$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa File: 2a83a923-d533-3653-856d-6e2aaeb8887a.roa (raw, json) Hash identifier: tUYwz/j2F13/QBFIu5PR6GfofIbJi+3AEo9vvkICd70= Subject key identifier: B0:F7:31:2C:24:97:C1:25:8F:17:06:03:BF:2C:4E:0E:FB:C2:5B:FA Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F43285847B5314BF15981FAE6ECC3D700 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 14593 IP address blocks: 143.131.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:4b:f1:59:81:fa:e6:ec:c3:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=40c5719a-7130-49a1-af1e-11ad3a224576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:9a:b6:33:1b:ff:24:65:ae:ae:ec:c2:c4: eb:58:4a:f2:bc:07:c1:56:29:3f:c0:22:85:cc:50: 6a:e0:d2:33:d2:68:6d:cd:93:e3:42:f8:97:99:91: d1:9c:b4:99:59:a1:eb:d7:80:1f:c5:d4:76:bb:de: 29:0c:90:da:2b:64:2c:af:b1:77:5a:a9:0f:9e:9e: c0:57:f6:77:79:bd:51:0c:a0:e3:0c:7f:7c:42:21: b4:bf:00:40:3e:c4:ae:12:b7:ff:9b:b4:da:9e:74: 40:bb:37:81:3f:0a:28:92:8f:56:34:51:ee:6a:02: 18:ed:c8:f4:9d:36:eb:eb:b7:27:4d:31:e6:22:cc: 0d:a5:87:88:80:02:c9:04:73:fe:4c:50:ee:79:0b: 50:e7:ba:49:95:54:2f:f1:35:32:21:da:a3:28:60: b3:39:e9:17:c6:37:14:e3:53:6e:bc:f1:13:72:46: c6:a1:28:10:de:4f:dd:eb:6e:a6:03:fe:f0:fb:57: ef:87:ca:14:91:6d:0e:dd:36:35:c7:65:57:24:0d: cf:06:2e:45:f3:a8:c6:32:2a:b7:32:4b:c1:4b:66: bc:94:c1:9c:b1:30:88:cb:58:13:d0:3c:e1:b1:d2: 7a:da:13:e6:0b:85:8b:93:5d:fa:33:e1:6c:78:89: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F7:31:2C:24:97:C1:25:8F:17:06:03:BF:2C:4E:0E:FB:C2:5B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/2a83a923-d533-3653-856d-6e2aaeb8887a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 143.131.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:19:88:bf:37:3d:b5:ac:75:de:89:dd:4f:49:a5:a5:3b:6e: 2f:1d:90:c0:ed:ec:61:1c:25:c4:11:e7:ec:7b:88:1c:5e:d1: 4b:e0:ef:e9:21:42:df:1b:f4:05:9d:6f:c0:94:a9:75:7b:44: 28:92:dc:63:8f:f2:2d:aa:fc:9e:45:d5:0a:9f:c7:d8:c8:68: 26:bc:a8:96:06:1b:e8:bd:de:9b:3a:78:74:a4:b5:1e:4d:9c: 53:27:95:0a:c8:20:9e:1d:a9:14:2c:7c:86:90:b7:15:c9:4d: 90:ef:d5:da:cf:8c:a1:bc:fb:8d:d1:d7:38:ed:3b:5c:51:70: a0:77:06:c1:d3:ed:f7:5b:59:3b:fe:be:2f:e9:57:67:e1:2a: 0f:69:80:1c:3b:ae:d8:05:9a:26:bf:0b:d8:a1:13:8c:9d:02: ef:6a:98:ec:c0:45:31:80:c1:68:ca:b4:36:3c:8d:38:dc:03: 7e:89:62:9e:30:84:4e:06:03:00:39:87:04:93:2d:1c:0a:a5: f1:59:ad:bc:e4:da:b1:c2:3a:a4:f3:72:9d:57:6d:ae:44:b0: 4d:87:8f:f5:cc:40:31:a3:86:ac:0d:78:5c:49:61:66:d2:6f: 03:58:c0:f9:91:90:f6:57:33:8c:a5:33:a4:2d:7a:f5:9c:23: 40:ba:75:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MUvxWYH65uzD1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk NDBjNTcxOWEtNzEzMC00OWExLWFmMWUtMTFhZDNhMjI0NTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf+atjMb/yRlrq7swsTrWEryvAfBVik/wCKF zFBq4NIz0mhtzZPjQviXmZHRnLSZWaHr14AfxdR2u94pDJDaK2Qsr7F3WqkPnp7A V/Z3eb1RDKDjDH98QiG0vwBAPsSuErf/m7TannRAuzeBPwooko9WNFHuagIY7cj0 nTbr67cnTTHmIswNpYeIgALJBHP+TFDueQtQ57pJlVQv8TUyIdqjKGCzOekXxjcU 41NuvPETckbGoSgQ3k/d626mA/7w+1fvh8oUkW0O3TY1x2VXJA3PBi5F86jGMiq3 MkvBS2a8lMGcsTCIy1gT0DzhsdJ62hPmC4WLk136M+FseIn7kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD3MSwkl8EljxcGA78sTg77wlv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvMmE4M2E5MjMtZDUzMy0z NjUzLTg1NmQtNmUyYWFlYjg4ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj4MAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwZiL83PbWsdd6J3U9JpaU7bi8dkMDt7GEcJcQR5+x7iBxe0Uvg7+kh Qt8b9AWdb8CUqXV7RCiS3GOP8i2q/J5F1Qqfx9jIaCa8qJYGG+i93ps6eHSktR5N nFMnlQrIIJ4dqRQsfIaQtxXJTZDv1drPjKG8+43R1zjtO1xRcKB3BsHT7fdbWTv+ vi/pV2fhKg9pgBw7rtgFmia/C9ihE4ydAu9qmOzARTGAwWjKtDY8jTjcA36JYp4w hE4GAwA5hwSTLRwKpfFZrbzk2rHCOqTzcp1Xba5EsE2Hj/XMQDGjhqwNeFxJYWbS bwNYwPmRkPZXM4ylM6QtevWcI0C6dd8= -----END CERTIFICATE-----Generated at Sun Nov 24 14:56:57 2024 by rpki-client on console-fra.rpki-client.org