$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa File: 14101aa2-6fde-3978-964f-46e75495d447.roa (raw, json) Hash identifier: bwyCFoxm5BM88Rlo7oASfXXEzWqTv3ZsKkK/IDF+b28= Subject key identifier: 71:03:4F:C4:6E:B0:C1:82:38:D4:EE:C9:E6:75:A2:FA:F9:88:02:23 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285847502F775CC0E985F396E31EFD Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa Signing time: Mon 23 Sep 2024 20:40:15 +0000 ROA not before: Mon 23 Sep 2024 20:40:15 +0000 ROA not after: Sun 22 Dec 2024 21:40:15 +0000 asID: 54113 IP address blocks: 131.125.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:50:2f:77:5c:c0:e9:85:f3:96:e3:1e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 23 20:40:15 2024 GMT Not After : Dec 22 21:40:15 2024 GMT Subject: CN=1063036a-0b16-4577-8b69-4e4ca7c85ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:32:1f:9e:f2:41:1a:fd:46:bd:66:fa:8b:47: a5:be:00:06:fe:42:c2:a3:38:68:a0:2a:95:21:bc: 47:c0:62:75:f7:36:ca:dc:19:ca:aa:5e:11:5d:5c: 2c:c8:64:c1:7d:35:f8:3b:69:4f:fa:61:43:d5:b3: 3d:26:b8:3b:76:f4:49:dd:54:a5:92:cd:20:96:2c: a5:1b:95:dd:dd:e6:10:90:91:48:5e:d4:37:43:98: 0e:4c:21:c9:65:43:7c:c2:5c:c2:ab:31:6a:e1:ec: 53:f8:95:fc:b9:50:6c:64:e4:3c:5b:4c:c0:81:31: 63:c0:6c:ba:20:f1:f3:e0:de:29:62:69:be:46:7c: de:97:67:aa:42:fa:1e:c9:96:11:91:bb:8f:a4:4b: 39:99:5c:e7:3b:34:89:ed:60:ad:4c:dc:92:d9:3c: 80:90:bb:32:cd:7e:af:fb:d4:47:87:bf:32:8b:47: d1:ca:e4:cd:07:57:50:30:4b:bf:00:59:27:5e:7e: 18:3b:0d:26:84:15:f8:55:22:01:ea:eb:7e:f7:e6: 66:b5:26:3c:fd:54:55:ff:79:60:9e:fb:f3:b4:9a: 79:d6:9a:f1:eb:1a:4f:7e:9d:bb:43:ac:f1:46:f5: b2:da:6d:0b:f2:3d:15:95:8a:be:99:fc:74:4c:fe: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:4F:C4:6E:B0:C1:82:38:D4:EE:C9:E6:75:A2:FA:F9:88:02:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1f:14:e5:f1:15:1d:43:57:ed:23:b6:8f:83:62:d0:9a:f9: f3:5b:63:10:53:61:c1:43:cc:c4:a9:f9:51:4e:88:d3:4c:1a: 33:06:12:a8:9c:07:f6:e2:fe:8b:b6:a5:ce:80:b9:d3:5a:74: 77:c8:cf:af:c1:b6:07:a1:ae:10:2b:e1:c6:5a:06:cb:29:2e: d0:0d:d4:16:1b:e1:0e:0e:c2:f7:62:08:c4:3a:e7:d0:bf:95: b2:9a:27:da:e0:5c:0c:15:c1:55:9d:0c:7c:f9:eb:92:71:6d: dc:94:74:1b:59:ed:64:81:84:fa:ae:8d:06:ff:ca:bf:de:b8: af:0c:9b:2d:79:03:f8:1a:e9:63:41:38:23:00:0d:3b:aa:7d: 4e:26:b5:6d:f3:51:58:63:46:cc:a8:2b:44:6e:2c:40:cf:d0: 4e:59:b8:06:e7:f3:fc:cf:12:ca:1b:16:04:01:50:d0:dc:42: 7f:98:c1:83:c7:5d:ce:b6:73:6b:8e:71:0c:40:23:fb:33:c5: 4e:5c:07:62:38:0a:08:4a:b7:37:79:fc:da:17:b7:81:bb:bb: aa:07:85:90:4d:cd:38:47:a8:3b:26:6a:db:f7:fe:ec:23:e2: e2:63:29:1c:b7:c2:4e:fe:6d:b4:ec:12:99:e0:dc:06:65:e5: 2f:a7:df:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdQL3dcwOmF85bjHv0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDkyMzIwNDAxNVoXDTI0MTIyMjIxNDAxNVowLzEtMCsGA1UEAxMk MTA2MzAzNmEtMGIxNi00NTc3LThiNjktNGU0Y2E3Yzg1ZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTIfnvJBGv1GvWb6i0elvgAG/kLCozhooCqV IbxHwGJ19zbK3BnKql4RXVwsyGTBfTX4O2lP+mFD1bM9Jrg7dvRJ3VSlks0gliyl G5Xd3eYQkJFIXtQ3Q5gOTCHJZUN8wlzCqzFq4exT+JX8uVBsZOQ8W0zAgTFjwGy6 IPHz4N4pYmm+Rnzel2eqQvoeyZYRkbuPpEs5mVznOzSJ7WCtTNyS2TyAkLsyzX6v +9RHh78yi0fRyuTNB1dQMEu/AFknXn4YOw0mhBX4VSIB6ut+9+ZmtSY8/VRV/3lg nvvztJp51prx6xpPfp27Q6zxRvWy2m0L8j0VlYq+mfx0TP7EAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEDT8RusMGCONTuyeZ1ovr5iAIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTQxMDFhYTItNmZkZS0z OTc4LTk2NGYtNDZlNzU0OTVkNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg315MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkfFOXxFR1DV+0jto+DYtCa+fNbYxBTYcFDzMSp+VFOiNNMGjMGEqic B/bi/ou2pc6AudNadHfIz6/BtgehrhAr4cZaBsspLtAN1BYb4Q4OwvdiCMQ659C/ lbKaJ9rgXAwVwVWdDHz565JxbdyUdBtZ7WSBhPqujQb/yr/euK8Mmy15A/ga6WNB OCMADTuqfU4mtW3zUVhjRsyoK0RuLEDP0E5ZuAbn8/zPEsobFgQBUNDcQn+YwYPH Xc62c2uOcQxAI/szxU5cB2I4CghKtzd5/NoXt4G7u6oHhZBNzThHqDsmatv3/uwj 4uJjKRy3wk7+bbTsEpng3AZl5S+n3xs= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:45 2024 by rpki-client on console-fra.rpki-client.org