$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa File: ffb3da79-e26f-3955-a998-a0f724c9166d.roa (raw, json) Hash identifier: z1dAz5WgOygOTPDWXML9uaj9uRxFlTkJ8qyaFQeoW6k= Subject key identifier: 39:35:C7:57:E3:11:3F:CD:4D:4A:32:44:3C:AE:38:BA:D0:14:68:63 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285847D404A676EC8DE107BC641460 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 35953 IP address blocks: 204.2.154.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:a6:76:ec:8d:e1:07:bc:64:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=35d61732-e4c8-44b9-83f3-0e14156add30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:75:ae:6a:3f:2d:4e:6b:42:94:42:de:eb: 47:10:78:ec:67:79:19:dc:57:0d:07:d1:94:17:f1: b3:d8:27:13:2d:aa:ab:5a:6e:06:a7:44:99:25:9a: 73:aa:82:0d:bf:1a:22:cb:3b:02:a0:ff:bd:64:bf: fc:60:d9:66:b9:35:b2:c6:03:21:fc:ea:5c:6e:65: 5f:ca:a9:51:04:e6:7c:60:2a:f2:15:67:17:57:aa: bd:42:40:e9:ce:7a:35:20:5c:2d:a3:bd:22:0a:4e: 12:a1:85:b9:42:66:e4:99:4b:29:dc:cb:f8:1c:0a: af:a2:9d:a1:67:bf:42:c1:b2:f8:8a:3c:38:50:89: a8:ab:1b:80:43:05:a9:2b:84:27:78:95:36:56:ce: cd:5e:fd:d1:80:8f:d5:81:c0:b1:55:2c:1e:f9:c3: ab:c8:b3:8f:86:15:c5:61:9e:bd:f4:9c:db:3d:cf: e9:d0:fd:0d:e1:da:8c:2b:9a:f6:4c:c7:52:a4:2d: 4b:d0:0a:5c:c8:7f:91:dd:05:47:ea:07:ae:a1:95: d5:2e:9a:12:14:6c:00:f4:0e:3e:b4:fa:47:3c:43: 95:cb:13:77:56:b4:95:8f:f3:a8:23:ba:8e:40:91: c5:dd:6f:62:86:01:1e:d5:8e:f3:65:75:a2:28:97: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:C7:57:E3:11:3F:CD:4D:4A:32:44:3C:AE:38:BA:D0:14:68:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.154.192/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7a:59:b4:5f:4f:3b:7f:4c:3b:4f:c1:a0:82:6c:81:70:fc: 8a:82:40:78:b6:88:27:29:09:f9:6e:1e:b6:66:08:7c:0e:cc: 7b:f8:fc:82:16:f0:c8:b3:6d:5f:16:d4:4b:48:37:3f:c1:d8: f4:5e:d0:bf:e6:fd:f1:f0:61:aa:dc:a8:08:b2:ea:59:ac:00: 80:e3:d3:17:4f:bc:05:d6:ed:b4:64:d4:65:9b:5a:93:fb:c2: 79:fe:37:28:38:34:b3:16:d5:e6:a8:4d:64:f9:df:18:d4:79: 5f:f6:c7:c1:10:f2:c5:55:17:36:53:09:0e:20:78:4f:df:56: 8e:c3:7f:a3:5c:34:61:99:f2:f1:aa:d9:35:df:14:74:b9:76: f7:af:a5:15:e5:4f:08:eb:63:17:6e:1e:1a:b4:a5:d4:a3:93: 7f:b1:ea:c6:37:34:74:8d:17:aa:ca:84:da:73:32:73:c2:5e: 80:08:0c:0c:95:5f:07:ce:cc:f0:41:fc:4e:21:f6:43:9a:73: 8e:97:5d:5d:e0:8c:b5:c5:76:8f:55:63:a7:3d:a0:7b:94:a0: 1a:64:76:6a:c0:ec:41:19:b3:40:3f:ef:2e:27:36:54:8b:04: ae:c3:e1:dc:eb:12:5c:65:60:85:e0:97:71:24:42:1c:ea:fc: 4f:25:d1:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfUBKZ27I3hB7xkFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk MzVkNjE3MzItZTRjOC00NGI5LTgzZjMtMGUxNDE1NmFkZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhax1rmo/LU5rQpRC3utHEHjsZ3kZ3FcNB9GU F/Gz2CcTLaqrWm4Gp0SZJZpzqoINvxoiyzsCoP+9ZL/8YNlmuTWyxgMh/OpcbmVf yqlRBOZ8YCryFWcXV6q9QkDpzno1IFwto70iCk4SoYW5QmbkmUsp3Mv4HAqvop2h Z79CwbL4ijw4UImoqxuAQwWpK4QneJU2Vs7NXv3RgI/VgcCxVSwe+cOryLOPhhXF YZ699JzbPc/p0P0N4dqMK5r2TMdSpC1L0ApcyH+R3QVH6geuoZXVLpoSFGwA9A4+ tPpHPEOVyxN3VrSVj/OoI7qOQJHF3W9ihgEe1Y7zZXWiKJfh2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDk1x1fjET/NTUoyRDyuOLrQFGhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmZiM2RhNzktZTI2Zi0z OTU1LWE5OTgtYTBmNzI0YzkxNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAKawDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBelm0X087f0w7T8GggmyBcPyKgkB4tognKQn5bh62Zgh8Dsx7+PyC FvDIs21fFtRLSDc/wdj0XtC/5v3x8GGq3KgIsupZrACA49MXT7wF1u20ZNRlm1qT +8J5/jcoODSzFtXmqE1k+d8Y1Hlf9sfBEPLFVRc2UwkOIHhP31aOw3+jXDRhmfLx qtk13xR0uXb3r6UV5U8I62MXbh4atKXUo5N/serGNzR0jReqyoTaczJzwl6ACAwM lV8HzszwQfxOIfZDmnOOl11d4Iy1xXaPVWOnPaB7lKAaZHZqwOxBGbNAP+8uJzZU iwSuw+Hc6xJcZWCF4JdxJEIc6vxPJdHQ -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:10 2024 by rpki-client on console-fra.rpki-client.org