$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa File: a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa (raw, json) Hash identifier: 8LPu82kKy8PvCNn6ja+uNJjZZ9kyQ7XOpy61bwIIrDg= Subject key identifier: B8:8B:9C:22:4A:8E:65:FA:60:C4:2B:51:5C:A2:45:A1:95:64:15:67 Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa Certificate serial: 010D0C9F432858478F4611F2E27DCFE6185CE900 Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa Signing time: Wed 16 Oct 2024 11:01:44 +0000 ROA not before: Wed 16 Oct 2024 11:01:44 +0000 ROA not after: Tue 14 Jan 2025 12:01:44 +0000 asID: 211535 IP address blocks: 128.254.224.0/24 maxlen: 24 128.254.226.0/24 maxlen: 24 128.254.227.0/24 maxlen: 24 2602:fbec::/36 maxlen: 36 2602:fbec:224::/48 maxlen: 48 2602:fbec:226::/48 maxlen: 48 2602:fbec:227::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8f:46:11:f2:e2:7d:cf:e6:18:5c:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa Validity Not Before: Oct 16 11:01:44 2024 GMT Not After : Jan 14 12:01:44 2025 GMT Subject: CN=f1487537-e140-452d-8a2f-95d3f960d50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:37:62:9a:71:9a:82:a5:38:6b:26:0f:43: 56:6d:b0:6f:9f:3c:38:8e:b2:c6:84:ef:5a:a4:fd: 04:8a:88:3a:bf:8f:b3:4f:8a:76:94:26:37:46:fc: 43:02:9b:4e:cb:c8:84:59:8c:3c:43:5e:48:83:6a: 31:c0:17:6e:4d:6c:6a:aa:2f:43:69:a8:cc:ae:ae: a9:ec:03:ad:17:65:3f:f1:ec:2b:aa:76:79:16:19: 0b:d0:9b:13:78:3b:37:40:60:0c:0c:35:0f:7b:0f: 6a:51:8a:7a:aa:3c:61:79:12:14:0d:cb:b6:78:7a: bb:15:b4:29:3b:d2:31:98:d0:57:a3:84:3b:23:38: 93:12:fc:1e:18:1a:da:d6:17:68:39:be:00:aa:87: e3:35:ee:e4:f3:cc:fe:e8:12:c1:31:5f:6f:17:b5: f3:c9:18:59:04:67:72:ea:a9:a3:2d:4a:33:73:a5: 90:2b:1a:e8:78:50:e6:ff:2b:57:73:65:c0:1d:7c: 9e:d3:4e:aa:d2:75:00:01:05:b4:32:71:04:90:c6: 62:81:10:19:69:7c:16:f6:71:09:7b:67:2b:a4:e4: b5:78:93:64:47:80:f9:0b:e3:2c:d8:22:33:05:30: eb:18:a7:bb:82:5e:65:30:0c:e1:5d:94:b0:fb:28: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:9C:22:4A:8E:65:FA:60:C4:2B:51:5C:A2:45:A1:95:64:15:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/a43b6364-88c1-3c94-9372-57bf5e1cfcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl X509v3 Authority Key Identifier: keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer sbgp-ipAddrBlock: critical IPv4: 128.254.224.0/24 128.254.226.0/23 IPv6: 2602:fbec::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:98:2e:f6:53:1e:15:ac:77:0e:e7:39:fd:a5:82:54:16:de: 61:40:2c:52:e4:69:1d:8a:e7:89:17:d4:a4:ee:95:7e:75:b0: 