$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa File: 38c17b7a-0754-332b-ad37-ba79d152d002.roa (raw, json) Hash identifier: 2MixDyZZqZA9VqJNbveQkAGRdO7t1cX928DpTxKQwN4= Subject key identifier: BA:67:87:28:56:EC:62:18:51:72:93:C6:58:7A:3F:55:7B:A4:51:63 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F43285847213B0C498BB46D3A55C06D80 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 399726 IP address blocks: 204.144.180.0/24 maxlen: 24 204.144.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:0c:49:8b:b4:6d:3a:55:c0:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=815ea28e-81b1-4534-9a69-be991d96c803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:90:df:c4:93:31:a1:0b:a8:4e:85:19:06: 7c:c7:d5:64:e2:35:95:cd:9f:89:b0:a7:6b:62:15: 62:20:8b:3a:58:36:8f:a3:3b:b1:e6:fa:5e:0d:d0: 24:14:e8:d0:1c:d9:c7:8c:5c:b9:0b:d1:04:76:0b: f2:a2:e1:f7:a7:aa:8c:71:61:51:44:ec:45:22:ef: 3d:c6:cb:fa:c6:cc:09:9b:a6:8d:53:8f:69:bf:ac: 2c:9b:21:13:ab:34:b8:66:03:3a:1b:11:20:a8:44: 97:d8:b2:23:b9:82:92:af:31:f0:c8:10:d9:d3:ee: 57:db:40:4b:b2:bc:e6:66:f2:f8:33:3c:54:01:fd: c0:b8:94:29:c0:18:79:47:94:54:58:1c:9e:cc:c2: 5a:bf:10:29:00:f0:e8:49:9b:0c:61:2e:fa:87:1b: 14:3d:0e:77:06:f2:b2:32:44:21:3a:10:16:c0:a6: 7f:9c:93:90:72:56:07:49:5f:26:36:74:2a:49:6c: 01:b3:35:6a:37:17:ff:30:84:61:be:bd:b4:2d:01: 33:cf:0c:ff:97:5a:de:81:63:2b:35:51:78:0e:70: 7a:bc:9d:75:36:e1:d4:7b:f8:4a:a5:81:4e:c2:d3: 4c:ce:ee:b0:b4:3c:40:7c:09:b8:23:7e:ab:f8:84: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:87:28:56:EC:62:18:51:72:93:C6:58:7A:3F:55:7B:A4:51:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 204.144.180.0/24 204.144.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:09:5a:df:b7:ce:c6:f8:dd:c6:f2:24:6b:31:da:a1:b5:f3: 9c:17:c9:f8:2b:ad:80:36:48:16:f0:7b:f3:47:f4:5b:ac:36: 35:a1:ed:18:b8:75:a8:0c:f4:08:13:41:24:68:0d:2d:00:92: d9:29:01:33:7f:6f:8c:d9:98:45:b5:1a:bd:0a:b6:43:4f:36: 8e:1c:0b:68:9d:0a:28:19:6b:63:6f:b9:f0:61:d7:f5:50:ce: 2b:fd:6b:41:0b:ca:d7:23:91:a0:0c:b2:a2:90:f4:78:14:13: 93:41:ae:bb:fc:c4:e6:20:4f:42:97:58:45:b5:00:c7:9b:3e: ec:a6:55:27:97:9f:4b:a6:74:58:84:81:74:0c:44:24:b8:0d: e5:f9:5c:c1:6f:62:1f:1f:2c:4f:77:8b:2a:a9:d5:95:98:3f: 43:e2:9e:f1:02:07:4a:2e:6b:8d:9a:30:6f:b7:3d:c0:79:6f: cd:0a:fc:53:13:48:69:a6:a3:9a:7d:3b:02:f1:05:f1:58:9f: 6b:dc:51:ec:b7:14:97:a8:e1:73:2d:63:fc:60:d4:d8:9e:3d: 8b:bb:b3:7d:1e:0b:77:6c:d7:13:c2:53:0a:a3:b0:f5:59:b9: 47:33:bd:b6:0a:e5:96:a7:0f:32:23:1e:50:77:74:c8:8e:aa: 62:15:4c:21 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEchOwxJi7RtOlXAbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk ODE1ZWEyOGUtODFiMS00NTM0LTlhNjktYmU5OTFkOTZjODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQmQ38STMaELqE6FGQZ8x9Vk4jWVzZ+JsKdr YhViIIs6WDaPozux5vpeDdAkFOjQHNnHjFy5C9EEdgvyouH3p6qMcWFRROxFIu89 xsv6xswJm6aNU49pv6wsmyETqzS4ZgM6GxEgqESX2LIjuYKSrzHwyBDZ0+5X20BL srzmZvL4MzxUAf3AuJQpwBh5R5RUWByezMJavxApAPDoSZsMYS76hxsUPQ53BvKy MkQhOhAWwKZ/nJOQclYHSV8mNnQqSWwBszVqNxf/MIRhvr20LQEzzwz/l1regWMr NVF4DnB6vJ11NuHUe/hKpYFOwtNMzu6wtDxAfAm4I36r+IRuWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLpnhyhW7GIYUXKTxlh6P1V7pFFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMzhjMTdiN2EtMDc1NC0z MzJiLWFkMzctYmE3OWQxNTJkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzJC0AwQB zJC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGMJWt+3zsb43cbyJGsx2qG185wXyfgrrYA2SBbwe/NH9Fus NjWh7Ri4dagM9AgTQSRoDS0AktkpATN/b4zZmEW1Gr0KtkNPNo4cC2idCigZa2Nv ufBh1/VQziv9a0ELytcjkaAMsqKQ9HgUE5NBrrv8xOYgT0KXWEW1AMebPuymVSeX n0umdFiEgXQMRCS4DeX5XMFvYh8fLE93iyqp1ZWYP0PinvECB0oua42aMG+3PcB5 b80K/FMTSGmmo5p9OwLxBfFYn2vcUey3FJeo4XMtY/xg1NiePYu7s30eC3ds1xPC UwqjsPVZuUczvbYK5ZanDzIjHlB3dMiOqmIVTCE= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:14 2024 by rpki-client on console-fra.rpki-client.org