$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5abe1a0a-dd59-3758-ac26-70da51ee0207.roa File: 5abe1a0a-dd59-3758-ac26-70da51ee0207.roa (raw, json) Hash identifier: ji8QGDMBNqgb0PRcRgd6TIPVYTYsKXEoPDgm9WC8b8g= Subject key identifier: B4:E6:A7:7E:DD:F4:96:18:18:D6:A9:C8:99:D5:DF:A1:84:39:69:DC Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F43285847BAE975F271252F7D9BE97AC8 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5abe1a0a-dd59-3758-ac26-70da51ee0207.roa Signing time: Fri 01 Nov 2024 02:10:42 +0000 ROA not before: Fri 01 Nov 2024 02:10:42 +0000 ROA not after: Thu 30 Jan 2025 03:10:42 +0000 asID: 6079 IP address blocks: 167.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:e9:75:f2:71:25:2f:7d:9b:e9:7a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Nov 1 02:10:42 2024 GMT Not After : Jan 30 03:10:42 2025 GMT Subject: CN=2591cc03-628f-40b9-9b4d-abcad56aee07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b6:c1:1b:56:46:94:26:59:b5:29:2a:c2:94: 19:47:4f:e8:4b:83:44:5e:fb:80:9c:63:b6:0b:4b: 66:d9:60:d0:1b:0c:86:f6:78:04:82:5d:08:aa:b3: 5c:f4:a4:af:89:01:f3:91:d1:4d:89:eb:7c:27:52: 9f:ee:54:fa:8e:0d:45:25:a4:f3:93:ad:fe:bd:49: 44:fd:bc:e7:0d:e4:04:09:26:13:ca:f7:93:1e:f0: 1c:56:22:5e:8b:3d:90:f8:f6:5d:45:8f:71:e6:a8: 48:6d:59:1d:ff:ab:3c:ad:bb:91:d1:1e:56:6e:40: 93:e6:85:3c:e8:5f:91:ab:5e:58:80:31:bb:8f:8d: f3:2b:43:bb:e9:11:93:94:05:f9:c6:e2:1c:5d:c1: 4f:c4:ed:07:93:39:5e:0b:cc:2c:90:46:7a:31:71: d4:bd:d1:2b:8c:1d:a4:5b:88:8c:8e:9b:fc:e6:f8: 7e:4e:1d:c5:f8:d5:7f:34:3d:ad:42:b1:4e:53:a0: 96:f2:7a:aa:4a:65:2a:fb:ca:d6:1f:56:14:7b:26: 0d:0c:f5:63:4c:a4:87:30:30:a6:17:dc:ba:06:e0: c3:36:44:94:24:6d:8c:be:57:e3:7e:d5:2d:13:6a: e2:89:11:ef:71:4e:fa:b1:54:45:ad:7e:0f:31:1e: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:A7:7E:DD:F4:96:18:18:D6:A9:C8:99:D5:DF:A1:84:39:69:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5abe1a0a-dd59-3758-ac26-70da51ee0207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8a:03:f4:dc:8d:eb:ab:ea:5a:ff:cd:24:a8:89:5a:3c:10: 1d:4f:53:30:3c:53:19:f9:02:e3:84:29:54:69:f5:05:4d:50: 33:80:da:e0:b5:22:b7:e1:fb:b1:b3:55:8a:6b:3a:85:fd:1d: 2e:df:b8:57:8f:ae:de:ce:40:eb:0d:62:39:6d:97:96:ea:43: 63:bc:61:6d:dc:64:20:68:7a:d6:cb:8e:01:74:f2:d7:96:d3: f0:88:43:1a:31:c3:c7:c0:dd:80:d3:ef:5e:a6:59:d6:69:e9: b3:e7:af:31:b0:ee:79:cf:a3:2d:e4:05:3a:0d:24:ab:18:55: 3f:0d:bc:e6:a6:e5:d2:b1:7e:9a:a7:87:46:50:61:25:90:19: c0:43:e8:7a:8c:03:e7:17:8f:bb:80:dd:ad:b7:18:33:e3:2d: ee:a1:e2:39:f8:c8:20:28:ad:2b:da:96:6a:b3:0d:43:7f:0d: 90:c6:86:cf:98:21:50:cc:db:a4:18:61:ab:35:57:51:7c:01: 62:49:44:b9:88:16:b3:d0:2a:1c:c8:04:3a:8c:f4:8c:8c:2b: d4:e2:56:5f:a2:67:9e:b7:9b:7e:a0:66:d3:cd:4b:2b:d2:df: 5a:ac:87:95:93:54:72:b4:91:14:15:53:60:7c:d6:a7:47:d5: e4:6a:2e:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe66XXycSUvfZvpesgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI0MTEwMTAyMTA0MloXDTI1MDEzMDAzMTA0MlowLzEtMCsGA1UEAxMk MjU5MWNjMDMtNjI4Zi00MGI5LTliNGQtYWJjYWQ1NmFlZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLbBG1ZGlCZZtSkqwpQZR0/oS4NEXvuAnGO2 C0tm2WDQGwyG9ngEgl0IqrNc9KSviQHzkdFNiet8J1Kf7lT6jg1FJaTzk63+vUlE /bznDeQECSYTyveTHvAcViJeiz2Q+PZdRY9x5qhIbVkd/6s8rbuR0R5WbkCT5oU8 6F+Rq15YgDG7j43zK0O76RGTlAX5xuIcXcFPxO0HkzleC8wskEZ6MXHUvdErjB2k W4iMjpv85vh+Th3F+NV/ND2tQrFOU6CW8nqqSmUq+8rWH1YUeyYNDPVjTKSHMDCm F9y6BuDDNkSUJG2MvlfjftUtE2riiRHvcU76sVRFrX4PMR5axQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTmp37d9JYYGNapyJnV36GEOWncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNWFiZTFhMGEtZGQ1OS0z NzU4LWFjMjYtNzBkYTUxZWUwMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmKA/Tcjeur6lr/zSSoiVo8EB1PUzA8Uxn5AuOEKVRp9QVNUDOA2uC1 Irfh+7GzVYprOoX9HS7fuFePrt7OQOsNYjltl5bqQ2O8YW3cZCBoetbLjgF08teW 0/CIQxoxw8fA3YDT716mWdZp6bPnrzGw7nnPoy3kBToNJKsYVT8NvOam5dKxfpqn h0ZQYSWQGcBD6HqMA+cXj7uA3a23GDPjLe6h4jn4yCAorSvalmqzDUN/DZDGhs+Y IVDM26QYYas1V1F8AWJJRLmIFrPQKhzIBDqM9IyMK9TiVl+iZ563m36gZtPNSyvS 31qsh5WTVHK0kRQVU2B81qdH1eRqLrk= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:09 2024 by rpki-client on console-ams.rpki-client.org