$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa File: 37fd6b0c-fc80-340d-8f7b-960124f34643.roa (raw, json) Hash identifier: RatWnzzOLVcbmk8QHLfTCYsQ0kvsrkCu2FF2P9cGc4w= Subject key identifier: 43:3C:A0:50:67:14:1D:B1:F5:91:B8:DB:08:21:D4:1E:C6:DA:E5:51 Certificate issuer: /CN=58eef8b8-39c9-495c-b889-44faff13a8aa Certificate serial: 010D0C9F43285847A5D6AB1F8DC01A70F16DC080 Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 397016 IP address blocks: 130.250.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:ab:1f:8d:c0:1a:70:f1:6d:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=c95b6580-f31e-46e7-8711-e0dce27a232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:11:67:b5:1c:e6:6a:1f:53:f0:0a:b1:f7: d2:c3:b0:ae:ee:f8:e8:d5:84:04:a2:da:65:4b:cf: 2f:41:56:e5:ca:80:36:e4:d7:6c:b6:2e:fb:be:13: b6:b7:16:3d:47:80:fa:0f:a4:a0:39:91:da:f0:b5: 15:c9:03:ca:47:2c:5d:75:d3:ce:38:22:81:bd:a0: b3:bf:ef:13:0f:14:cf:28:82:98:2b:a7:17:9e:7c: f6:25:cc:6b:6d:bf:55:1c:be:bc:a0:3c:f8:11:3f: 3b:2b:96:fa:94:cc:3e:6f:7c:5d:87:a3:b0:2f:ab: c8:48:e3:60:19:fc:1a:7d:c8:9a:9c:ab:9e:59:7c: 1e:e2:a4:86:d3:8e:22:f8:19:ee:56:10:14:7e:f5: 25:75:2e:d2:fd:7a:de:44:99:53:05:68:d6:7f:5d: cf:2e:34:ce:71:6a:21:28:d1:2b:b2:d5:63:f3:3e: 86:02:66:77:5b:5b:47:00:c1:be:ac:a9:4e:c7:7a: c5:fb:38:a2:a1:cf:d1:0e:7b:24:46:13:89:59:e4: 29:9b:df:cc:36:1d:ac:dd:91:99:ab:94:fd:41:a2: 25:6a:3b:df:4a:ed:b3:2f:6a:1e:df:03:02:c5:d7: 00:b0:04:0f:1e:28:39:cb:07:37:2e:12:cd:85:6e: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3C:A0:50:67:14:1D:B1:F5:91:B8:DB:08:21:D4:1E:C6:DA:E5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl X509v3 Authority Key Identifier: keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer sbgp-ipAddrBlock: critical IPv4: 130.250.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5c:a6:89:97:de:f2:2c:f1:cc:47:3c:79:c5:22:e1:28:36: a2:ee:9c:8d:80:e1:71:bd:3e:25:2b:cf:d7:4c:34:92:35:3d: 59:56:5d:3d:1f:83:c8:4a:4f:c9:a7:2e:81:86:be:5d:1c:b7: a9:af:5b:56:61:09:a0:b4:eb:f1:62:7c:6f:20:51:b8:70:cb: c7:fb:ed:bf:21:b2:6a:d3:55:a3:59:1f:8b:49:8c:cc:1d:c6: 15:1a:c9:c5:ce:3a:07:e4:ab:ee:00:84:98:31:58:38:43:1f: 54:74:e1:0c:86:87:89:ed:9b:e9:35:f6:16:94:46:47:26:d4: b1:56:28:7e:ce:1e:d1:a4:66:06:85:a7:44:fb:c6:07:a7:14: 14:fa:cf:03:a8:fe:fb:8c:bf:80:c2:05:91:95:ff:bb:83:16: 51:65:a5:d1:31:ab:98:11:e9:c6:2c:96:0d:af:be:68:80:66: 86:14:5b:79:f5:6f:02:9c:9d:ed:09:ab:2c:93:a2:e3:3c:83: 4c:6f:be:e5:cf:86:fc:e5:b3:c3:bf:27:c0:8b:fe:d8:de:01: 91:de:ae:18:22:f0:e4:60:50:f9:e7:d3:97:75:5d:fc:b7:e1: 04:4b:ad:10:b4:f6:23:d9:db:a7:8d:2e:55:2e:af:02:e2:e8: a5:76:62:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qsfjcAacPFtwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh OGFhMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk Yzk1YjY1ODAtZjMxZS00NmU3LTg3MTEtZTBkY2UyN2EyMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO4RZ7Uc5mofU/AKsffSw7Cu7vjo1YQEotpl S88vQVblyoA25Ndsti77vhO2txY9R4D6D6SgOZHa8LUVyQPKRyxdddPOOCKBvaCz v+8TDxTPKIKYK6cXnnz2Jcxrbb9VHL68oDz4ET87K5b6lMw+b3xdh6OwL6vISONg GfwafcianKueWXwe4qSG044i+BnuVhAUfvUldS7S/XreRJlTBWjWf13PLjTOcWoh KNErstVj8z6GAmZ3W1tHAMG+rKlOx3rF+ziioc/RDnskRhOJWeQpm9/MNh2s3ZGZ q5T9QaIlajvfSu2zL2oe3wMCxdcAsAQPHig5ywc3LhLNhW6OpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM8oFBnFB2x9ZG42wgh1B7G2uVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvMzdmZDZiMGMtZmM4MC0z NDBkLThmN2ItOTYwMTI0ZjM0NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4 ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh ZmYxM2E4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgvqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBcpomX3vIs8cxHPHnFIuEoNqLunI2A4XG9PiUrz9dMNJI1PVlWXT0f g8hKT8mnLoGGvl0ct6mvW1ZhCaC06/FifG8gUbhwy8f77b8hsmrTVaNZH4tJjMwd xhUaycXOOgfkq+4AhJgxWDhDH1R04QyGh4ntm+k19haURkcm1LFWKH7OHtGkZgaF p0T7xgenFBT6zwOo/vuMv4DCBZGV/7uDFlFlpdExq5gR6cYslg2vvmiAZoYUW3n1 bwKcne0JqyyTouM8g0xvvuXPhvzls8O/J8CL/tjeAZHerhgi8ORgUPnn05d1Xfy3 4QRLrRC09iPZ26eNLlUurwLi6KV2YvI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:02 2024 by rpki-client on console-ams.rpki-client.org