13:29:04:47:77:77:08:d2:6e:3e:08:22:b3:0c:61:19:64:83: c7:0c:1c:5d:79:d4:c7:97:e4:27:9f:3d:25:88:81:7d:21:76: 88:36:e3:84:2d:d5:97:77:52:4a:31:f6:95:a4:48:ac:1f:41: ac:47:1c:71:d7:f0:7d:8c:ca:b3:69:7c:5b:25:ce:e1:ab:5d: c2:dc:c9:3d:55:52:47:08:35:8e:75:f1:9b:0b:81:64:ae:d8: 2c:ef:1e:5e:2e:42:0d:36:3f:16:22:ea:00:b0:f8:80:7f:79: 00:84:5e:98:bc:3a:e9:d3:49:c8:9f:e0:05:14:ed:56:0f:14: d5:f2:02:3f:93:e2:42:2f:94:0e:31:03:ce:32:47:c1:7c:eb: 56:c3:85:d9:6f:c6:01:19:86:3d:60:79:c0:db:c1:1a:bd:d5: 83:a7:f1:f6:b0:07:76:94:b1:6f:f0:dc:d1:96:0d:07:50:5a: 6a:20:63:9a:f7:3c:90:7e:73:4c:2b:c3:fa:e0:79:69:44:0d: bd:ea:1c:13:07:ef:e3:c9:3a:6e:6f:1d:9c:fa:55:4a:9a:cc: c3:b6:9d:b7 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEePRhHy4n3P5hhc6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUxMTUxNDMtMTFjOC00YjA2LTgwYTEtYTk5MWZhNTBm MmZhMB4XDTI0MTAxNjExMDE0NFoXDTI1MDExNDEyMDE0NFowLzEtMCsGA1UEAxMk ZjE0ODc1MzctZTE0MC00NTJkLThhMmYtOTVkM2Y5NjBkNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwc3YppxmoKlOGsmD0NWbbBvnzw4jrLGhO9a pP0Eiog6v4+zT4p2lCY3RvxDAptOy8iEWYw8Q15Ig2oxwBduTWxqqi9DaajMrq6p 7AOtF2U/8ewrqnZ5FhkL0JsTeDs3QGAMDDUPew9qUYp6qjxheRIUDcu2eHq7FbQp O9IxmNBXo4Q7IziTEvweGBra1hdoOb4AqofjNe7k88z+6BLBMV9vF7XzyRhZBGdy 6qmjLUozc6WQKxroeFDm/ytXc2XAHXye006q0nUAAQW0MnEEkMZigRAZaXwW9nEJ e2crpOS1eJNkR4D5C+Ms2CIzBTDrGKe7gl5lMAzhXZSw+yiubQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFLiLnCJKjmX6YMQrUVyiRaGVZBVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNTEx NTE0My0xMWM4LTRiMDYtODBhMS1hOTkxZmE1MGYyZmEvYTQzYjYzNjQtODhjMS0z Yzk0LTkzNzItNTdiZjVlMWNmY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTUxMTUxNDMtMTFjOC00YjA2LTgw YTEtYTk5MWZhNTBmMmZhLzE1MTE1MTQzLTExYzgtNGIwNi04MGExLWE5OTFmYTUw ZjJmYS5jcmwwHwYDVR0jBBgwFoAUVxb9oR0aCplObiedKLlylvm9hkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNTExNTE0My0xMWM4LTRiMDYtODBhMS1hOTkx ZmE1MGYyZmEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAgP7gAwQB gP7iMA4EAgACMAgDBgQmAvvsADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbmC72Ux4VrHcO5zn9pYJUFt5h QCxS5GkdiueJF9Sk7pV+dbATKQRHd3cI0m4+CCKzDGEZZIPHDBxdedTHl+Qnnz0l iIF9IXaINuOELdWXd1JKMfaVpEisH0GsRxxx1/B9jMqzaXxbJc7hq13C3Mk9VVJH CDWOdfGbC4Fkrtgs7x5eLkINNj8WIuoAsPiAf3kAhF6YvDrp00nIn+AFFO1WDxTV 8gI/k+JCL5QOMQPOMkfBfOtWw4XZb8YBGYY9YHnA28EavdWDp/H2sAd2lLFv8NzR lg0HUFpqIGOa9zyQfnNMK8P64HlpRA296hwTB+/jyTpubx2c+lVKmszDtp23 -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:30 2024 by rpki-client on console-fra.rpki-client.org