$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa File: 5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa (raw, json) Hash identifier: q7gOsspDjxcxLnxz8fyw1Q3JDarVCsp/gtFI02goP98= Subject key identifier: 6D:92:E7:76:B0:D4:3E:B3:F6:D3:E0:79:36:6F:25:86:93:44:6B:92 Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F43285847107AF7D2599E8B72CEEF4CB0 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa Signing time: Sun 01 Sep 2024 01:00:31 +0000 ROA not before: Sun 01 Sep 2024 01:00:31 +0000 ROA not after: Sat 30 Nov 2024 02:00:31 +0000 asID: 27370 IP address blocks: 140.241.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:10:7a:f7:d2:59:9e:8b:72:ce:ef:4c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Sep 1 01:00:31 2024 GMT Not After : Nov 30 02:00:31 2024 GMT Subject: CN=02a537d5-06ca-40a8-8e3d-1226823ce20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:47:0b:d7:ca:c8:52:cc:ef:47:f1:f7:8b: 43:46:73:98:f0:35:c2:78:8f:fd:7e:5e:81:22:72: 7b:fe:4f:d3:0d:0f:c0:92:d1:b2:49:a8:a7:40:21: da:3f:68:41:e4:de:34:6b:23:d1:b6:77:73:66:55: c0:a0:ca:1d:be:0f:69:f0:9c:dc:b7:7c:99:bc:ec: 54:d8:5c:08:66:6b:78:d1:a8:7c:df:48:92:2e:fe: b4:28:4f:49:65:13:15:66:95:ac:f9:f9:4e:3d:96: c1:3c:5d:45:35:24:ef:e4:7e:9f:95:86:46:72:5c: d3:45:96:ae:8e:e1:94:f8:a4:53:8e:6e:d2:56:68: 60:b3:9c:69:c0:fc:08:23:37:5d:61:f6:01:2d:47: 6c:d9:8d:44:65:56:7e:7c:88:44:a5:a1:17:e8:05: 96:e9:7e:ab:f0:25:2c:54:e2:79:0e:95:ea:02:57: 1c:23:41:7d:dd:57:bf:cf:e7:ff:31:2e:ab:4a:ed: d7:18:63:c7:70:19:87:5f:e4:45:c0:a1:a1:1f:cb: 62:30:d1:42:fa:83:98:6e:32:a9:a6:05:c7:c3:25: c9:8f:89:10:7f:f3:00:5e:b2:18:41:14:6b:e3:76: e9:fc:2c:9c:d7:ce:00:20:69:e6:48:8e:e8:12:6c: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:92:E7:76:B0:D4:3E:B3:F6:D3:E0:79:36:6F:25:86:93:44:6B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:96:54:b1:9a:b8:15:3f:13:85:28:5e:b5:13:a9:39:8f:5d: 77:4e:f1:4e:a1:47:16:2c:c7:cc:8d:a5:13:b9:8c:cd:b6:36: 63:4e:47:dd:75:a0:67:6f:1a:3f:fd:26:4e:5e:51:80:5c:39: 3f:fa:e6:31:cf:00:c6:4e:18:04:93:98:e2:62:fa:bf:e7:2a: 59:fb:8e:6d:b3:f8:8b:b5:cb:0b:09:31:c7:5c:58:d7:46:ba: 21:f7:ff:59:80:8c:ac:d8:c1:49:a2:1a:5f:b0:23:9f:67:9e: 15:f2:db:15:53:c6:35:1d:f0:28:a1:70:a6:8a:c6:f0:d1:1e: 39:82:4e:74:33:41:99:e2:eb:16:0d:98:9a:2e:78:79:06:17: 85:61:90:f6:4b:82:09:cc:0d:3a:63:a6:6c:0f:46:f5:93:fc: 7b:06:d7:b9:b8:2b:3d:ae:20:b8:70:f6:75:66:85:4e:ea:91: 26:03:ed:8d:73:62:f8:cb:b0:bc:f3:83:23:0d:c4:25:34:81: e1:31:b1:19:26:90:73:bd:84:1f:59:93:bd:b9:84:ad:8d:1d: 2e:5e:17:1d:6c:06:ed:cc:42:5e:73:c0:be:4d:3e:74:4a:96: b3:cb:3e:3e:f2:55:cd:09:0c:df:6c:45:55:ee:90:54:d9:6a: af:62:d5:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcQevfSWZ6Lcs7vTLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI0MDkwMTAxMDAzMVoXDTI0MTEzMDAyMDAzMVowLzEtMCsGA1UEAxMk MDJhNTM3ZDUtMDZjYS00MGE4LThlM2QtMTIyNjgyM2NlMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ5HC9fKyFLM70fx94tDRnOY8DXCeI/9fl6B InJ7/k/TDQ/AktGySainQCHaP2hB5N40ayPRtndzZlXAoModvg9p8Jzct3yZvOxU 2FwIZmt40ah830iSLv60KE9JZRMVZpWs+flOPZbBPF1FNSTv5H6flYZGclzTRZau juGU+KRTjm7SVmhgs5xpwPwIIzddYfYBLUds2Y1EZVZ+fIhEpaEX6AWW6X6r8CUs VOJ5DpXqAlccI0F93Ve/z+f/MS6rSu3XGGPHcBmHX+RFwKGhH8tiMNFC+oOYbjKp pgXHwyXJj4kQf/MAXrIYQRRr43bp/Cyc184AIGnmSI7oEmyfzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2S53aw1D6z9tPgeTZvJYaTRGuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvNWYwMWZkYzgtNTlkZC0z YWZiLWI0Y2UtMGVmYzI2MTA0M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqWVLGauBU/E4UoXrUTqTmPXXdO8U6hRxYsx8yNpRO5jM22NmNOR911 oGdvGj/9Jk5eUYBcOT/65jHPAMZOGASTmOJi+r/nKln7jm2z+Iu1ywsJMcdcWNdG uiH3/1mAjKzYwUmiGl+wI59nnhXy2xVTxjUd8CihcKaKxvDRHjmCTnQzQZni6xYN mJoueHkGF4VhkPZLggnMDTpjpmwPRvWT/HsG17m4Kz2uILhw9nVmhU7qkSYD7Y1z YvjLsLzzgyMNxCU0geExsRkmkHO9hB9Zk725hK2NHS5eFx1sBu3MQl5zwL5NPnRK lrPLPj7yVc0JDN9sRVXukFTZaq9i1X4= -----END CERTIFICATE-----Generated at Sat Sep 28 19:45:51 2024 by rpki-client on console-fra.rpki-client.org