$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa File: 885503bb-67f7-33bb-a275-0063d04ac58e.roa (raw, json) Hash identifier: 8VDfGfbKkZ0FzhfBw+509QirzE93rzXyMUlvt4C7OBg= Subject key identifier: AF:F1:9D:FD:B9:4B:03:77:3A:6D:84:A2:A3:BF:1C:CD:E6:79:5E:14 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475EA625DFA6836D9944D76600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 2914 IP address blocks: 129.250.53.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:25:df:a6:83:6d:99:44:d7:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=037edd78-f09f-4fd1-8e2a-f1d6563421f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:da:ed:ea:6d:a6:fa:ba:bb:ca:4f:46:45: 68:c8:b6:2f:91:da:82:b2:e7:80:71:d2:80:08:15: 27:9e:e2:cf:c3:c0:d5:d9:59:d7:04:22:9d:af:c8: 5b:ee:6d:ab:34:d2:69:44:d9:80:c1:22:37:df:8c: b5:cb:57:b1:aa:5f:69:f2:33:f4:02:64:b3:25:b4: f0:c4:b9:62:91:63:14:08:bc:82:f6:15:56:d8:49: 86:fc:88:10:ac:6d:aa:66:42:bf:2f:c1:d4:b3:4b: 25:4a:65:31:47:eb:f0:eb:ea:83:d0:d7:de:b0:1e: e3:38:e6:f5:6a:39:91:3a:e1:84:9d:5c:19:45:bb: 10:0f:25:34:60:a7:e4:81:5c:8c:e5:38:a4:86:83: 56:41:f9:81:cd:30:c7:b1:72:f9:f5:cc:f8:d4:77: bb:df:66:03:ba:f3:ca:8c:a5:d1:d8:ab:da:61:45: 3c:f9:5a:a0:0a:e5:42:d4:ff:46:0f:89:2b:28:a1: 87:cd:61:90:a8:e7:b2:a6:88:98:e3:94:06:78:fc: c6:70:c6:be:e2:73:00:cf:2d:04:03:37:dc:23:21: 52:49:cf:40:17:ba:73:4b:0a:a7:5a:9b:62:54:25: df:9a:a9:83:b7:e8:1e:e4:46:00:e3:dc:af:7a:ee: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F1:9D:FD:B9:4B:03:77:3A:6D:84:A2:A3:BF:1C:CD:E6:79:5E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:16:7a:b4:d1:31:f0:a5:e4:19:42:2d:1f:ff:4e:17:68:4a: 63:3a:67:17:22:29:74:e1:72:b7:c3:67:18:91:7c:dc:d2:55: 50:6a:54:11:37:f7:4e:02:f6:e1:0f:d0:18:98:7f:fb:6c:83: 02:a8:1d:dd:93:48:9e:35:a8:6c:2a:7c:6c:39:21:00:b2:48: 15:3d:b2:cb:c2:d1:82:63:79:b6:6f:ce:57:e1:fe:06:41:6a: 06:47:23:1b:ce:b6:8f:84:3e:0b:51:46:31:03:73:c2:0d:cd: e3:db:02:6c:4e:60:e1:2b:1b:18:46:4d:0c:75:ba:61:49:50: 12:2a:99:af:7e:04:92:99:21:6e:20:57:bc:6f:28:96:83:02: 22:ae:2f:d6:35:2e:29:4d:bf:19:78:64:03:3a:a8:b0:b3:b0: 80:00:e2:25:4f:3e:8a:e2:c6:19:4e:dc:56:49:f8:ed:0c:43: 07:df:1e:72:d2:2b:dd:53:81:75:1e:92:bf:ce:c9:6c:fc:52: b7:8a:6a:ce:68:98:88:87:7b:3a:06:24:59:ef:dc:f9:2a:13: c9:8f:60:87:a5:d2:c8:93:7b:4e:15:f1:e2:ee:5e:d9:78:e9: 72:14:84:1f:1b:10:ce:44:5c:7e:02:f3:ae:f5:8f:c4:02:56: e0:1d:63:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdepiXfpoNtmUTXZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk MDM3ZWRkNzgtZjA5Zi00ZmQxLThlMmEtZjFkNjU2MzQyMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdPa7eptpvq6u8pPRkVoyLYvkdqCsueAcdKA CBUnnuLPw8DV2VnXBCKdr8hb7m2rNNJpRNmAwSI334y1y1exql9p8jP0AmSzJbTw xLlikWMUCLyC9hVW2EmG/IgQrG2qZkK/L8HUs0slSmUxR+vw6+qD0NfesB7jOOb1 ajmROuGEnVwZRbsQDyU0YKfkgVyM5TikhoNWQfmBzTDHsXL59cz41He732YDuvPK jKXR2KvaYUU8+VqgCuVC1P9GD4krKKGHzWGQqOeypoiY45QGePzGcMa+4nMAzy0E AzfcIyFSSc9AF7pzSwqnWptiVCXfmqmDt+ge5EYA49yveu5W8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/xnf25SwN3Om2EoqO/HM3meV4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODg1NTAzYmItNjdmNy0z M2JiLWEyNzUtMDA2M2QwNGFjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfo1ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZFnq00THwpeQZQi0f/04XaEpjOmcXIil04XK3w2cYkXzc0lVQalQR N/dOAvbhD9AYmH/7bIMCqB3dk0ieNahsKnxsOSEAskgVPbLLwtGCY3m2b85X4f4G QWoGRyMbzraPhD4LUUYxA3PCDc3j2wJsTmDhKxsYRk0MdbphSVASKpmvfgSSmSFu IFe8byiWgwIiri/WNS4pTb8ZeGQDOqiws7CAAOIlTz6K4sYZTtxWSfjtDEMH3x5y 0ivdU4F1HpK/zsls/FK3imrOaJiIh3s6BiRZ79z5KhPJj2CHpdLIk3tOFfHi7l7Z eOlyFIQfGxDORFx+AvOu9Y/EAlbgHWP/ -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:14 2024 by rpki-client on console-ams.rpki-client.org