$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/c04b3594-f188-3088-973e-91056a692a17.roa File: c04b3594-f188-3088-973e-91056a692a17.roa (raw, json) Hash identifier: 5SnC0ZXaMJJO2fPMFSsI3H56sZMj7UmTIA53ZL41fWY= Subject key identifier: 88:D0:32:DF:57:F3:AB:1B:60:F1:2B:FB:ED:28:22:54:12:4F:4C:11 Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F43285847B531531804E31FF3A72B71C0 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/c04b3594-f188-3088-973e-91056a692a17.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 54613 IP address blocks: 45.41.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:53:18:04:e3:1f:f3:a7:2b:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=b48dfc08-cd19-4fbd-a440-17f43bedf8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:92:4d:a8:a0:7b:aa:d8:6e:84:1b:e3:74: 1f:75:9e:94:1e:0b:60:2b:41:29:2f:15:ac:58:f2: ef:01:9d:19:18:3d:af:d4:1f:b7:7e:e0:1c:e8:bd: 26:4a:2e:52:cc:ce:a2:a5:da:16:1b:a9:65:81:8e: 17:1c:92:6b:6e:9e:27:8f:18:b3:a3:c9:47:c9:a5: 11:87:a5:29:b1:e5:7e:b8:d5:b4:39:9c:4c:39:f0: 9c:4a:63:7c:64:3d:38:da:93:41:61:c5:c3:ca:c6: 71:58:ba:29:cb:0d:42:94:8d:20:d0:84:6f:92:48: b0:3c:3e:96:9c:8e:19:9c:32:98:b2:fb:f7:90:2a: e4:2e:58:d8:0a:1c:27:c9:ed:8f:2a:c4:c3:39:11: ce:d6:51:04:bb:72:2f:c6:b5:f2:ba:60:e7:31:22: d9:f2:47:be:1b:26:7b:9b:92:dc:f0:1b:45:d0:0d: fc:aa:bd:61:0a:6d:19:07:59:f4:57:dd:c8:99:84: 29:70:01:93:f4:fd:0e:5d:73:e3:70:d1:b7:0e:5f: f3:32:77:41:99:b8:4c:d7:81:a1:a4:e2:11:5f:6c: 40:c0:aa:06:b3:66:40:cd:84:15:86:e7:18:e4:df: 8a:ec:4a:c3:62:4f:44:98:b4:66:42:b1:7e:ad:e4: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:32:DF:57:F3:AB:1B:60:F1:2B:FB:ED:28:22:54:12:4F:4C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/c04b3594-f188-3088-973e-91056a692a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 45.41.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4d:17:99:9e:4d:4d:67:5e:d1:a2:f2:86:ae:74:57:2a:04: 23:29:1e:a5:12:2a:81:d4:a8:6c:2b:4b:a5:be:4a:e5:ef:11: 84:d7:75:cd:99:5b:47:e8:b1:07:58:2a:13:17:59:21:c5:ee: 4a:02:28:ec:51:95:d0:0f:fb:38:c1:37:96:ae:42:ff:71:b9: 13:17:ea:de:88:1a:7c:38:2c:47:ff:69:f2:11:da:c1:7a:c4: 1e:e3:d4:e4:b4:e8:40:d2:79:b7:48:89:ba:9b:c8:ac:d2:ee: 0e:e2:23:8f:a5:91:10:40:f2:f9:f8:0a:8f:0a:64:89:d7:92: 8a:39:22:5a:24:2f:6b:25:9f:06:a8:da:a0:d2:25:17:b5:0c: d6:54:24:9e:23:4b:17:95:f4:39:5c:ee:98:a5:6e:cd:4b:8f: bf:e7:05:59:35:18:1f:2b:83:2e:4a:c9:85:2e:04:21:97:f1: 54:4e:b4:4e:9a:86:20:db:d2:03:b4:ea:4b:08:aa:b5:f0:ee: 78:17:74:5a:5f:47:ff:ee:66:25:d7:e8:f4:86:3b:f3:1e:23: 6b:78:8a:ac:44:de:2b:9c:82:91:87:5b:ef:fa:4e:90:c0:8b: b9:54:ca:2b:70:94:68:bd:b3:ce:0f:72:59:05:c8:fe:5c:0c: 6a:ee:b8:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MVMYBOMf86crccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk YjQ4ZGZjMDgtY2QxOS00ZmJkLWE0NDAtMTdmNDNiZWRmOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KSSTaige6rYboQb43QfdZ6UHgtgK0EpLxWs WPLvAZ0ZGD2v1B+3fuAc6L0mSi5SzM6ipdoWG6llgY4XHJJrbp4njxizo8lHyaUR h6UpseV+uNW0OZxMOfCcSmN8ZD042pNBYcXDysZxWLopyw1ClI0g0IRvkkiwPD6W nI4ZnDKYsvv3kCrkLljYChwnye2PKsTDORHO1lEEu3IvxrXyumDnMSLZ8ke+GyZ7 m5Lc8BtF0A38qr1hCm0ZB1n0V93ImYQpcAGT9P0OXXPjcNG3Dl/zMndBmbhM14Gh pOIRX2xAwKoGs2ZAzYQVhucY5N+K7ErDYk9EmLRmQrF+reSBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjQMt9X86sbYPEr++0oIlQST0wRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvYzA0YjM1OTQtZjE4OC0z MDg4LTk3M2UtOTEwNTZhNjkyYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApNF5meTU1nXtGi8oaudFcqBCMpHqUSKoHUqGwrS6W+SuXvEYTXdc2Z W0fosQdYKhMXWSHF7koCKOxRldAP+zjBN5auQv9xuRMX6t6IGnw4LEf/afIR2sF6 xB7j1OS06EDSebdIibqbyKzS7g7iI4+lkRBA8vn4Co8KZInXkoo5IlokL2slnwao 2qDSJRe1DNZUJJ4jSxeV9Dlc7pilbs1Lj7/nBVk1GB8rgy5KyYUuBCGX8VROtE6a hiDb0gO06ksIqrXw7ngXdFpfR//uZiXX6PSGO/MeI2t4iqxE3iucgpGHW+/6TpDA i7lUyitwlGi9s84PclkFyP5cDGruuEM= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:49 2024 by rpki-client on console-fra.rpki-client.org