$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa File: b75f0928-afa7-3631-8814-783a2e20fda1.roa (raw, json) Hash identifier: 01Rb0xmceCYRsHF5qdH7KaJe24nYqDvLoGgHtVaKVHg= Subject key identifier: 5C:BD:D6:A5:94:11:A7:4C:6B:66:39:C9:C4:24:B9:69:55:AE:4C:41 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285847502F982E3E629A060C21CC40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa Signing time: Mon 23 Sep 2024 20:40:31 +0000 ROA not before: Mon 23 Sep 2024 20:40:31 +0000 ROA not after: Sun 22 Dec 2024 21:40:31 +0000 asID: 54113 IP address blocks: 131.125.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:50:2f:98:2e:3e:62:9a:06:0c:21:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 23 20:40:31 2024 GMT Not After : Dec 22 21:40:31 2024 GMT Subject: CN=697fccad-be2a-4cd8-a302-6875b792e653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:45:3b:78:b4:ed:aa:f9:4e:74:9f:15:8b: d8:ea:6d:bf:2f:a4:27:c8:35:87:d5:ba:7e:13:29: f2:70:db:14:27:1e:72:13:8d:a7:e1:62:0f:82:4b: 22:77:d7:1c:ac:81:c0:1f:1c:ac:a1:51:30:50:66: 25:a7:5b:dc:fa:34:43:d6:22:13:6f:d1:78:02:70: 16:97:ac:e0:13:76:0a:04:05:19:f7:d2:54:17:fc: c8:8e:7e:23:7b:ad:6d:84:81:96:75:37:be:48:2d: 10:71:bb:d5:65:f9:d4:17:ea:03:88:10:bb:09:a2: 67:ef:f1:4e:ec:0b:a4:e4:8b:5f:04:d3:2d:8a:36: f1:6c:a4:ba:1f:c6:96:9f:c0:0c:ca:10:c0:ff:2e: 5b:cf:e1:62:21:4c:9a:9a:31:b5:2f:c4:a2:5e:9e: 18:f1:01:a3:4c:56:70:ca:df:ad:97:ba:75:36:3c: da:3a:94:1d:24:d5:fa:d9:8d:e2:ad:99:08:6f:e7: 25:aa:10:55:62:ca:22:4c:3c:9f:b4:92:e7:15:19: d7:99:5c:c1:33:a9:2a:d4:d2:be:21:0d:3a:05:20: 52:85:18:88:75:87:67:3a:97:86:0c:4c:a5:0f:fa: 8f:96:b3:6c:cc:f4:99:3a:62:07:2a:37:a2:8a:c3: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BD:D6:A5:94:11:A7:4C:6B:66:39:C9:C4:24:B9:69:55:AE:4C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a4:d6:24:8a:5d:d3:19:09:7e:0a:b5:cf:b2:82:2a:0d:92: 96:cf:4d:9e:2e:ca:ed:7b:63:c4:76:3f:24:e5:58:0c:2d:88: 1e:11:61:88:48:7c:e9:f4:22:ae:65:b3:e4:9a:8a:d7:96:91: e5:01:55:14:d4:8e:35:87:20:51:fc:18:86:2e:ce:a4:d2:e8: fa:a8:da:de:15:9b:c6:c0:ae:92:86:47:28:54:ef:fd:ce:73: a2:e2:45:17:6d:ed:05:0c:64:32:e4:46:b4:1a:3e:5f:20:5f: 20:1c:53:41:8b:d2:ee:fe:2a:e2:d5:20:dd:4d:75:9c:36:8e: 1a:d8:c6:38:dd:ec:73:3e:03:94:c5:be:f2:af:91:d7:64:a2: b7:c3:bb:19:21:e8:4c:3e:1d:38:19:9a:8a:3a:eb:16:7c:98: 48:c9:89:14:1a:7d:9a:92:fb:03:0a:0e:d0:b9:77:71:f6:7c: 60:6b:9b:cf:33:b3:ad:97:2b:10:88:62:4a:76:f7:e4:36:5b: 8b:dd:39:42:62:73:fc:f5:72:52:c0:1b:98:4c:55:7a:ec:95: 3d:ae:39:44:41:41:2a:20:31:21:62:8d:86:99:4d:26:fe:75: 11:1b:a8:86:2e:e0:61:ff:ff:55:a1:98:6b:8a:f7:7e:53:fd: d7:60:f1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdQL5guPmKaBgwhzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDkyMzIwNDAzMVoXDTI0MTIyMjIxNDAzMVowLzEtMCsGA1UEAxMk Njk3ZmNjYWQtYmUyYS00Y2Q4LWEzMDItNjg3NWI3OTJlNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+dFO3i07ar5TnSfFYvY6m2/L6QnyDWH1bp+ EynycNsUJx5yE42n4WIPgksid9ccrIHAHxysoVEwUGYlp1vc+jRD1iITb9F4AnAW l6zgE3YKBAUZ99JUF/zIjn4je61thIGWdTe+SC0QcbvVZfnUF+oDiBC7CaJn7/FO 7Auk5ItfBNMtijbxbKS6H8aWn8AMyhDA/y5bz+FiIUyamjG1L8SiXp4Y8QGjTFZw yt+tl7p1NjzaOpQdJNX62Y3irZkIb+clqhBVYsoiTDyftJLnFRnXmVzBM6kq1NK+ IQ06BSBShRiIdYdnOpeGDEylD/qPlrNszPSZOmIHKjeiisMaPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy91qWUEadMa2Y5ycQkuWlVrkxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjc1ZjA5MjgtYWZhNy0z NjMxLTg4MTQtNzgzYTJlMjBmZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyk1iSKXdMZCX4Ktc+ygioNkpbPTZ4uyu17Y8R2PyTlWAwtiB4RYYhI fOn0Iq5ls+SaiteWkeUBVRTUjjWHIFH8GIYuzqTS6Pqo2t4Vm8bArpKGRyhU7/3O c6LiRRdt7QUMZDLkRrQaPl8gXyAcU0GL0u7+KuLVIN1NdZw2jhrYxjjd7HM+A5TF vvKvkddkorfDuxkh6Ew+HTgZmoo66xZ8mEjJiRQafZqS+wMKDtC5d3H2fGBrm88z s62XKxCIYkp29+Q2W4vdOUJic/z1clLAG5hMVXrslT2uOURBQSogMSFijYaZTSb+ dREbqIYu4GH//1WhmGuK935T/ddg8cc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:27 2024 by rpki-client on console-ams.rpki-client.org