$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa File: aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa (raw, json) Hash identifier: EgIfQmyahaCvYxmeZB48ceH/9GgKlC+K1lVHhJssZrA= Subject key identifier: FA:54:F9:BE:15:91:22:AD:E1:73:B3:78:2D:BF:28:14:2D:54:4B:67 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475910C61FD0461D4511ED5280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 40816 IP address blocks: 165.254.137.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:c6:1f:d0:46:1d:45:11:ed:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=d576bfa4-9cb4-4416-ae76-38dc660b453c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:ac:7e:aa:35:58:59:af:c8:0d:67:93:a5: ef:58:74:95:6a:03:a9:e9:d8:9f:5e:72:98:03:57: 67:8b:d9:38:2e:e1:f5:ff:a8:d3:c4:8e:e0:69:42: dd:57:d1:65:fb:d6:7c:ce:bd:80:d5:2f:06:27:10: 3d:45:cd:73:40:f6:b1:bd:2a:9c:35:13:77:52:40: 55:f6:d9:45:28:e3:2d:88:45:62:7e:cd:a8:89:8a: f9:4f:f3:6e:58:fc:ac:bc:7b:2b:ed:4f:68:db:d2: 51:7d:e9:93:35:a2:b7:01:10:21:4b:fa:ef:13:00: 28:07:55:5a:e0:cf:c4:2e:f5:88:d2:53:ab:4d:aa: 0d:34:c5:05:87:73:32:3e:a0:92:a4:a9:9d:7a:11: ff:d9:e1:54:16:19:c3:cf:4b:70:5a:02:b8:d0:59: e3:12:80:59:de:10:80:1c:a1:61:30:a4:88:8d:ed: a7:34:2b:10:03:b1:d1:58:0f:37:19:b7:5a:3d:fb: fb:fb:60:65:9e:14:f3:57:ca:f7:a6:b6:be:03:c3: b4:c5:8d:b0:7a:47:a3:6a:12:b3:5b:e2:85:c5:84: 8b:65:42:65:09:b7:1b:bf:93:db:fb:32:7c:17:62: c1:ae:8a:59:1d:24:e4:62:3a:ed:f6:b1:52:6c:a5: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:F9:BE:15:91:22:AD:E1:73:B3:78:2D:BF:28:14:2D:54:4B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.137.0/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:db:c2:f0:de:4b:26:03:97:0d:d7:05:59:9c:fc:1d:85:22: 8a:cf:4c:31:38:41:55:07:2d:74:ae:7e:ad:80:1d:98:38:51: 16:c6:e6:95:3a:d0:68:0d:cf:17:f2:82:69:07:14:57:a8:46: 19:c6:bf:ad:ea:d7:58:9b:63:bb:f6:01:90:17:ca:64:8f:1d: 93:ba:93:d0:81:4b:e0:cf:de:a6:74:b4:60:a8:3c:1f:05:6d: fb:7a:45:06:52:04:32:92:e9:42:d7:2f:4c:a6:98:e0:e5:b4: 13:8b:21:41:54:d1:85:19:0c:47:82:11:8a:97:cd:95:4a:16: 47:65:2c:3c:4b:9c:34:c1:d5:47:f3:a1:38:9c:be:54:aa:93: 96:f9:1d:42:e6:ac:97:87:fa:24:d8:31:d2:68:81:a2:61:11: d4:aa:d7:e4:6c:9b:63:12:ce:56:34:35:ed:07:d3:5c:17:56: 10:34:e6:27:2a:b8:29:3e:ec:a8:2e:0b:db:7c:e3:1b:3c:83: c6:e4:82:a2:b3:48:0f:56:f5:9e:08:22:18:ba:af:1a:10:a7: 3a:f2:8d:ae:27:cb:3d:4e:b6:72:dc:3e:b1:49:e6:b1:0c:56: 21:25:e7:44:d5:c1:86:f7:00:bb:7d:00:59:10:3a:7e:14:ae: 15:d4:21:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdZEMYf0EYdRRHtUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZDU3NmJmYTQtOWNiNC00NDE2LWFlNzYtMzhkYzY2MGI0NTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqasfqo1WFmvyA1nk6XvWHSVagOp6difXnKY A1dni9k4LuH1/6jTxI7gaULdV9Fl+9Z8zr2A1S8GJxA9Rc1zQPaxvSqcNRN3UkBV 9tlFKOMtiEVifs2oiYr5T/NuWPysvHsr7U9o29JRfemTNaK3ARAhS/rvEwAoB1Va 4M/ELvWI0lOrTaoNNMUFh3MyPqCSpKmdehH/2eFUFhnDz0twWgK40FnjEoBZ3hCA HKFhMKSIje2nNCsQA7HRWA83GbdaPfv7+2BlnhTzV8r3pra+A8O0xY2wekejahKz W+KFxYSLZUJlCbcbv5Pb+zJ8F2LBropZHSTkYjrt9rFSbKWmDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPpU+b4VkSKt4XOzeC2/KBQtVEtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWE3ZjM3MTMtYzgxMC0z MWMxLTk0YWYtNzNhYTRiYjBmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf6JADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA428Lw3ksmA5cN1wVZnPwdhSKKz0wxOEFVBy10rn6tgB2YOFEWxuaV OtBoDc8X8oJpBxRXqEYZxr+t6tdYm2O79gGQF8pkjx2TupPQgUvgz96mdLRgqDwf BW37ekUGUgQykulC1y9Mppjg5bQTiyFBVNGFGQxHghGKl82VShZHZSw8S5w0wdVH 86E4nL5UqpOW+R1C5qyXh/ok2DHSaIGiYRHUqtfkbJtjEs5WNDXtB9NcF1YQNOYn KrgpPuyoLgvbfOMbPIPG5IKis0gPVvWeCCIYuq8aEKc68o2uJ8s9TrZy3D6xSeax DFYhJedE1cGG9wC7fQBZEDp+FK4V1CGe -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:06 2024 by rpki-client on console-fra.rpki-client.org