb:0c:0a:e6:0d:e0:8f:e4:07: e4:2d:a5:7e:aa:8a:e2:1b:35:d5:b8:60:62:cf:7b: 97:b0:3d:5a:34:12:d3:c7:2c:eb:86:3a:bb:6d:0a: a0:29:32:90:9a:56:12:ab:1a:39:2e:fb:5c:ff:d5: db:f6:16:14:6b:85:b0:1e:34:92:fe:f7:97:41:e4: 17:9d:df:0b:ae:95:27:2a:8c:44:ca:a9:4a:98:fb: 61:48:c0:96:1c:2f:14:3e:d8:05:a4:07:e0:17:24: c3:51:b8:46:09:b2:55:4d:fa:aa:c7:cb:ea:f2:04: 1f:10:68:a5:3a:e1:c0:77:56:4e:40:28:82:66:6c: c8:bd:cb:72:63:f2:cf:8c:45:61:3e:90:dd:83:26: ca:0d:ff:8d:47:9f:f9:dc:ca:19:4c:3e:47:a7:b5: b3:7f:4f:f6:29:0a:dc:75:c5:2e:b5:61:72:8b:c5: a9:39:a3:cd:e3:61:7b:95:6f:6b:7c:11:82:96:38: 6c:4a:f5:0d:31:a0:f1:a5:0a:d1:ac:bb:a5:df:7b: 85:81:cc:95:f4:49:a4:76:b0:fb:b5:ce:fa:41:43: 68:19:ac:64:d1:9e:b2:93:83:d9:dd:98:6f:d5:9d: b4:71:47:c0:3b:f5:e5:9a:d4:34:23:32:66:24:bb: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F2:D4:98:2B:CC:BB:47:D5:E7:6F:F1:A8:1B:19:BE:45:35:57:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 45.57.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6e:5d:e5:6e:84:08:36:2a:24:3c:12:73:c0:0d:e7:f5:14: ed:6c:3c:43:53:9b:59:0a:db:9e:49:08:44:6d:83:2b:55:b0: b1:c4:51:a2:be:63:f1:17:1d:f9:56:fe:46:3a:e5:09:90:b9: 0f:13:89:90:bb:52:51:f0:e7:8d:12:db:f3:8d:ae:91:74:ce: be:1b:a1:3d:ba:5d:b6:33:c4:45:8f:f3:0d:a2:cf:6f:53:f3: 8b:79:d4:85:08:a5:2f:6c:da:1d:b9:75:84:ea:22:31:75:f0: 56:cc:28:da:c7:98:3a:d6:c8:5b:f2:21:b4:e7:6e:98:73:b7: 6d:28:70:0a:40:95:4d:52:90:58:a8:2f:f3:d7:4b:94:e9:e7: ee:71:a5:32:56:f9:01:c2:70:c1:32:5b:81:1a:a9:77:55:62: 68:03:92:e0:e6:7b:3d:21:eb:3f:aa:77:9e:77:78:64:a0:09: fb:64:c4:fb:3d:8f:e4:78:7e:98:5a:d9:54:54:07:2d:40:3d: 3e:74:69:69:97:91:ca:75:4f:fa:0d:a2:1b:a2:ed:8c:cf:05: b7:a0:9b:c6:0d:3f:1c:47:04:36:5d:6d:9a:50:30:bb:5f:ff: 97:4e:27:34:56:22:8b:1a:d2:e6:81:cc:6e:3b:0c:ad:22:af: fa:de:6f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmySEbl4nx3vmlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGVhMDljZWUtZDFlMC00NmM2LWE2YmQtM2VhYTUwZDIyYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+GPRhW7DArmDeCP5AfkLaV+qoriGzXVuGBi z3uXsD1aNBLTxyzrhjq7bQqgKTKQmlYSqxo5Lvtc/9Xb9hYUa4WwHjSS/veXQeQX nd8LrpUnKoxEyqlKmPthSMCWHC8UPtgFpAfgFyTDUbhGCbJVTfqqx8vq8gQfEGil OuHAd1ZOQCiCZmzIvctyY/LPjEVhPpDdgybKDf+NR5/53MoZTD5Hp7Wzf0/2KQrc dcUutWFyi8WpOaPN42F7lW9rfBGCljhsSvUNMaDxpQrRrLul33uFgcyV9EmkdrD7 tc76QUNoGaxk0Z6yk4PZ3Zhv1Z20cUfAO/XlmtQ0IzJmJLsijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/y1JgrzLtH1edv8agbGb5FNVeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMjZhODljMmItMjBiZC0z YmQwLTlkZWQtNGE5M2Q5YmI4ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLTkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACduXeVuhAg2KiQ8EnPADef1FO1sPENTm1kK255JCERtgytVsLHEUaK+ Y/EXHflW/kY65QmQuQ8TiZC7UlHw540S2/ONrpF0zr4boT26XbYzxEWP8w2iz29T 84t51IUIpS9s2h25dYTqIjF18FbMKNrHmDrWyFvyIbTnbphzt20ocApAlU1SkFio L/PXS5Tp5+5xpTJW+QHCcMEyW4EaqXdVYmgDkuDmez0h6z+qd553eGSgCftkxPs9 j+R4fpha2VRUBy1APT50aWmXkcp1T/oNohui7YzPBbegm8YNPxxHBDZdbZpQMLtf /5dOJzRWIosa0uaBzG47DK0ir/rebxg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:07 2024 by rpki-client on console-ams.rpki-client.org