$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/f21302a5-bac8-369d-b61d-d66da162b478.roa File: f21302a5-bac8-369d-b61d-d66da162b478.roa (raw, json) Hash identifier: xZsCWgVFWE5bMyD+lQLiB6K5VzXBxb5AOEB7WeuS/Ko= Subject key identifier: 0F:41:35:E8:83:D1:E4:54:72:2B:16:E5:66:D6:B1:DB:EC:AB:1E:52 Certificate issuer: /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628 Certificate serial: 010D0C9F43285847D999F7B197E3B4A46F2C7840 Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/f21302a5-bac8-369d-b61d-d66da162b478.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 23341 IP address blocks: 143.55.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f7:b1:97:e3:b4:a4:6f:2c:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=a5fb8b60-d318-4440-bd11-5b0d01fe8e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:e7:55:8a:23:e2:03:22:5d:bb:ed:02:5c: 82:f8:4e:58:8b:a5:25:bb:7b:8e:6c:e0:71:82:67: 05:4b:c0:7e:87:24:40:60:aa:17:03:b5:a0:c9:d6: b7:a0:f0:87:c5:1e:0c:84:5a:45:63:11:17:16:39: 82:1c:d5:6a:f4:13:31:81:49:ed:c2:e9:fb:53:11: 85:e4:32:2b:f5:51:2e:bc:98:af:db:72:64:6b:2c: 92:a0:23:d8:00:65:e6:e3:5f:d1:41:38:79:9a:04: fe:be:66:49:31:0c:0b:fc:2d:02:65:37:af:d1:7d: fa:fc:14:69:f4:10:43:52:c3:6d:dd:cc:ce:6c:16: 62:f1:c5:9e:26:cb:2e:0b:c9:6a:e6:43:b9:85:ca: e4:42:82:d8:d0:ac:a0:c0:b2:a4:e6:2f:2a:0a:4c: 7d:cb:f7:6e:4f:36:68:72:5c:2b:62:47:b5:48:1d: 4d:3f:57:2c:69:31:47:d8:99:92:f1:96:50:5a:05: 52:56:60:86:2c:cb:1a:a8:e7:81:8a:00:66:6d:58: 81:3f:c1:e9:7e:29:45:fb:dc:39:24:57:96:12:76: 36:de:04:e2:05:61:77:a1:70:ac:a4:5e:ad:48:57: 77:24:72:c3:bb:90:95:b1:3b:06:44:d2:e4:97:f4: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:35:E8:83:D1:E4:54:72:2B:16:E5:66:D6:B1:DB:EC:AB:1E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/f21302a5-bac8-369d-b61d-d66da162b478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl X509v3 Authority Key Identifier: keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer sbgp-ipAddrBlock: critical IPv4: 143.55.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c8:ea:88:ac:1a:e1:ae:f8:8a:80:10:9c:b5:ec:35:0b:b2: 1b:f5:99:71:6c:f3:cd:d6:4b:16:dd:82:dd:46:17:7c:36:7c: c0:b8:78:c9:5a:72:12:b8:31:53:87:af:84:b5:4f:5e:97:36: 4d:52:46:1a:c1:b5:b7:99:a5:dd:db:be:f5:12:a4:49:7a:5c: 06:33:1d:e8:90:81:19:96:67:b0:da:50:96:f0:ce:4e:bb:17: 09:05:92:72:99:9d:bf:f1:24:e8:0a:79:a9:45:5b:03:b5:ee: 22:64:73:6b:e6:dc:6a:8e:74:1c:c6:0b:47:86:4f:1e:51:1a: 90:34:fa:e8:95:10:f9:cf:11:d8:16:a6:2b:7b:25:a1:e1:19: 63:c4:44:d8:12:a2:25:22:ec:b9:07:b4:d3:6d:6e:c5:b2:a8: fa:55:f2:5c:04:70:84:d2:26:3a:7b:6a:f6:36:9b:4d:70:e2: 57:b7:5b:64:8b:e1:23:9f:a5:df:60:b4:c0:36:55:16:df:43: b9:39:cc:77:da:97:5f:12:b2:37:a0:a9:00:46:55:75:32:20: 73:9c:cf:87:80:8a:14:72:b4:cf:e6:0d:5e:c7:2f:58:e4:b3: 35:6e:45:8e:79:7f:42:b1:87:2e:5f:3f:bf:a8:0f:ea:75:ee: 37:2d:8d:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfexl+O0pG8seEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2ZmQyNjItOTRlYS00ZTMzLWFmM2UtMjEyYWJlMGZj NjI4MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk YTVmYjhiNjAtZDMxOC00NDQwLWJkMTEtNWIwZDAxZmU4ZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd3nVYoj4gMiXbvtAlyC+E5Yi6Ulu3uObOBx gmcFS8B+hyRAYKoXA7Wgyda3oPCHxR4MhFpFYxEXFjmCHNVq9BMxgUntwun7UxGF 5DIr9VEuvJiv23JkayySoCPYAGXm41/RQTh5mgT+vmZJMQwL/C0CZTev0X36/BRp 9BBDUsNt3czObBZi8cWeJssuC8lq5kO5hcrkQoLY0KygwLKk5i8qCkx9y/duTzZo clwrYke1SB1NP1csaTFH2JmS8ZZQWgVSVmCGLMsaqOeBigBmbViBP8HpfilF+9w5 JFeWEnY23gTiBWF3oXCspF6tSFd3JHLDu5CVsTsGRNLkl/RR6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9BNeiD0eRUcisW5WbWsdvsqx5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjZm ZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJhYmUwZmM2MjgvZjIxMzAyYTUtYmFjOC0z NjlkLWI2MWQtZDY2ZGExNjJiNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWI2ZmQyNjItOTRlYS00ZTMzLWFm M2UtMjEyYWJlMGZjNjI4LzViNmZkMjYyLTk0ZWEtNGUzMy1hZjNlLTIxMmFiZTBm YzYyOC5jcmwwHwYDVR0jBBgwFoAUNjzIUHmlbKUy9HhU//w8/Bj4M/cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YjZmZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJh YmUwZmM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzebMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3I6oisGuGu+IqAEJy17DULshv1mXFs883WSxbdgt1GF3w2fMC4eMla chK4MVOHr4S1T16XNk1SRhrBtbeZpd3bvvUSpEl6XAYzHeiQgRmWZ7DaUJbwzk67 FwkFknKZnb/xJOgKealFWwO17iJkc2vm3GqOdBzGC0eGTx5RGpA0+uiVEPnPEdgW pit7JaHhGWPERNgSoiUi7LkHtNNtbsWyqPpV8lwEcITSJjp7avY2m01w4le3W2SL 4SOfpd9gtMA2VRbfQ7k5zHfal18SsjegqQBGVXUyIHOcz4eAihRytM/mDV7HL1jk szVuRY55f0Kxhy5fP7+oD+p17jctjRw= -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:35 2024 by rpki-client on console-ams.rpki-client.org