$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa File: d04651b9-e83b-3291-aafb-6299b726c5b4.roa (raw, json) Hash identifier: 0dvCORw/xrw+lDyFGkN+RDPQqH9mEvsm0en5EpndkhE= Subject key identifier: EF:40:4E:0C:9C:4D:8B:16:6C:34:E7:26:F9:EA:A6:AC:2A:2A:0C:42 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475910CDFF5B2CE13ECF416C00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 1225 IP address blocks: 165.254.21.120/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:cd:ff:5b:2c:e1:3e:cf:41:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=1a6eac05-7a78-425a-8f94-d2d8904c97e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:34:48:71:00:d7:3f:a8:ca:0c:be:04:c1: f2:07:86:b2:db:73:23:e0:aa:af:ec:4f:1f:6b:8d: 25:88:4d:89:c8:80:a8:ab:ab:3f:93:f9:a4:fd:1e: 3a:5d:c4:84:eb:64:93:35:d5:ef:3c:a8:8d:2c:4f: b1:4d:a7:0c:a4:a8:02:a9:d3:ad:c6:7a:e2:74:0c: b0:a4:c2:8e:12:cc:79:6e:69:8d:a7:e7:d0:4a:e4: 90:a8:c9:6e:02:cc:34:a7:70:5c:c5:2d:a6:84:3e: 70:08:23:b7:96:e6:b4:90:ce:d2:c3:92:d8:09:3c: d1:85:07:27:c4:7b:cf:5c:ab:86:30:a4:96:7e:ff: 9e:b9:4a:33:ac:4b:a2:07:da:31:e6:be:fb:7d:cd: a3:e2:7f:7a:90:99:b2:08:3e:a9:b1:40:10:4f:c8: 7f:bd:f9:dd:16:bd:8a:9e:97:ef:bf:ab:84:a0:d9: bd:98:b0:9d:47:5f:75:e2:32:34:26:9e:b1:34:d9: 93:c4:9c:94:c6:4c:65:8f:b6:ed:b4:de:da:bc:b6: 5f:fc:8b:15:9f:98:4b:22:9c:99:a7:c0:64:ee:8e: cb:c2:85:f4:00:90:90:0a:b7:d6:82:64:0e:40:c3: f6:41:a7:84:47:1c:d9:4c:c5:b1:5f:07:e8:2b:b5: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:40:4E:0C:9C:4D:8B:16:6C:34:E7:26:F9:EA:A6:AC:2A:2A:0C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d04651b9-e83b-3291-aafb-6299b726c5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.21.120/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:0e:27:c2:1b:83:8c:9f:89:5d:2c:df:46:15:e5:0c:03:cc: fc:91:b3:e9:b3:15:a7:e3:ba:69:07:c9:58:58:99:5b:01:37: 35:b0:08:fb:b2:51:01:7d:a3:fd:88:be:4d:29:64:6a:b8:d1: 46:63:b6:c2:10:0e:b0:29:2a:ba:5a:e0:d9:38:9f:7a:2c:06: a3:d1:28:62:34:57:1b:5d:44:95:94:31:fa:89:4d:12:f4:5e: 6c:6f:ba:a0:a3:21:a8:22:a2:61:db:b0:7b:4c:18:84:8f:43: 88:ba:00:89:5b:42:10:54:6c:57:57:ae:67:30:a5:2f:f6:6b: 69:23:ae:17:2c:54:d1:98:82:8e:01:91:e8:43:dc:dc:73:c3: 79:c5:79:a1:6b:f0:d2:8f:86:08:e4:35:e2:1f:50:51:41:25: 57:f3:98:ea:3c:0d:cc:1c:db:77:0f:05:99:50:a7:ad:c1:96: 8a:50:13:08:0d:61:15:f0:e0:cf:c4:5a:03:cf:c6:0f:17:fa: 2c:c1:36:d5:61:5f:54:e1:7e:d3:41:9f:82:23:ec:38:a8:50: 56:9f:41:df:60:f2:5a:cb:e6:17:3e:b3:62:3d:14:37:1b:e5: 96:56:a8:00:93:cb:04:80:26:cb:10:af:04:56:72:5b:92:0a: 7f:23:03:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdZEM3/WyzhPs9BbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk MWE2ZWFjMDUtN2E3OC00MjVhLThmOTQtZDJkODkwNGM5N2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsA0SHEA1z+oygy+BMHyB4ay23Mj4Kqv7E8f a40liE2JyICoq6s/k/mk/R46XcSE62STNdXvPKiNLE+xTacMpKgCqdOtxnridAyw pMKOEsx5bmmNp+fQSuSQqMluAsw0p3BcxS2mhD5wCCO3lua0kM7Sw5LYCTzRhQcn xHvPXKuGMKSWfv+euUozrEuiB9ox5r77fc2j4n96kJmyCD6psUAQT8h/vfndFr2K npfvv6uEoNm9mLCdR1914jI0Jp6xNNmTxJyUxkxlj7bttN7avLZf/IsVn5hLIpyZ p8Bk7o7LwoX0AJCQCrfWgmQOQMP2QaeERxzZTMWxXwfoK7VclwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO9ATgycTYsWbDTnJvnqpqwqKgxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDA0NjUxYjktZTgzYi0z MjkxLWFhZmItNjI5OWI3MjZjNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf4VeDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1DifCG4OMn4ldLN9GFeUMA8z8kbPpsxWn47ppB8lYWJlbATc1sAj7 slEBfaP9iL5NKWRquNFGY7bCEA6wKSq6WuDZOJ96LAaj0ShiNFcbXUSVlDH6iU0S 9F5sb7qgoyGoIqJh27B7TBiEj0OIugCJW0IQVGxXV65nMKUv9mtpI64XLFTRmIKO AZHoQ9zcc8N5xXmha/DSj4YI5DXiH1BRQSVX85jqPA3MHNt3DwWZUKetwZaKUBMI DWEV8ODPxFoDz8YPF/oswTbVYV9U4X7TQZ+CI+w4qFBWn0HfYPJay+YXPrNiPRQ3 G+WWVqgAk8sEgCbLEK8EVnJbkgp/IwPV -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:07 2024 by rpki-client on console-fra.rpki-client.org