$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa File: fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa (raw, json) Hash identifier: lFlHDB7iXQT5Lrpak3CxbuG1EEbGtHkZqF50uDDG0RY= Subject key identifier: 45:9B:47:CF:90:0A:B5:8C:54:E4:6A:B3:40:8D:BF:4E:3C:C7:05:B1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475910CD97C4DEBA29273B69C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 1225 IP address blocks: 129.250.35.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:cd:97:c4:de:ba:29:27:3b:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=066709d1-d121-4fb0-a4bb-204ebf8e8ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7f:45:2c:c2:c5:f6:77:80:f6:e3:51:56:61: 7e:a4:6c:ce:50:9d:2b:cf:06:cd:ae:f0:d8:40:3c: ab:42:2b:ab:74:c0:42:97:ff:e7:cd:ec:ef:87:3b: 0e:94:07:22:a8:4b:26:df:4c:00:2c:a8:84:cc:18: 3a:26:5f:ff:3a:aa:aa:66:b5:1b:67:de:2e:51:f8: 21:50:10:18:a8:65:6b:15:8f:bf:f2:ac:d2:66:30: c5:f1:68:e6:e2:cf:58:0c:d5:35:3a:7e:16:f5:da: a3:3a:2c:a5:d1:30:4c:3e:7f:ad:47:36:cf:23:b7: 22:f7:8f:dc:ee:e5:ec:59:f2:9c:01:b5:d3:7e:83: 35:0c:44:04:4e:83:e0:7a:20:42:2d:42:98:66:31: 0c:75:2d:8a:87:79:d4:de:ec:89:0b:06:c9:f1:00: 1a:4c:f4:d1:d7:51:51:8a:b9:bc:24:9c:89:4e:cb: cd:0e:c7:4a:83:66:af:da:0a:ca:0b:52:53:8d:2a: 2f:66:bc:e9:1c:88:29:db:3a:b3:f6:da:ef:bc:24: 9b:5c:6a:93:e2:b0:88:18:5c:99:15:e1:1d:e0:ff: f8:bc:3e:e5:b5:31:24:e6:95:cd:ee:4f:22:4e:7f: ff:7c:31:ec:c8:53:29:38:40:9c:27:35:65:78:5e: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:47:CF:90:0A:B5:8C:54:E4:6A:B3:40:8D:BF:4E:3C:C7:05:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:a3:63:93:53:03:a0:92:c0:94:5b:6d:2f:3f:f3:3e:5e:b1: 65:07:89:a1:16:f6:f6:be:a8:6a:0a:1c:21:60:b6:13:23:dc: 3b:bd:56:86:fc:61:66:0c:e0:e6:18:ab:ee:cf:0f:d9:a1:89: bf:15:7a:6b:d0:64:f8:ec:c8:a6:b3:7d:44:cf:dd:a6:5c:ba: 03:7a:58:2f:2a:1f:b7:d6:c5:aa:b2:96:12:72:d8:e4:40:59: fc:da:24:f5:7f:70:74:1e:0f:88:c1:cc:e4:82:c6:9f:2a:ff: 6b:05:07:1e:4e:34:69:13:b0:94:cc:45:bb:a7:26:13:8e:ed: 72:be:bb:78:41:11:c1:5c:1b:93:81:c1:9a:7f:69:66:bf:54: 31:90:69:db:2b:f7:67:b9:60:4c:f8:f7:c1:58:d0:0e:a5:aa: 39:f9:7f:aa:28:f6:20:7f:a1:b8:1a:72:49:8c:83:e8:70:03: 4d:da:17:e8:39:a1:04:c4:64:56:54:d0:fd:a0:fd:66:05:7f: 66:08:85:d3:1b:eb:3a:3e:19:eb:51:d1:fb:b1:5e:fb:5c:e8: 0e:e6:5f:f9:61:d7:e7:90:b6:7e:c0:11:74:ee:71:90:0b:9d: 9b:cb:e0:c6:fe:69:cb:60:fa:29:8d:2e:a3:63:a8:97:eb:ed: b4:0f:ab:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdZEM2XxN66KSc7acAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk MDY2NzA5ZDEtZDEyMS00ZmIwLWE0YmItMjA0ZWJmOGU4YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX9FLMLF9neA9uNRVmF+pGzOUJ0rzwbNrvDY QDyrQiurdMBCl//nzezvhzsOlAciqEsm30wALKiEzBg6Jl//OqqqZrUbZ94uUfgh UBAYqGVrFY+/8qzSZjDF8Wjm4s9YDNU1On4W9dqjOiyl0TBMPn+tRzbPI7ci94/c 7uXsWfKcAbXTfoM1DEQEToPgeiBCLUKYZjEMdS2Kh3nU3uyJCwbJ8QAaTPTR11FR irm8JJyJTsvNDsdKg2av2grKC1JTjSovZrzpHIgp2zqz9trvvCSbXGqT4rCIGFyZ FeEd4P/4vD7ltTEk5pXN7k8iTn//fDHsyFMpOECcJzVleF6N4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEWbR8+QCrWMVORqs0CNv048xwWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmI0Yjk0ZDEtMzdhMS0z YzExLWE4NmYtNjdjMWNmMTk1NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfoj4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDFo2OTUwOgksCUW20vP/M+XrFlB4mhFvb2vqhqChwhYLYTI9w7vVaG /GFmDODmGKvuzw/ZoYm/FXpr0GT47Mims31Ez92mXLoDelgvKh+31sWqspYSctjk QFn82iT1f3B0Hg+IwczkgsafKv9rBQceTjRpE7CUzEW7pyYTju1yvrt4QRHBXBuT gcGaf2lmv1QxkGnbK/dnuWBM+PfBWNAOpao5+X+qKPYgf6G4GnJJjIPocANN2hfo OaEExGRWVND9oP1mBX9mCIXTG+s6PhnrUdH7sV77XOgO5l/5YdfnkLZ+wBF07nGQ C52by+DG/mnLYPopjS6jY6iX6+20D6vu -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:10 2024 by rpki-client on console-fra.rpki-client.org