$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa File: 3cc38345-6550-34c7-91a9-c41099c6e187.roa (raw, json) Hash identifier: kWcd7hghMppkSVbYpxmUkzoRFjx56oqLOR/KmG5ZWZo= Subject key identifier: 1D:90:2B:21:AC:0F:93:3F:C9:F6:C3:96:45:2C:BC:9B:96:C5:EF:94 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475910CD86FB820CACC89F2300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 1225 IP address blocks: 129.250.35.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:cd:86:fb:82:0c:ac:c8:9f:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=59240616-0220-4daf-bb04-58534457eb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:9c:8f:06:30:4e:d1:5d:9e:bb:4c:10:76: ef:3a:1e:49:42:2d:f5:95:75:b1:49:0c:df:12:ea: db:8a:9a:79:7d:09:f7:40:40:42:1d:e2:15:b3:e7: 3d:ca:38:20:b1:35:4f:f5:c9:1b:06:de:7d:69:b3: 2a:74:8f:00:5e:1b:cb:df:94:6e:fc:9c:a7:e9:87: af:35:fd:44:54:c6:c1:c8:b6:76:8b:52:d3:a4:e0: 3a:d4:22:d9:50:3d:8f:0a:34:b6:a9:c6:7e:88:05: 9d:59:77:67:c2:a2:d8:23:8d:2d:ca:b4:e8:2e:1b: b5:55:11:35:50:0d:cc:db:41:64:a1:01:f1:2a:4c: 92:9d:47:94:f2:10:08:61:9c:32:0e:46:2a:2d:66: d4:6c:80:60:40:89:94:09:a7:26:c8:c0:a9:32:34: 61:ec:67:9b:04:18:ed:82:a1:55:f7:c5:ff:ef:63: a8:56:cc:2f:98:0f:d9:54:64:7d:d9:66:2b:58:26: cf:1c:e6:17:42:8f:16:c9:56:7b:65:5c:10:2a:38: 5b:37:57:14:7d:c0:b4:66:25:b1:4c:9f:df:e4:1d: 3d:50:e1:aa:29:4c:48:46:a2:e0:7a:16:f0:9e:5f: 08:44:9e:6f:77:2c:7c:6f:58:e9:1e:4c:eb:f4:3c: 4b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:90:2B:21:AC:0F:93:3F:C9:F6:C3:96:45:2C:BC:9B:96:C5:EF:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:52:27:aa:85:b1:2d:41:2b:be:71:00:ed:48:43:e2:b6:8a: e4:16:3f:06:0f:02:f6:77:88:92:b4:9a:e0:d2:51:9d:0c:ac: 04:38:3b:a5:40:2c:9c:62:37:c6:7c:6d:07:49:b0:63:ed:a4: f4:33:10:d0:11:33:d7:82:7f:e3:76:b9:28:4d:2f:04:23:1a: 03:23:9a:3b:f9:2f:10:38:c4:b1:36:58:06:a5:fa:fe:6a:23: c4:12:eb:e7:98:d7:cc:7b:b0:e7:f6:41:16:59:8f:4c:1b:1d: 3a:30:ac:39:82:b9:b9:2e:42:30:36:dc:28:b2:d9:fb:17:7d: 34:f9:15:7a:7c:54:88:1f:bd:76:f0:c4:04:51:bd:fe:b9:56: 1c:25:e1:7f:a3:6e:9d:d1:7e:84:85:89:13:58:fa:33:4f:25: 26:0d:b0:77:d9:1a:1e:1e:48:92:d9:51:52:14:ce:a7:f4:21: c1:68:dc:02:0a:6f:04:a7:22:38:b2:cb:34:86:af:a3:86:56: 68:f8:fd:c1:4e:74:6e:d2:30:1a:b5:96:1f:ce:9f:a7:b3:dd: 77:3a:9a:1c:cd:f0:0f:75:a9:df:83:43:17:1f:fe:81:15:0c: 8f:fa:cf:fb:44:b9:94:33:78:e9:34:85:b4:fe:0a:78:b1:e7: a6:76:cd:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdZEM2G+4IMrMifIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk NTkyNDA2MTYtMDIyMC00ZGFmLWJiMDQtNTg1MzQ0NTdlYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirecjwYwTtFdnrtMEHbvOh5JQi31lXWxSQzf Eurbipp5fQn3QEBCHeIVs+c9yjggsTVP9ckbBt59abMqdI8AXhvL35Ru/Jyn6Yev Nf1EVMbByLZ2i1LTpOA61CLZUD2PCjS2qcZ+iAWdWXdnwqLYI40tyrToLhu1VRE1 UA3M20FkoQHxKkySnUeU8hAIYZwyDkYqLWbUbIBgQImUCacmyMCpMjRh7GebBBjt gqFV98X/72OoVswvmA/ZVGR92WYrWCbPHOYXQo8WyVZ7ZVwQKjhbN1cUfcC0ZiWx TJ/f5B09UOGqKUxIRqLgehbwnl8IRJ5vdyx8b1jpHkzr9DxLawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB2QKyGsD5M/yfbDlkUsvJuWxe+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2NjMzgzNDUtNjU1MC0z NGM3LTkxYTktYzQxMDk5YzZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvUieqhbEtQSu+cQDtSEPitorkFj8GDwL2d4iStJrg0lGdDKwEODul QCycYjfGfG0HSbBj7aT0MxDQETPXgn/jdrkoTS8EIxoDI5o7+S8QOMSxNlgGpfr+ aiPEEuvnmNfMe7Dn9kEWWY9MGx06MKw5grm5LkIwNtwostn7F300+RV6fFSIH712 8MQEUb3+uVYcJeF/o26d0X6EhYkTWPozTyUmDbB32RoeHkiS2VFSFM6n9CHBaNwC Cm8EpyI4sss0hq+jhlZo+P3BTnRu0jAatZYfzp+ns913OpoczfAPdanfg0MXH/6B FQyP+s/7RLmUM3jpNIW0/gp4seemds0n -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:10 2024 by rpki-client on console-ams.rpki-client.org