$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d537670c-8888-3bb1-8d7f-a375077afc86.roa File: d537670c-8888-3bb1-8d7f-a375077afc86.roa (raw, json) Hash identifier: KhTHnj2a+VAM1ELzKzV9W75ZwPgPzCZrDzSGOnM+oTI= Subject key identifier: 0A:D3:56:9C:8E:43:E8:F4:9F:89:B2:A2:09:01:12:B9:19:BD:83:A6 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584722A1093D47830120F4A42E80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d537670c-8888-3bb1-8d7f-a375077afc86.roa Signing time: Sat 07 Sep 2024 13:00:41 +0000 ROA not before: Sat 07 Sep 2024 13:00:41 +0000 ROA not after: Fri 06 Dec 2024 14:00:41 +0000 asID: 20115 IP address blocks: 47.2.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:22:a1:09:3d:47:83:01:20:f4:a4:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 7 13:00:41 2024 GMT Not After : Dec 6 14:00:41 2024 GMT Subject: CN=c818bc62-48e7-4976-a153-15a7a7e4d748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:17:ef:1d:50:3e:0c:77:e3:3a:29:08:c8: 10:21:12:18:9d:99:94:37:49:46:d9:a7:bb:e3:0e: e6:05:cf:c8:83:f5:ab:f1:f7:5b:27:79:e7:ef:52: 7a:64:6a:f8:09:4e:3c:aa:1a:78:9f:ef:cb:de:a0: 00:d4:62:f7:a7:e1:e0:3a:f0:36:40:7f:53:e8:e0: 09:77:dd:65:20:06:9e:74:f8:11:eb:81:91:e3:db: fc:9d:4c:54:f6:3a:b7:81:f2:3d:de:97:a9:50:a3: 09:18:14:23:58:f6:70:10:c9:b0:20:58:2a:98:ef: a1:3e:e4:b0:0b:de:8b:9a:c6:fe:84:54:de:93:f9: c1:d1:23:92:28:7c:26:54:07:11:bb:f3:58:c8:21: 90:0f:59:61:55:9a:1e:30:dc:30:bd:c4:89:41:e9: ea:d0:16:1f:a8:85:da:81:ea:89:51:70:50:fa:59: 0e:9b:a2:3a:33:4b:c5:99:b4:fb:4b:ba:2d:52:55: 26:69:27:91:10:9f:e6:5c:7f:75:4b:e2:a7:bf:5a: 61:2e:b2:30:ef:51:81:db:3e:77:54:3e:0e:06:ed: 62:c3:df:63:a1:ae:1d:2d:92:40:54:b5:4e:78:9a: 1f:fc:39:14:27:33:01:26:b6:13:fa:34:e8:08:a1: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:56:9C:8E:43:E8:F4:9F:89:B2:A2:09:01:12:B9:19:BD:83:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d537670c-8888-3bb1-8d7f-a375077afc86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.2.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3f:51:77:c9:15:af:f3:cb:4d:09:a0:1a:63:e4:53:9d:72: f6:8b:0e:bb:51:56:96:71:e6:5f:3e:4f:c6:83:07:90:50:b8: 76:b9:ca:e2:c7:9c:37:b1:a1:9e:e4:4a:bd:74:85:63:5b:76: 04:a0:30:a0:0b:73:24:b6:b1:0c:9c:09:22:c4:9c:f0:41:42: 41:b6:36:1f:18:de:78:3a:da:7b:5c:f5:f3:bc:79:9e:25:30: 86:6f:45:89:c4:3f:2a:d6:51:db:65:71:d7:63:7d:5a:26:c2: 37:0f:82:d0:91:bf:5b:dd:fc:6e:f7:64:d6:06:0a:a6:68:df: 29:de:a6:8f:37:f1:63:02:17:e5:ee:00:03:b4:09:fb:1f:e9: 4e:f2:c4:5c:c0:bb:fc:9d:89:c5:98:45:04:32:5e:92:15:11: 24:c9:41:68:29:ee:77:9a:81:55:c8:0c:ad:93:20:6a:55:73: 08:b3:ac:93:b8:89:8f:4b:03:f4:89:a7:66:8e:44:cc:e8:7e: e7:5e:dc:61:d7:0a:0d:80:16:fb:84:5e:2b:33:c5:85:9c:4a: 66:ae:84:f6:a6:90:d0:1c:9c:17:9c:1a:a7:39:93:32:b9:bf: fe:95:d5:10:8c:ec:5d:de:32:22:ae:23:63:b0:48:6f:5a:4c: b4:f4:0b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioQk9R4MBIPSkLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YzgxOGJjNjItNDhlNy00OTc2LWExNTMtMTVhN2E3ZTRkNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X8X7x1QPgx34zopCMgQIRIYnZmUN0lG2ae7 4w7mBc/Ig/Wr8fdbJ3nn71J6ZGr4CU48qhp4n+/L3qAA1GL3p+HgOvA2QH9T6OAJ d91lIAaedPgR64GR49v8nUxU9jq3gfI93pepUKMJGBQjWPZwEMmwIFgqmO+hPuSw C96Lmsb+hFTek/nB0SOSKHwmVAcRu/NYyCGQD1lhVZoeMNwwvcSJQenq0BYfqIXa geqJUXBQ+lkOm6I6M0vFmbT7S7otUlUmaSeREJ/mXH91S+Knv1phLrIw71GB2z53 VD4OBu1iw99joa4dLZJAVLVOeJof/DkUJzMBJrYT+jToCKERgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArTVpyOQ+j0n4myogkBErkZvYOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDUzNzY3MGMtODg4OC0z YmIxLThkN2YtYTM3NTA3N2FmYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELwIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs/UXfJFa/zy00JoBpj5FOdcvaLDrtRVpZx5l8+T8aDB5BQuHa5yuLH nDexoZ7kSr10hWNbdgSgMKALcyS2sQycCSLEnPBBQkG2Nh8Y3ng62ntc9fO8eZ4l MIZvRYnEPyrWUdtlcddjfVomwjcPgtCRv1vd/G73ZNYGCqZo3ynepo838WMCF+Xu AAO0Cfsf6U7yxFzAu/ydicWYRQQyXpIVESTJQWgp7neagVXIDK2TIGpVcwizrJO4 iY9LA/SJp2aORMzofude3GHXCg2AFvuEXiszxYWcSmauhPamkNAcnBecGqc5kzK5 v/6V1RCM7F3eMiKuI2OwSG9aTLT0C9I= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:02 2024 by rpki-client on console-ams.rpki-client.org