$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa File: fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa (raw, json) Hash identifier: 3lmYoes555cwP6JPoBLKqLk2YjXBWav0MlF+yH1KYJQ= Subject key identifier: 87:A9:08:24:10:6F:96:FE:3A:FC:CB:CC:4C:84:EA:B4:30:37:9B:C6 Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F43285847B5314985316AF3E235497480 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 209 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:49:85:31:6a:f3:e2:35:49:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=4f0d896a-bd3c-4ced-914a-7d040d04d9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:da:85:12:e4:9b:5c:18:b2:66:13:32:ab: a3:de:df:f9:e9:34:67:99:fa:bf:5a:b5:05:32:d2: 75:e2:68:61:a2:8e:f9:d9:75:de:b2:4e:fd:18:ab: ca:84:fb:46:e9:cf:74:e9:94:0a:fb:09:4e:f4:f1: e0:49:3f:11:99:a2:41:0b:93:b8:4a:a2:c6:49:02: 3b:a3:ad:3e:af:20:4b:cc:41:09:d6:f3:f3:a4:a0: e5:aa:0e:ab:50:92:6d:6f:a4:99:9b:16:b1:20:00: 8d:09:42:07:e3:c8:4a:98:30:c2:fa:f4:19:c1:7d: 07:e4:cb:da:b1:e5:cd:d6:b0:23:8a:63:3c:f1:7f: 08:c9:69:fa:d5:ea:ac:e7:85:b7:8e:4b:8a:fd:9b: a3:dc:ad:23:09:3a:5c:bc:67:a7:2b:e6:67:62:b7: 32:a4:cc:b5:3c:14:f8:40:38:f3:6d:eb:77:33:8a: ce:34:54:ec:cb:2e:c7:97:c1:1b:ef:d1:6b:87:7e: f1:f3:ce:3b:f1:2d:1e:10:f1:7f:50:15:51:25:d1: 05:46:ac:3d:e3:ef:88:2b:02:2e:00:fb:2f:b1:82: bf:ee:8d:a3:2d:41:3e:b7:fa:f9:c4:a8:03:3b:e3: 0a:d6:3e:d8:99:12:a9:31:5c:39:61:bf:27:a8:22: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A9:08:24:10:6F:96:FE:3A:FC:CB:CC:4C:84:EA:B4:30:37:9B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e3:ca:07:db:d4:3c:8b:1f:23:a8:54:53:70:32:93:54:6e: b5:d2:a6:0f:92:3f:a4:59:26:bc:ed:3f:74:5e:46:18:34:ef: 3a:05:e9:45:b7:e0:ba:76:a8:47:da:c8:b1:af:7d:2d:e9:10: 8b:25:1c:6c:b1:fb:0f:66:69:b9:8e:84:f0:dd:8e:12:a2:3b: 7c:79:ca:72:34:6e:7c:33:a2:39:67:f2:17:96:97:30:5f:bb: fc:8f:1d:56:93:3b:bf:eb:89:b9:ee:87:84:35:1b:d0:f1:fa: bb:78:b0:3c:e2:1d:ea:60:38:76:06:99:8b:86:8a:0e:ba:6e: ac:e1:96:54:3d:9b:9e:48:5b:3c:ac:b9:a8:8f:80:fb:dd:86: 1f:6c:89:d4:ef:2c:dc:34:a7:90:88:fc:82:cb:50:6b:3f:f7: 6c:dc:e9:31:51:37:c6:aa:05:45:31:c7:6b:2b:67:f3:0b:38: 50:64:69:66:3f:c5:06:d4:a5:fd:e2:5a:f0:b4:9f:90:6f:c5: f9:1c:7c:a7:34:43:cd:0a:c6:4d:2b:b8:ba:5c:a5:55:9d:28: 4e:f9:e2:19:d8:f4:f8:cd:ae:ec:60:6f:53:b2:ea:9e:02:73: 5e:cf:a8:55:63:e2:13:ac:4e:dc:02:f2:2b:72:0b:c7:63:f0: da:33:d9:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MUmFMWrz4jVJdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk NGYwZDg5NmEtYmQzYy00Y2VkLTkxNGEtN2QwNDBkMDRkOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7PahRLkm1wYsmYTMquj3t/56TRnmfq/WrUF MtJ14mhhoo752XXesk79GKvKhPtG6c906ZQK+wlO9PHgST8RmaJBC5O4SqLGSQI7 o60+ryBLzEEJ1vPzpKDlqg6rUJJtb6SZmxaxIACNCUIH48hKmDDC+vQZwX0H5Mva seXN1rAjimM88X8IyWn61eqs54W3jkuK/Zuj3K0jCTpcvGenK+ZnYrcypMy1PBT4 QDjzbet3M4rONFTsyy7Hl8Eb79Frh37x88478S0eEPF/UBVRJdEFRqw94++IKwIu APsvsYK/7o2jLUE+t/r5xKgDO+MK1j7YmRKpMVw5Yb8nqCLBbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIepCCQQb5b+OvzLzEyE6rQwN5vGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvZmJiYTBhN2YtYjhlZi0z YWY0LWI5NjAtMTNmNzEwY2M1OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzjygfb1DyLHyOoVFNwMpNUbrXSpg+SP6RZJrztP3ReRhg07zoF6UW3 4Lp2qEfayLGvfS3pEIslHGyx+w9mabmOhPDdjhKiO3x5ynI0bnwzojln8heWlzBf u/yPHVaTO7/ribnuh4Q1G9Dx+rt4sDziHepgOHYGmYuGig66bqzhllQ9m55IWzys uaiPgPvdhh9sidTvLNw0p5CI/ILLUGs/92zc6TFRN8aqBUUxx2srZ/MLOFBkaWY/ xQbUpf3iWvC0n5BvxfkcfKc0Q80Kxk0ruLpcpVWdKE754hnY9PjNruxgb1Oy6p4C c17PqFVj4hOsTtwC8ityC8dj8Noz2Uo= -----END CERTIFICATE-----Generated at Fri Nov 22 02:00:32 2024 by rpki-client on console-ams.rpki-client.org