$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa File: 3d2d6c3e-ed41-3d11-975b-494ee976312d.roa (raw, json) Hash identifier: Y1kNgO4N0TIP1sneW+dn2FQuqjHxF2jpeADvV/AIWZw= Subject key identifier: FB:C6:CC:C9:02:C6:E9:20:6F:3D:4E:D7:8B:8B:45:0A:0B:21:62:98 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858476C9DB7EC0F6072A2A686E000 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 2914 IP address blocks: 129.250.161.160/27 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b7:ec:0f:60:72:a2:a6:86:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=9aa38f39-6592-4459-9fd0-04c9c06c2978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:6a:c9:be:ec:40:1a:45:33:f8:1b:0c:37: 7d:c1:96:d0:25:8c:60:e5:e2:8b:0a:39:66:28:ac: cb:67:42:6d:96:ef:75:29:dd:82:30:8a:a0:cb:16: 94:7e:c1:af:46:bb:80:90:79:9c:96:f8:6a:a9:4c: 7d:29:df:48:dd:16:0b:df:47:fa:b3:9e:c2:d6:79: ad:23:07:4b:ae:68:e3:ca:b1:87:74:cb:5e:15:f4: 88:ed:7e:78:bf:85:9b:cd:53:65:ab:f6:47:90:e3: 75:56:24:e4:71:64:32:d2:d4:0c:9a:f9:bc:8d:22: 15:65:0a:18:b1:73:90:9e:16:dd:07:27:2a:dd:1b: b6:05:82:89:44:61:1f:b3:da:7f:1b:df:08:f3:00: 5a:13:de:dd:22:ef:5e:47:8e:25:9b:91:11:7d:ca: b5:1e:35:b9:6d:f3:51:0d:e9:3b:35:f1:6c:eb:61: 5e:2d:a7:5d:0c:c8:bb:6b:ed:e3:9c:0d:d1:b5:c5: ff:80:80:e0:d0:73:66:5d:97:8b:5e:84:15:a7:4d: 45:b9:6d:05:02:fe:78:94:8e:1a:4f:28:95:c6:70: 4c:aa:53:43:61:f8:50:9b:35:87:56:b9:77:c1:f1: 9e:a3:de:be:35:e6:ee:1e:50:31:63:b1:19:76:55: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C6:CC:C9:02:C6:E9:20:6F:3D:4E:D7:8B:8B:45:0A:0B:21:62:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:40:d2:65:d2:14:83:90:1f:e2:7b:95:3f:9c:e2:37:4c:ec: 4f:68:78:01:69:c0:67:72:14:29:e8:e4:33:c5:46:1a:63:1d: 31:9f:1d:4b:c5:ee:65:f9:76:a1:7d:0b:70:07:f8:13:0c:2c: 5c:35:83:59:a8:d3:d5:cb:d7:3c:92:ad:40:9a:d4:44:48:de: c9:bc:5e:e0:39:05:a7:73:22:15:06:bc:35:ba:34:cf:56:84: 5e:78:79:dc:35:e1:3b:b3:fb:fd:3d:4d:e7:b9:3c:0d:e0:b6: 87:36:d0:78:6a:be:20:f7:dd:85:01:d2:ef:02:c5:5f:d5:ad: 47:6e:52:5a:75:45:21:57:80:b6:21:e6:d5:a4:cf:60:19:77: 1a:40:c0:9a:0e:45:13:88:67:5f:a3:a2:a6:fa:59:04:0e:ae: 12:c8:55:3b:7b:07:ca:18:e4:1c:cb:06:e4:cd:9b:ed:c6:df: d2:c2:ca:6e:c6:f2:ad:ba:63:9a:57:84:e2:6c:ce:a3:b2:6f: dc:ba:3e:bd:d3:d4:b8:a1:f0:a1:21:48:0e:9d:1e:91:7e:d3: aa:bf:33:05:8a:2c:37:fa:4f:e0:8e:1b:06:d2:6f:5b:0a:fa: 6c:35:dc:7d:0d:77:f9:30:b9:f6:c2:6c:bf:08:4f:84:c6:30: e2:e5:ed:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdsnbfsD2ByoqaG4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWFhMzhmMzktNjU5Mi00NDU5LTlmZDAtMDRjOWMwNmMyOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIBqyb7sQBpFM/gbDDd9wZbQJYxg5eKLCjlm KKzLZ0Jtlu91Kd2CMIqgyxaUfsGvRruAkHmclvhqqUx9Kd9I3RYL30f6s57C1nmt IwdLrmjjyrGHdMteFfSI7X54v4WbzVNlq/ZHkON1ViTkcWQy0tQMmvm8jSIVZQoY sXOQnhbdBycq3Ru2BYKJRGEfs9p/G98I8wBaE97dIu9eR44lm5ERfcq1HjW5bfNR Dek7NfFs62FeLaddDMi7a+3jnA3RtcX/gIDg0HNmXZeLXoQVp01FuW0FAv54lI4a TyiVxnBMqlNDYfhQmzWHVrl3wfGeo96+NebuHlAxY7EZdlXwtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPvGzMkCxukgbz1O14uLRQoLIWKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2QyZDZjM2UtZWQ0MS0z ZDExLTk3NWItNDk0ZWU5NzYzMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfqhoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwQNJl0hSDkB/ie5U/nOI3TOxPaHgBacBnchQp6OQzxUYaYx0xnx1L xe5l+XahfQtwB/gTDCxcNYNZqNPVy9c8kq1AmtRESN7JvF7gOQWncyIVBrw1ujTP VoReeHncNeE7s/v9PU3nuTwN4LaHNtB4ar4g992FAdLvAsVf1a1HblJadUUhV4C2 IebVpM9gGXcaQMCaDkUTiGdfo6Km+lkEDq4SyFU7ewfKGOQcywbkzZvtxt/Swspu xvKtumOaV4TibM6jsm/cuj6909S4ofChIUgOnR6RftOqvzMFiiw3+k/gjhsG0m9b CvpsNdx9DXf5MLn2wmy/CE+ExjDi5e1G -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:00 2024 by rpki-client on console-fra.rpki-client.org