$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa File: 77788e76-09b5-3ebe-82f5-4907caeab06f.roa (raw, json) Hash identifier: Xxw4mrAjxb9mVlHN+f1557DgKC3vtNfuvQRyN6sH5Wo= Subject key identifier: 06:0E:D5:6F:4B:2E:0D:76:11:56:03:29:2B:B7:AD:C2:9F:49:1F:D8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285847CA3F766609A1DACA28B08CA0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 3949 IP address blocks: 128.121.46.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:76:66:09:a1:da:ca:28:b0:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=cb127ded-76ec-4812-bad1-387a1367802b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:c2:42:91:dc:91:6b:29:48:38:2e:b6:6c: 5f:d5:14:41:db:04:ce:04:b2:bf:e1:92:df:15:c9: c8:c5:00:be:65:3c:38:ea:3f:b8:99:6a:44:95:fb: 97:66:f9:59:4f:85:4c:75:a6:5c:3d:f5:61:55:10: dc:a7:bf:ba:32:29:c5:b6:f8:7d:7c:70:91:a8:f4: 2e:19:e3:0a:82:40:ed:4f:3a:a2:4b:b3:ae:ac:91: db:16:b8:22:90:6e:19:0b:c4:f6:14:52:9b:9b:27: 0f:45:37:24:aa:c9:5f:6e:32:99:41:23:af:1c:54: 01:16:07:c9:14:77:e9:a4:cf:b1:f9:87:69:be:54: ce:43:04:c6:f9:ce:89:ab:22:11:f4:8c:27:27:bf: f3:62:bb:a6:b8:f7:ad:2f:07:a5:04:8e:06:24:b0: 7c:8c:ad:23:d9:bf:be:6f:e2:dd:13:d3:44:93:4d: df:db:77:4e:3b:e8:d9:4c:36:f7:70:ad:68:91:bc: 7d:5f:e4:e3:ea:8b:a5:89:dc:91:71:bd:1c:3d:af: 6f:64:8e:a8:ba:c7:73:dd:4b:10:67:80:d5:9f:3a: 5a:52:3f:b1:2b:ed:5f:44:94:4d:1c:2d:28:fa:e6: 4c:f7:ab:c6:9e:d4:74:50:11:f4:f5:af:16:bd:96: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0E:D5:6F:4B:2E:0D:76:11:56:03:29:2B:B7:AD:C2:9F:49:1F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.46.240/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1d:23:97:b5:8e:bf:17:5b:5f:35:1d:47:0b:da:fa:8c:8b: 2e:d9:c8:9a:23:4c:c0:b6:a9:67:28:a3:e1:60:d8:ed:1c:4e: a6:b0:a9:6c:c7:2c:ec:01:7e:e2:c5:0d:36:dc:1e:4f:69:64: 13:bb:53:10:09:c6:83:09:63:ff:e2:65:23:bc:93:7a:41:5f: 27:06:89:83:92:36:35:0c:df:f6:20:f3:fa:3b:b9:11:48:62: ac:05:0b:09:4c:92:48:e3:a4:58:3b:10:69:93:48:a8:ce:0b: 48:24:57:c5:65:61:ee:60:dd:ab:aa:d1:df:f5:53:01:a2:77: cf:f0:50:89:41:06:e5:5c:ad:8f:5f:b5:97:13:be:c0:f0:9a: 25:9a:7b:98:b0:21:c1:e2:cf:75:40:b5:a9:c1:99:fe:c9:d1: 5b:9b:bb:ab:36:af:5e:2f:d5:1e:2d:6f:39:0e:85:42:ac:6d: 3f:f8:c6:d6:df:8d:53:7a:56:1e:93:cf:3f:44:82:10:09:88: c1:73:ad:79:4e:b2:5a:3a:3b:62:50:4c:fc:1e:71:4e:29:51: 08:2c:d9:48:7f:d9:fa:50:d6:d2:36:05:a1:18:6e:25:23:9a: 36:e9:cb:ab:aa:8b:7d:c0:8d:69:92:04:38:94:b3:ce:0c:2b: 56:1c:0b:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfKP3ZmCaHayiiwjKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2IxMjdkZWQtNzZlYy00ODEyLWJhZDEtMzg3YTEzNjc4MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/DCQpHckWspSDgutmxf1RRB2wTOBLK/4ZLf FcnIxQC+ZTw46j+4mWpElfuXZvlZT4VMdaZcPfVhVRDcp7+6MinFtvh9fHCRqPQu GeMKgkDtTzqiS7OurJHbFrgikG4ZC8T2FFKbmycPRTckqslfbjKZQSOvHFQBFgfJ FHfppM+x+YdpvlTOQwTG+c6JqyIR9IwnJ7/zYrumuPetLwelBI4GJLB8jK0j2b++ b+LdE9NEk03f23dOO+jZTDb3cK1okbx9X+Tj6oulidyRcb0cPa9vZI6ousdz3UsQ Z4DVnzpaUj+xK+1fRJRNHC0o+uZM96vGntR0UBH09a8WvZa20wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAYO1W9LLg12EVYDKSu3rcKfSR/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzc3ODhlNzYtMDliNS0z ZWJlLTgyZjUtNDkwN2NhZWFiMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgHku8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOHSOXtY6/F1tfNR1HC9r6jIsu2ciaI0zAtqlnKKPhYNjtHE6msKls xyzsAX7ixQ023B5PaWQTu1MQCcaDCWP/4mUjvJN6QV8nBomDkjY1DN/2IPP6O7kR SGKsBQsJTJJI46RYOxBpk0iozgtIJFfFZWHuYN2rqtHf9VMBonfP8FCJQQblXK2P X7WXE77A8JolmnuYsCHB4s91QLWpwZn+ydFbm7urNq9eL9UeLW85DoVCrG0/+MbW 341TelYek88/RIIQCYjBc615TrJaOjtiUEz8HnFOKVEILNlIf9n6UNbSNgWhGG4l I5o26curqot9wI1pkgQ4lLPODCtWHAuF -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:03 2024 by rpki-client on console-fra.rpki-client.org