$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b2f9e232-73e3-3754-8f45-d83d03e26364.roa File: b2f9e232-73e3-3754-8f45-d83d03e26364.roa (raw, json) Hash identifier: SRZHIBA1Lgq+K7qCef0rQgLH5FpVtqGtyF60A5Y6CGk= Subject key identifier: 5C:32:3A:75:CE:0B:2F:7D:C0:9E:4A:66:C1:5B:73:96:70:85:8C:B2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475EA62F83D8807A3F316BF500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b2f9e232-73e3-3754-8f45-d83d03e26364.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 20940 IP address blocks: 165.254.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:2f:83:d8:80:7a:3f:31:6b:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=c00dd381-ec4e-4ea4-8b36-7fa6364ddddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:78:c3:48:1e:b2:b3:65:18:e7:28:7e:39: 63:8b:a3:83:02:74:de:4f:8d:c5:d1:36:17:e3:29: 7a:36:18:a5:f5:c9:27:e4:71:b5:ed:a6:44:11:6e: 22:bd:7d:89:46:f5:bf:e2:2f:59:b4:8b:6a:91:4d: 7e:c0:59:4c:c8:a8:9a:d5:cb:3b:44:20:35:06:bd: 43:ca:12:8a:8c:7d:82:06:52:66:56:5e:fe:52:5a: 6e:61:c7:69:bc:f8:53:8e:6a:1d:21:31:11:5c:51: 70:22:3b:48:4a:d0:09:da:7f:68:60:a0:b5:9a:01: 95:99:39:d1:f2:3f:28:3d:78:db:89:81:e3:bf:e3: be:56:b1:5e:5c:fe:d7:54:80:d7:51:c4:9b:0f:0d: 86:18:9a:18:a1:f3:12:00:a2:15:8b:12:83:7b:9a: 78:40:10:b9:05:a9:42:aa:f9:ba:5e:99:52:03:6e: 08:20:77:2a:82:b8:02:90:18:6c:3b:48:38:3e:4a: 9c:fd:e4:bd:d2:d5:d7:7d:9c:1c:fa:e6:af:2c:2d: 0e:c8:4e:61:24:a2:99:c7:d9:6b:69:2c:73:28:db: 25:85:f5:27:db:0d:a5:99:80:08:ad:40:f5:2f:ad: dd:35:e4:98:a2:5d:c3:6f:78:bf:a7:61:4e:f7:6a: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:3A:75:CE:0B:2F:7D:C0:9E:4A:66:C1:5B:73:96:70:85:8C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b2f9e232-73e3-3754-8f45-d83d03e26364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:26:19:34:81:fc:0d:0a:32:94:57:ff:b8:81:08:2a:e0:9c: 95:0a:13:a1:10:e8:e8:9b:8b:8d:0c:6b:f5:0b:dd:a8:53:7e: 97:70:83:ab:41:e8:50:2d:4a:1d:42:fe:98:1a:73:c5:d0:07: c2:87:f2:7a:7d:ec:e3:70:cb:a9:3e:66:5c:26:fc:19:2d:d2: 47:12:ce:48:a0:94:f7:e1:4a:b8:fd:1d:18:74:64:4a:4a:e9: 4a:03:48:fa:92:ea:28:a3:de:b9:94:37:aa:83:ce:c0:fd:b0: 22:02:df:dd:f5:1f:65:50:6f:50:f4:fb:99:89:b8:3b:87:37: 10:0d:62:3e:a8:03:18:12:8f:f2:91:8d:b0:d1:a2:87:6b:76: cc:15:55:39:7a:e9:b0:3b:c9:15:66:d0:28:3e:9d:54:66:d2: f0:e1:b9:63:90:0e:46:fd:b6:6d:32:db:3b:4d:18:b0:67:94: 37:d1:71:c0:5b:6d:1a:c6:72:f1:58:97:d1:58:3a:c2:ca:7d: f1:c1:8d:32:ac:00:eb:d5:1a:c3:27:b1:c2:53:73:5a:77:47: 52:78:45:36:cd:61:3f:3f:3f:19:3b:dd:d0:85:fe:ae:47:83: 63:14:3d:e9:99:0c:4f:8a:af:10:6a:54:35:eb:5f:b2:6d:0f: 0d:f9:75:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepi+D2IB6PzFr9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk YzAwZGQzODEtZWM0ZS00ZWE0LThiMzYtN2ZhNjM2NGRkZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WJ4w0gesrNlGOcofjlji6ODAnTeT43F0TYX 4yl6Nhil9ckn5HG17aZEEW4ivX2JRvW/4i9ZtItqkU1+wFlMyKia1cs7RCA1Br1D yhKKjH2CBlJmVl7+UlpuYcdpvPhTjmodITERXFFwIjtIStAJ2n9oYKC1mgGVmTnR 8j8oPXjbiYHjv+O+VrFeXP7XVIDXUcSbDw2GGJoYofMSAKIVixKDe5p4QBC5BalC qvm6XplSA24IIHcqgrgCkBhsO0g4Pkqc/eS90tXXfZwc+uavLC0OyE5hJKKZx9lr aSxzKNslhfUn2w2lmYAIrUD1L63dNeSYol3Db3i/p2FO92rVnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwyOnXOCy99wJ5KZsFbc5ZwhYyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjJmOWUyMzItNzNlMy0z NzU0LThmNDUtZDgzZDAzZTI2MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACImGTSB/A0KMpRX/7iBCCrgnJUKE6EQ6Oibi40Ma/UL3ahTfpdwg6tB 6FAtSh1C/pgac8XQB8KH8np97ONwy6k+Zlwm/Bkt0kcSzkiglPfhSrj9HRh0ZEpK 6UoDSPqS6iij3rmUN6qDzsD9sCIC3931H2VQb1D0+5mJuDuHNxANYj6oAxgSj/KR jbDRoodrdswVVTl66bA7yRVm0Cg+nVRm0vDhuWOQDkb9tm0y2ztNGLBnlDfRccBb bRrGcvFYl9FYOsLKffHBjTKsAOvVGsMnscJTc1p3R1J4RTbNYT8/Pxk73dCF/q5H g2MUPemZDE+KrxBqVDXrX7JtDw35dQ4= -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:16 2024 by rpki-client on console-ams.rpki-client.org