$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa File: fdbb518e-6301-32f6-9311-491af1e25efe.roa (raw, json) Hash identifier: 780KrJpKH5Nbl3jnOnVzuI8ckVTNbvynvIu1msTg9rw= Subject key identifier: 40:89:85:C8:80:05:03:D2:0D:35:07:85:28:0D:1B:54:75:74:55:E5 Certificate issuer: /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Certificate serial: 010D0C9F43285847D999F2E763AD982F8AAAB180 Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 394434 IP address blocks: 168.86.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f2:e7:63:ad:98:2f:8a:aa:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=d594394b-6ec0-415e-887f-76a2f03f2a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:17:9a:a7:49:64:8b:28:2a:eb:7e:f4:64: 5f:90:0e:c6:04:3f:5d:99:b4:4c:60:93:de:cb:a4: 57:5a:9c:d5:f5:c3:fb:57:98:16:aa:11:18:9e:d0: 82:41:55:7c:ae:02:66:f1:92:52:e0:ce:1f:42:87: 27:42:72:d1:90:cc:5b:cf:72:a1:f8:75:7b:2c:1a: 4f:90:69:e5:73:e3:1f:05:f5:a6:c2:82:92:71:b7: 19:4c:1d:5c:71:c2:25:63:6d:f1:69:b1:2f:e7:5b: 3b:7d:53:b8:d6:aa:8e:6f:5c:fa:82:8f:46:2d:25: 33:6f:ab:46:fc:3c:48:ac:a6:d5:b7:6e:65:eb:29: ef:3b:42:0c:b3:9c:ee:84:01:15:f0:ab:4f:a3:1a: 2c:cd:39:a8:93:ca:1a:d8:48:7a:c9:7c:59:2f:38: c3:f0:a0:8f:2b:0e:29:34:be:5f:09:13:22:2f:57: 68:15:1e:8b:36:22:88:df:f6:2b:d5:e6:07:6b:46: cf:f4:ed:ab:2c:e3:5d:2b:49:06:07:37:9f:8f:da: 53:67:08:c3:00:39:75:8f:3c:81:b1:e7:e1:4a:d7: 0c:8b:8b:ec:da:32:53:05:36:29:34:ff:72:df:98: bb:6a:84:ab:9c:f8:b2:01:53:cb:9a:0b:c1:b5:76: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:89:85:C8:80:05:03:D2:0D:35:07:85:28:0D:1B:54:75:74:55:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/fdbb518e-6301-32f6-9311-491af1e25efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl X509v3 Authority Key Identifier: keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer sbgp-ipAddrBlock: critical IPv4: 168.86.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0f:53:d4:c4:e7:2c:0f:c5:20:3d:15:fa:54:bf:2a:b3:89: 7c:a0:22:05:ed:1c:49:c8:1a:da:40:ea:0d:1e:fd:fb:59:9a: 42:ed:e1:62:a3:94:ca:af:e5:73:96:9a:0e:12:01:d4:80:9a: 50:90:f0:06:e8:f9:55:69:97:b2:4e:9f:41:16:08:c7:16:0d: 7e:01:be:75:cc:45:32:a9:08:04:c8:18:16:b8:e6:5a:c8:17: 52:ab:a8:69:4e:ad:45:e1:72:3f:4f:39:19:67:5e:ac:d7:45: e7:6b:41:89:cb:7e:5e:87:4e:24:37:11:4c:26:a1:01:d0:eb: d2:96:f9:d3:cd:77:6b:b9:1d:8a:99:39:20:8a:98:f7:7b:1b: a8:6f:68:d0:0d:87:d4:1e:c7:1e:20:88:94:f9:46:c5:4d:a8: 8c:32:0e:e9:8c:ad:96:c1:d8:91:ce:d0:c8:52:27:e7:f7:55: 8c:7b:7e:bf:cc:d1:02:f8:9c:4a:ae:2e:0e:20:c5:76:47:8d: 5b:b8:c1:cb:50:87:79:47:3e:34:7e:51:7c:8a:10:4d:d5:53: d1:e6:97:d0:b3:5f:29:59:2e:a4:df:28:3e:11:0a:d4:d3:6f: 72:7a:13:7b:00:d3:46:33:cd:dd:70:3d:25:f5:35:75:18:c3: a0:b9:85:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfLnY62YL4qqsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjMzJlNTItNzkxOS00YWQ0LWE0ODYtNGJlZDIzYTVj M2FiMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk ZDU5NDM5NGItNmVjMC00MTVlLTg4N2YtNzZhMmYwM2YyYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIsXmqdJZIsoKut+9GRfkA7GBD9dmbRMYJPe y6RXWpzV9cP7V5gWqhEYntCCQVV8rgJm8ZJS4M4fQocnQnLRkMxbz3Kh+HV7LBpP kGnlc+MfBfWmwoKScbcZTB1cccIlY23xabEv51s7fVO41qqOb1z6go9GLSUzb6tG /DxIrKbVt25l6ynvO0IMs5zuhAEV8KtPoxoszTmok8oa2Eh6yXxZLzjD8KCPKw4p NL5fCRMiL1doFR6LNiKI3/Yr1eYHa0bP9O2rLONdK0kGBzefj9pTZwjDADl1jzyB sefhStcMi4vs2jJTBTYpNP9y35i7aoSrnPiyAVPLmgvBtXY+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECJhciABQPSDTUHhSgNG1R1dFXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMz MmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVkMjNhNWMzYWIvZmRiYjUxOGUtNjMwMS0z MmY2LTkzMTEtNDkxYWYxZTI1ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGRjMzJlNTItNzkxOS00YWQ0LWE0 ODYtNGJlZDIzYTVjM2FiLzBkYzMyZTUyLTc5MTktNGFkNC1hNDg2LTRiZWQyM2E1 YzNhYi5jcmwwHwYDVR0jBBgwFoAU5f0U87CPcdIf6cpjpPRwU/jwArIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZGMzMmU1Mi03OTE5LTRhZDQtYTQ4Ni00YmVk MjNhNWMzYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqFaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsPU9TE5ywPxSA9FfpUvyqziXygIgXtHEnIGtpA6g0e/ftZmkLt4WKj lMqv5XOWmg4SAdSAmlCQ8Abo+VVpl7JOn0EWCMcWDX4BvnXMRTKpCATIGBa45lrI F1KrqGlOrUXhcj9PORlnXqzXRedrQYnLfl6HTiQ3EUwmoQHQ69KW+dPNd2u5HYqZ OSCKmPd7G6hvaNANh9Qexx4giJT5RsVNqIwyDumMrZbB2JHO0MhSJ+f3VYx7fr/M 0QL4nEquLg4gxXZHjVu4wctQh3lHPjR+UXyKEE3VU9Hml9CzXylZLqTfKD4RCtTT b3J6E3sA00Yzzd1wPSX1NXUYw6C5hcQ= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:49 2024 by rpki-client on console-fra.rpki-client.org