$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa File: 82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (raw, json) Hash identifier: HV83+LCbbEusNB83fvZMrW9jM4x7PpukPtDdjx8vrYQ= Subject key identifier: 30:D1:8C:D7:AD:C4:F9:2C:83:96:F5:47:31:CF:82:33:C7:45:78:2D Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F43285847B10160E107F131BA7697F600 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 8075 IP address blocks: 138.128.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:60:e1:07:f1:31:ba:76:97:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=1fd28885-f563-4d96-905e-f11b8332bdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:e3:e9:3f:99:da:56:24:b4:80:6b:d3:4b: 98:76:11:ba:42:85:e6:f8:5d:47:45:6b:06:cf:8c: 7f:39:3b:fb:b1:46:62:9e:6c:1d:9d:bd:ab:2d:c3: 71:e0:b9:53:34:2f:18:52:67:e6:47:ac:d0:60:6e: dd:c1:69:85:3e:6d:40:02:66:ec:2f:92:80:2d:14: e3:57:48:ad:36:ed:41:70:24:c9:d1:c1:18:46:f5: 02:0d:7c:b8:dc:c3:7c:7f:cd:c3:ed:33:19:f4:dd: 61:be:63:44:eb:11:d3:17:cf:a7:e7:12:49:75:1d: 36:71:e3:ad:3a:7e:c7:ef:55:2c:80:12:df:19:58: b1:7c:43:87:0f:a9:5e:d2:28:13:5e:88:f9:ff:e7: 5a:95:5a:04:b6:b7:da:e2:fc:ae:34:af:86:26:fb: 09:75:80:cd:0b:4c:90:a1:60:32:bc:eb:ba:ce:a4: a4:f9:82:b1:f8:3c:ac:c0:47:f8:29:d3:15:2d:1c: 2e:50:8c:29:e5:2b:f0:25:61:75:4d:e2:e7:82:ac: d8:2b:d3:c8:e7:0d:8a:1b:e3:bf:70:0d:fa:4e:28: d8:83:0b:ab:ac:ae:b3:04:88:16:bf:ab:3d:55:ca: be:7a:d6:2f:d5:21:f2:e6:b6:7e:8b:61:ba:e7:bb: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:8C:D7:AD:C4:F9:2C:83:96:F5:47:31:CF:82:33:C7:45:78:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3d:b6:05:f0:9c:6d:53:83:5f:d4:36:d8:10:ca:01:78:a8: 51:b0:0a:2a:91:40:55:57:52:d0:19:c3:0d:fd:5e:a7:39:19: f3:74:dc:21:15:7b:71:8c:07:62:92:98:70:84:a7:01:54:90: b8:59:a1:ae:b7:5d:a8:a7:aa:dd:2c:41:a4:f5:35:0e:ac:92: 03:f5:de:dd:f1:19:2d:64:fa:fa:16:92:06:35:aa:fd:12:9a: 9c:b1:c1:6f:ed:5d:f2:08:63:20:9c:d5:ee:0c:49:3f:ee:75: 0f:2d:e0:1d:1f:99:7a:0c:4e:b0:58:88:0d:1a:50:4d:70:1b: ae:c2:a6:11:15:85:91:71:76:51:1f:e4:1c:17:fa:65:19:e5: de:70:d5:a1:92:a2:3c:7b:c2:3f:49:d6:0e:d9:17:53:a3:e7: 39:bc:fd:c6:87:2e:c6:10:75:8d:8c:f3:52:7c:4d:8f:bb:fe: 74:1d:e7:28:cb:1f:3f:e9:7c:5f:99:85:91:d0:1b:14:99:9f: c0:20:98:75:81:07:b4:b1:79:f4:7a:1d:27:c9:4a:1a:45:14: d2:b0:76:a6:41:91:2d:49:5c:7c:6d:ef:a2:3e:8b:cb:26:04: a2:5d:bb:35:a7:39:ec:11:c5:cd:10:41:f2:f1:ad:86:47:f1: 23:a4:13:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWDhB/ExunaX9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk MWZkMjg4ODUtZjU2My00ZDk2LTkwNWUtZjExYjgzMzJiZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKzj6T+Z2lYktIBr00uYdhG6QoXm+F1HRWsG z4x/OTv7sUZinmwdnb2rLcNx4LlTNC8YUmfmR6zQYG7dwWmFPm1AAmbsL5KALRTj V0itNu1BcCTJ0cEYRvUCDXy43MN8f83D7TMZ9N1hvmNE6xHTF8+n5xJJdR02ceOt On7H71UsgBLfGVixfEOHD6le0igTXoj5/+dalVoEtrfa4vyuNK+GJvsJdYDNC0yQ oWAyvOu6zqSk+YKx+DyswEf4KdMVLRwuUIwp5SvwJWF1TeLngqzYK9PI5w2KG+O/ cA36TijYgwurrK6zBIgWv6s9Vcq+etYv1SHy5rZ+i2G657tYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDRjNetxPksg5b1RzHPgjPHRXgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvODJhNTlkMDktYTY4YS0z Yjc0LTgyMWYtYWNkM2MwNmRhYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF09tgXwnG1Tg1/UNtgQygF4qFGwCiqRQFVXUtAZww39Xqc5GfN03CEV e3GMB2KSmHCEpwFUkLhZoa63Xainqt0sQaT1NQ6skgP13t3xGS1k+voWkgY1qv0S mpyxwW/tXfIIYyCc1e4MST/udQ8t4B0fmXoMTrBYiA0aUE1wG67CphEVhZFxdlEf 5BwX+mUZ5d5w1aGSojx7wj9J1g7ZF1Oj5zm8/caHLsYQdY2M81J8TY+7/nQd5yjL Hz/pfF+ZhZHQGxSZn8AgmHWBB7SxefR6HSfJShpFFNKwdqZBkS1JXHxt76I+i8sm BKJduzWnOewRxc0QQfLxrYZH8SOkE9c= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org