$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa File: 9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa (raw, json) Hash identifier: ULP4tHCNDEFLjaVSoK+6KymBbpM7SLeEx/b1oFnOROk= Subject key identifier: 85:53:E7:A3:C5:EB:9F:10:0E:DA:F0:7B:A6:A8:95:05:19:C2:1D:0A Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F43285847600B8876F117F35BAC36CE00 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 397423 IP address blocks: 45.59.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:88:76:f1:17:f3:5b:ac:36:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=9958efb3-0020-4d38-81b6-7a5372a29378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:48:21:3c:2c:78:cf:d2:5d:84:7d:cc:a3: fc:4b:c7:d1:69:fc:e1:5c:a3:58:e0:03:71:19:45: d1:09:b4:21:65:06:7e:ac:a1:c4:ae:c9:42:3d:ee: ee:92:60:ba:3a:ad:3a:3c:d1:ef:21:d7:65:36:48: 54:79:00:04:77:23:f1:a2:a0:d0:87:01:85:35:0e: 83:d2:7a:bd:de:4f:e8:fd:a3:59:ed:50:9e:6b:a3: ed:31:a1:d6:7c:55:98:b4:04:a7:9f:25:d9:07:a1: a7:8e:3a:20:76:4b:3c:d0:00:18:1c:ea:b6:c6:d7: 06:d2:88:b5:ca:ae:f1:65:ff:53:90:66:0e:a7:bb: c9:65:26:0f:f2:bc:37:91:76:d5:42:8c:30:7e:6e: fe:f9:57:28:6f:28:b1:f0:58:22:cb:34:88:3e:79: 59:6f:0c:5f:57:22:4a:84:80:1f:1f:2a:eb:ed:01: 85:7a:e4:ae:68:04:c5:c4:9b:cc:40:de:fe:74:a1: 66:f5:20:30:d3:03:e5:f3:4f:70:d9:5e:25:41:6d: 0a:70:4e:9b:23:a0:b0:2b:3f:3d:de:4c:22:9e:e2: 04:ca:cb:7d:45:ce:83:39:73:85:eb:6f:54:f7:16: cc:26:7a:40:29:65:22:c9:95:4b:99:ba:6b:02:92: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:53:E7:A3:C5:EB:9F:10:0E:DA:F0:7B:A6:A8:95:05:19:C2:1D:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 45.59.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:38:c8:43:6a:02:a4:eb:24:e3:75:3a:01:05:63:f1:5b:38: 8b:2f:01:41:75:5c:cc:30:47:3d:9b:cf:78:1d:dc:92:66:d0: cd:9f:b0:bb:df:a7:ad:f4:5e:39:a5:5f:48:0d:cf:ae:b5:04: 3c:98:db:01:e0:7d:2d:86:b8:43:f5:87:99:2f:9a:81:61:fa: 6e:9b:27:87:7c:02:ca:33:72:94:c6:0b:c1:1b:5e:d9:fc:22: 5b:53:aa:99:07:87:57:84:30:4f:68:e1:41:9e:59:70:5b:2d: d9:a2:bd:37:b2:42:fe:67:b1:da:01:f7:7d:4f:1a:d4:ef:23: b3:85:d3:08:ed:22:1e:c7:da:f2:13:de:c0:d6:e3:99:99:f9: 33:03:e8:5e:a7:50:01:4c:97:7c:c6:0f:c4:1d:37:7d:e9:f0: 7c:62:c5:b1:3f:50:3b:14:f4:6c:03:f5:26:e9:3d:03:ee:f8: 9d:9e:e1:7a:f6:b0:9d:f5:32:3b:eb:d0:f9:96:16:06:61:c7: 54:26:18:fa:f0:ff:b0:77:5b:be:30:d4:3e:5a:a7:58:9d:98: c6:6d:d4:18:18:07:66:c6:e0:6b:9f:2d:39:d7:cf:0d:37:dd: b2:24:5d:7e:08:8e:bc:d0:6a:b0:8c:e2:23:df:a3:26:78:7e: dc:5c:3a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC4h28RfzW6w2zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OTk1OGVmYjMtMDAyMC00ZDM4LTgxYjYtN2E1MzcyYTI5Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJhIITwseM/SXYR9zKP8S8fRafzhXKNY4ANx GUXRCbQhZQZ+rKHErslCPe7ukmC6Oq06PNHvIddlNkhUeQAEdyPxoqDQhwGFNQ6D 0nq93k/o/aNZ7VCea6PtMaHWfFWYtASnnyXZB6Gnjjogdks80AAYHOq2xtcG0oi1 yq7xZf9TkGYOp7vJZSYP8rw3kXbVQowwfm7++Vcobyix8FgiyzSIPnlZbwxfVyJK hIAfHyrr7QGFeuSuaATFxJvMQN7+dKFm9SAw0wPl809w2V4lQW0KcE6bI6CwKz89 3kwinuIEyst9Rc6DOXOF629U9xbMJnpAKWUiyZVLmbprApIOqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVT56PF658QDtrwe6aolQUZwh0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvOTAwM2I4MWQtZDZkYy0z YTMzLWE2YTItOTlhZGUzYTEzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM84yENqAqTrJON1OgEFY/FbOIsvAUF1XMwwRz2bz3gd3JJm0M2fsLvf p630XjmlX0gNz661BDyY2wHgfS2GuEP1h5kvmoFh+m6bJ4d8AsozcpTGC8EbXtn8 IltTqpkHh1eEME9o4UGeWXBbLdmivTeyQv5nsdoB931PGtTvI7OF0wjtIh7H2vIT 3sDW45mZ+TMD6F6nUAFMl3zGD8QdN33p8HxixbE/UDsU9GwD9SbpPQPu+J2e4Xr2 sJ31Mjvr0PmWFgZhx1QmGPrw/7B3W74w1D5ap1idmMZt1BgYB2bG4GufLTnXzw03 3bIkXX4IjrzQarCM4iPfoyZ4ftxcOlA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:52 2024 by rpki-client on console-ams.rpki-client.org