$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa File: 654db28b-a3f9-3007-ba02-58ba323c3937.roa (raw, json) Hash identifier: iLa2TBYcLqR0smmzVslM7JYKnSCfteQk8p77ZljQrCA= Subject key identifier: 11:A1:80:C5:92:F4:B9:92:85:B4:58:DD:E8:EF:75:49:16:BA:7D:4E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475EA625F076BD5D93ABDFDD00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 2914 IP address blocks: 129.250.60.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:25:f0:76:bd:5d:93:ab:df:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=e33c4b82-1160-408f-baf9-ef2102ee3e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:87:22:96:3c:2d:4e:26:da:a9:5a:71:1c: e4:20:5b:95:30:15:32:d2:19:0b:70:ff:87:e1:af: 24:ab:20:6f:3a:a1:f8:74:85:0f:f7:b8:cf:f0:4c: db:eb:ec:be:12:ed:25:5c:b4:d7:98:93:bd:f0:45: 42:22:fa:d4:6a:6c:8d:56:38:61:2d:2d:f2:a9:82: 7c:80:6c:49:e4:66:25:c4:61:1f:4c:0b:f7:88:dc: 1c:22:eb:a0:0d:c8:dc:cf:90:c3:03:e5:54:1d:96: 02:b8:81:de:cf:2c:fe:2a:04:b3:cd:4b:55:81:34: 81:f9:93:57:34:6f:76:7b:31:8b:18:2b:06:b0:64: 68:4f:ed:fe:08:44:09:ec:d8:4a:22:d0:49:ba:2b: 91:87:62:4a:b1:a8:52:21:9d:2c:82:64:af:e8:36: 3d:38:34:03:2b:67:71:4f:3e:bb:78:49:9b:ff:57: ae:33:4f:28:34:9b:fb:d8:d7:f7:4b:61:48:79:ac: cf:cb:14:62:33:11:c9:6a:2a:09:2b:6b:82:c7:c5: 67:9c:00:67:73:60:c7:c3:1f:5a:fe:f9:97:cb:7d: 4b:2e:c6:e0:b1:3a:ea:4f:92:c8:66:f0:4b:6d:89: 41:e7:7b:60:0d:d2:15:ab:42:de:95:6c:34:6e:db: 36:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:80:C5:92:F4:B9:92:85:B4:58:DD:E8:EF:75:49:16:BA:7D:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a9:46:8b:9c:f1:0b:fc:6f:4d:ba:b4:da:a4:9e:40:3b:02: a6:f7:40:7e:40:b0:ae:ad:91:58:4b:c0:9e:3b:28:6a:13:5d: 5e:83:9a:97:10:2b:6a:aa:ec:6e:5e:2e:4b:6a:bd:00:71:5c: 57:82:55:b6:59:88:1d:e5:51:a8:2c:a5:e5:29:44:39:0b:df: cc:b9:40:69:14:57:84:bc:1f:26:45:48:44:56:0c:c8:33:86: 40:84:cc:48:0a:24:74:6f:71:2e:7a:8b:d2:a5:e5:24:3e:02: f9:74:c4:68:4c:b4:21:6a:ba:0d:31:78:f5:89:c6:c1:ea:8a: 63:cc:78:f7:02:7a:0b:8f:e1:44:2a:f3:05:fb:59:e2:12:19: bc:f2:3d:a5:17:90:03:fc:ff:3f:04:80:27:b5:50:d5:d4:fb: 38:84:75:41:3f:32:8f:8e:73:d9:87:d1:9c:69:5b:11:ad:54: 9a:25:a6:15:96:82:e4:9b:04:27:dd:b3:66:1e:9a:2e:29:e8: 64:8a:fa:3a:47:38:d1:86:fe:9d:81:60:4b:58:61:51:d2:a5: 9f:13:88:f0:7b:77:ac:f0:fd:cd:d8:97:b6:80:ce:28:14:2b: fc:31:e2:36:bb:e8:8e:a2:d6:5b:27:c7:7a:0a:72:eb:9f:b1: e6:f0:7f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepiXwdr1dk6vf3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk ZTMzYzRiODItMTE2MC00MDhmLWJhZjktZWYyMTAyZWUzZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeWHIpY8LU4m2qlacRzkIFuVMBUy0hkLcP+H 4a8kqyBvOqH4dIUP97jP8Ezb6+y+Eu0lXLTXmJO98EVCIvrUamyNVjhhLS3yqYJ8 gGxJ5GYlxGEfTAv3iNwcIuugDcjcz5DDA+VUHZYCuIHezyz+KgSzzUtVgTSB+ZNX NG92ezGLGCsGsGRoT+3+CEQJ7NhKItBJuiuRh2JKsahSIZ0sgmSv6DY9ODQDK2dx Tz67eEmb/1euM08oNJv72Nf3S2FIeazPyxRiMxHJaioJK2uCx8VnnABnc2DHwx9a /vmXy31LLsbgsTrqT5LIZvBLbYlB53tgDdIVq0LelWw0bts24QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGhgMWS9LmShbRY3ejvdUkWun1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjU0ZGIyOGItYTNmOS0z MDA3LWJhMDItNThiYTMyM2MzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADepRouc8Qv8b026tNqknkA7Aqb3QH5AsK6tkVhLwJ47KGoTXV6DmpcQ K2qq7G5eLktqvQBxXFeCVbZZiB3lUagspeUpRDkL38y5QGkUV4S8HyZFSERWDMgz hkCEzEgKJHRvcS56i9Kl5SQ+Avl0xGhMtCFqug0xePWJxsHqimPMePcCeguP4UQq 8wX7WeISGbzyPaUXkAP8/z8EgCe1UNXU+ziEdUE/Mo+Oc9mH0ZxpWxGtVJolphWW guSbBCfds2Yemi4p6GSK+jpHONGG/p2BYEtYYVHSpZ8TiPB7d6zw/c3Yl7aAzigU K/wx4ja76I6i1lsnx3oKcuufsebwf1s= -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:02 2024 by rpki-client on console-fra.rpki-client.org