$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa File: 34356c57-8521-34f3-a43c-872918075c40.roa (raw, json) Hash identifier: leVJRpSKD1EkUx8JUHYg3hZZgnE48E4d3nETJDzRlbE= Subject key identifier: B8:E2:D7:BA:F9:BC:81:E1:D1:75:0D:A4:AB:19:82:ED:B3:89:9B:67 Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F43285847B3CC07C5E8552755AC09C280 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 8075 IP address blocks: 138.128.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:07:c5:e8:55:27:55:ac:09:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=e4d78413-0127-49cd-a465-6f30899d4c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:67:7e:57:99:e3:ee:eb:7b:21:c7:b9:9d: f5:8d:9e:a9:a7:fe:c1:2c:13:d9:18:71:70:96:6e: 2e:2d:6c:4c:b6:f3:c2:c7:df:e8:c6:0d:11:de:60: 7f:15:f7:96:18:5d:f8:76:76:a0:d5:f1:7a:55:1a: 12:9a:26:d2:a1:0f:69:1e:76:61:7b:3d:5e:31:fd: ad:c5:ed:49:78:02:39:8a:d4:bb:2b:5b:fd:97:6c: 25:66:8d:84:d4:67:b4:03:c9:a5:0b:28:24:cf:e2: e5:61:c5:63:5e:9d:ca:d5:1d:d8:13:04:00:98:a9: 22:ff:6a:23:aa:47:49:f7:c5:76:5f:a3:5a:b9:03: b1:5d:c3:b8:7a:5f:92:16:87:04:47:38:d8:44:0b: aa:fd:ed:73:1c:0f:ef:58:03:34:40:57:b8:e9:57: 1f:b6:42:c7:51:f1:fd:f8:4c:70:1e:a6:e1:2d:3c: 2f:e8:aa:e9:8b:80:f9:a3:c8:47:98:56:88:a2:5a: fa:dc:18:53:9c:36:e9:27:a9:ec:b1:89:84:fd:90: a4:e6:e4:3a:e0:a6:a4:42:6d:03:55:4e:aa:af:57: 1c:f8:aa:90:da:5a:9d:68:2a:8f:28:60:06:8d:56: 8e:c5:85:75:94:58:30:0d:da:cd:0d:6b:23:17:41: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:D7:BA:F9:BC:81:E1:D1:75:0D:A4:AB:19:82:ED:B3:89:9B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:39:ca:25:bf:6a:c6:38:df:51:83:aa:64:a7:3b:ba:57:a6: 71:f5:12:e6:63:be:66:09:54:5a:d7:a1:6d:ce:4b:50:19:70: 83:2d:df:90:b9:cd:e4:bf:f1:e3:02:2f:e2:5e:b2:54:b6:d6: c2:5e:02:92:2b:d6:a3:19:c0:b7:f4:41:11:ff:75:b1:66:86: e4:83:6d:f2:e8:5f:57:b6:f2:89:57:67:95:a6:49:42:cd:6d: f2:e6:8b:9e:ef:64:89:30:b7:09:ba:27:56:6c:e1:b2:87:76: 26:e9:6b:a1:46:d9:59:c7:af:92:ac:5e:92:7d:1c:e4:c9:58: 32:a0:cc:d9:dd:96:db:55:7a:f4:e1:96:92:d1:ff:5d:d7:71: 5d:cf:45:3a:69:84:a2:62:e9:87:4c:be:0d:b2:d8:cf:5b:2a: f4:db:99:3c:c2:3c:31:d4:01:49:21:f7:d5:91:9d:af:94:0b: e3:82:b8:a5:51:7c:9f:1d:d8:21:6f:d3:10:63:6b:50:88:a9: 27:7a:0c:b2:84:53:4e:05:3a:82:36:20:c4:e7:9e:da:2c:79: e8:7e:30:95:89:f2:98:b9:d9:7f:b0:f2:ce:cb:09:63:e7:6d: 02:e4:a5:0d:ff:d7:69:eb:48:08:85:16:e4:ad:62:83:e3:2a: 72:1d:85:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzAfF6FUnVawJwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk ZTRkNzg0MTMtMDEyNy00OWNkLWE0NjUtNmYzMDg5OWQ0YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLBnfleZ4+7reyHHuZ31jZ6pp/7BLBPZGHFw lm4uLWxMtvPCx9/oxg0R3mB/FfeWGF34dnag1fF6VRoSmibSoQ9pHnZhez1eMf2t xe1JeAI5itS7K1v9l2wlZo2E1Ge0A8mlCygkz+LlYcVjXp3K1R3YEwQAmKki/2oj qkdJ98V2X6NauQOxXcO4el+SFocERzjYRAuq/e1zHA/vWAM0QFe46VcftkLHUfH9 +ExwHqbhLTwv6Krpi4D5o8hHmFaIolr63BhTnDbpJ6nssYmE/ZCk5uQ64KakQm0D VU6qr1cc+KqQ2lqdaCqPKGAGjVaOxYV1lFgwDdrNDWsjF0FPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLji17r5vIHh0XUNpKsZgu2ziZtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMzQzNTZjNTctODUyMS0z NGYzLWE0M2MtODcyOTE4MDc1YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA5yiW/asY431GDqmSnO7pXpnH1EuZjvmYJVFrXoW3OS1AZcIMt35C5 zeS/8eMCL+JeslS21sJeApIr1qMZwLf0QRH/dbFmhuSDbfLoX1e28olXZ5WmSULN bfLmi57vZIkwtwm6J1Zs4bKHdibpa6FG2VnHr5KsXpJ9HOTJWDKgzNndlttVevTh lpLR/13XcV3PRTpphKJi6YdMvg2y2M9bKvTbmTzCPDHUAUkh99WRna+UC+OCuKVR fJ8d2CFv0xBja1CIqSd6DLKEU04FOoI2IMTnntoseeh+MJWJ8pi52X+w8s7LCWPn bQLkpQ3/12nrSAiFFuStYoPjKnIdhdc= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org