$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa File: 3004d2b4-bece-3042-9132-e897abee7f3a.roa (raw, json) Hash identifier: Hh4OtL5YPTF+wNGPK+ytTnSWXxuDunNBgEykFeeYNqs= Subject key identifier: B0:E8:88:7B:F1:75:68:95:63:13:AE:F2:EC:1F:78:76:EC:32:F1:0A Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584793B110EF1641AE83FE29C7A0 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 0 IP address blocks: 192.35.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:10:ef:16:41:ae:83:fe:29:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=258b9382-1a09-4c7c-85d3-7b402b7c96be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:ae:48:62:55:5e:ee:aa:e4:dd:ff:a2:3b: a9:81:de:b0:e3:2d:2a:32:bc:47:10:03:cc:74:d1: a7:14:f5:3f:0c:5e:2a:f8:65:c9:8c:15:ab:f7:6a: 3d:2a:cf:45:43:ec:e8:c3:e7:4b:31:e0:4c:63:90: ab:68:bb:1b:58:74:e0:fd:94:19:01:83:96:73:5c: ca:ee:b1:e1:d3:d2:c5:8e:09:9d:cd:fa:bd:d8:ba: 4e:e6:e3:2f:ae:20:5e:3c:23:5c:c0:54:a1:3c:de: 20:65:ce:33:ac:62:b3:f7:59:89:df:3a:d0:d4:f9: 40:70:1a:e8:e8:3c:e8:8e:77:c4:78:71:72:e3:a6: 99:52:b6:b0:49:cd:74:23:50:c3:79:95:c8:e6:7c: 37:23:d1:e8:f9:91:f4:b2:37:67:fb:de:49:fd:bb: 7f:d8:7a:59:ad:e8:0b:76:23:16:68:70:e6:a4:2b: 00:57:46:9d:d4:c1:93:65:32:09:b0:1e:54:16:f2: f5:9b:c3:a2:7e:59:d2:39:da:e0:cf:71:23:70:7f: be:45:c5:67:e3:6c:c1:cc:7b:1c:13:53:43:de:6f: dc:bc:aa:de:67:ca:ed:70:76:78:63:a0:2d:d3:85: f2:fc:11:f0:6c:59:72:53:b1:de:6e:1f:1c:30:3f: 74:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:88:7B:F1:75:68:95:63:13:AE:F2:EC:1F:78:76:EC:32:F1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3004d2b4-bece-3042-9132-e897abee7f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 192.35.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7c:a4:fb:f3:a8:d7:0f:c9:aa:bf:5c:18:34:0b:76:c5:de: c0:bc:8b:10:34:15:8b:31:a3:f7:b4:60:c4:f4:62:b4:f1:74: 05:ea:8a:bc:68:ce:de:6b:c9:e4:46:64:f4:ba:f5:cc:d5:51: 70:a3:1f:7d:49:19:2d:48:16:84:3e:46:48:16:f1:9b:5f:ee: 0a:9a:d7:ca:65:38:3c:94:23:6c:cd:b6:02:74:a0:9a:c3:f5: 3d:75:82:b6:8d:79:aa:c7:f3:02:c2:00:00:8b:86:5e:09:d4: 22:23:39:bd:14:bb:40:b5:b5:d5:4b:90:f7:28:1e:ba:95:4a: 1f:c8:2f:ac:bb:67:bf:1a:87:3e:18:5a:5f:bd:4c:9b:85:6f: 30:b4:93:10:20:b5:5f:7b:21:66:be:b1:9f:35:c4:b8:c6:01: fc:4e:6a:c2:7f:ed:36:07:45:c6:49:3b:07:76:cd:26:88:47: 0c:9b:33:cd:c9:8d:20:55:08:20:b1:5e:c8:65:1f:b2:0f:e6: 61:5a:71:2f:f3:f2:f6:79:9f:b6:86:e9:87:66:0b:31:7b:30: 15:fc:e1:d9:9c:71:24:c1:35:ad:90:db:93:fa:8f:e6:31:8a: 80:73:55:06:3b:e2:58:8f:20:62:1f:4f:93:02:39:cc:10:ce: 9e:55:79:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsRDvFkGug/4px6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk MjU4YjkzODItMWEwOS00YzdjLTg1ZDMtN2I0MDJiN2M5NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3SuSGJVXu6q5N3/ojupgd6w4y0qMrxHEAPM dNGnFPU/DF4q+GXJjBWr92o9Ks9FQ+zow+dLMeBMY5CraLsbWHTg/ZQZAYOWc1zK 7rHh09LFjgmdzfq92LpO5uMvriBePCNcwFShPN4gZc4zrGKz91mJ3zrQ1PlAcBro 6DzojnfEeHFy46aZUrawSc10I1DDeZXI5nw3I9Ho+ZH0sjdn+95J/bt/2HpZregL diMWaHDmpCsAV0ad1MGTZTIJsB5UFvL1m8OiflnSOdrgz3EjcH++RcVn42zBzHsc E1ND3m/cvKreZ8rtcHZ4Y6At04Xy/BHwbFlyU7Hebh8cMD906wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDoiHvxdWiVYxOu8uwfeHbsMvEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMzAwNGQyYjQtYmVjZS0z MDQyLTkxMzItZTg5N2FiZWU3ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA98pPvzqNcPyaq/XBg0C3bF3sC8ixA0FYsxo/e0YMT0YrTxdAXqirxo zt5ryeRGZPS69czVUXCjH31JGS1IFoQ+RkgW8Ztf7gqa18plODyUI2zNtgJ0oJrD 9T11graNearH8wLCAACLhl4J1CIjOb0Uu0C1tdVLkPcoHrqVSh/IL6y7Z78ahz4Y Wl+9TJuFbzC0kxAgtV97IWa+sZ81xLjGAfxOasJ/7TYHRcZJOwd2zSaIRwybM83J jSBVCCCxXshlH7IP5mFacS/z8vZ5n7aG6YdmCzF7MBX84dmccSTBNa2Q25P6j+Yx ioBzVQY74liPIGIfT5MCOcwQzp5VeSE= -----END CERTIFICATE-----Generated at Tue Oct 22 20:13:52 2024 by rpki-client on console-fra.rpki-client.org