$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa File: 412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa (raw, json) Hash identifier: aPOyboRCWQ7CagpBZ4D6gpynhESGEGiLDp1GiBdPQ68= Subject key identifier: B6:9D:72:A3:05:BC:0F:C0:D6:41:EE:28:D8:9D:21:16:73:21:45:AA Certificate issuer: /CN=12e662f6-4810-4bf7-8722-8635fb0c7747 Certificate serial: 010D0C9F43285847600B9012AC6C6BDA33540880 Authority key identifier: 60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 33403 IP address blocks: 128.254.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:90:12:ac:6c:6b:da:33:54:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e662f6-4810-4bf7-8722-8635fb0c7747 Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=45c602c0-d083-42be-a0f1-66ce8829b870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:77:47:8a:2a:97:93:49:7e:e8:90:71:60: 58:a0:1e:d7:c6:69:52:f9:53:09:fa:82:84:51:c1: 7f:24:81:65:55:f5:cf:3b:a0:b4:fe:9d:e1:82:61: 7b:40:71:f3:c2:bc:12:0c:2c:cb:43:90:f1:20:66: b3:31:ec:97:8a:98:27:42:3f:c0:1e:64:06:70:7d: 4d:6a:0c:1f:31:04:9f:3d:3e:aa:01:24:7a:b7:02: dc:15:5c:33:f7:15:be:08:d9:0a:a1:cd:5f:bb:62: e2:ab:95:c5:b2:f4:3b:40:ca:7c:1a:db:8c:9c:07: 56:1f:0b:f4:33:e0:6c:76:43:86:a3:05:6e:fe:4a: d0:e6:43:22:b9:40:70:32:3e:cf:73:a8:33:55:25: 05:b6:dc:81:4c:21:80:cb:b1:44:a6:7d:f3:bf:b5: 30:c3:f5:e2:cc:2f:27:bb:96:0d:d0:84:eb:d6:c6: 5c:b0:8b:ce:32:46:ec:bd:23:72:12:50:6f:ec:20: dc:38:34:46:59:8b:88:54:e7:65:08:81:01:de:47: 22:c2:f5:67:14:76:fb:4c:ec:28:91:6b:b3:ab:f8: 98:ac:06:b5:09:b8:df:93:f9:09:81:7f:55:9c:f4: 9b:16:10:54:39:94:02:07:5f:c7:0a:22:b2:73:13: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:72:A3:05:BC:0F:C0:D6:41:EE:28:D8:9D:21:16:73:21:45:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/412f1ed7-2b8b-3407-94f1-9e1096b8381d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.crl X509v3 Authority Key Identifier: keyid:60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer sbgp-ipAddrBlock: critical IPv4: 128.254.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:68:1e:c7:e3:25:cf:c7:f3:ee:43:ce:bc:16:6c:a9:54:ac: 8f:20:9e:63:aa:af:c7:92:0c:97:84:b1:9e:5b:84:02:0a:2c: df:44:ce:14:e3:aa:01:bc:a1:79:a9:58:67:b9:c4:4d:ec:8d: df:b4:73:d2:43:17:e9:0c:1b:7a:a7:91:d7:08:dc:d4:59:47: 57:77:4d:54:17:6a:05:93:5b:88:10:45:94:f0:48:81:47:d5: de:5c:4a:5c:1d:62:de:11:0d:18:f7:d6:e3:6c:76:41:bf:5a: 4b:4f:7f:01:09:dc:48:70:94:bd:b5:83:e3:eb:75:da:b3:04: 71:39:66:09:34:e9:d6:bb:1b:f5:3a:ee:f3:b1:c1:49:2a:96: f9:e5:a2:b8:d6:cb:c7:c0:26:0a:35:c1:54:71:11:65:33:70: 79:79:51:2e:d1:74:03:1e:0d:d7:3b:4a:2f:4d:96:e6:6c:78: b7:f6:67:86:a5:55:81:9d:cd:9a:c3:cc:84:1f:b6:7a:a8:f0: f1:b0:d4:94:38:fe:72:7a:4e:94:99:8b:32:b3:8d:56:71:07: e9:b6:97:54:06:48:2f:e3:fa:59:29:4e:f1:e7:e3:6e:66:7e: 82:ae:14:5e:2e:fc:a8:fc:bd:43:25:0f:7f:61:f6:48:af:42: 44:44:2f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC5ASrGxr2jNUCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJlNjYyZjYtNDgxMC00YmY3LTg3MjItODYzNWZiMGM3 NzQ3MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NDVjNjAyYzAtZDA4My00MmJlLWEwZjEtNjZjZTg4MjliODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunV3R4oql5NJfuiQcWBYoB7XxmlS+VMJ+oKE UcF/JIFlVfXPO6C0/p3hgmF7QHHzwrwSDCzLQ5DxIGazMeyXipgnQj/AHmQGcH1N agwfMQSfPT6qASR6twLcFVwz9xW+CNkKoc1fu2Liq5XFsvQ7QMp8GtuMnAdWHwv0 M+BsdkOGowVu/krQ5kMiuUBwMj7Pc6gzVSUFttyBTCGAy7FEpn3zv7Uww/XizC8n u5YN0ITr1sZcsIvOMkbsvSNyElBv7CDcODRGWYuIVOdlCIEB3kciwvVnFHb7TOwo kWuzq/iYrAa1Cbjfk/kJgX9VnPSbFhBUOZQCB1/HCiKycxPSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLadcqMFvA/A1kHuKNidIRZzIUWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMmU2 NjJmNi00ODEwLTRiZjctODcyMi04NjM1ZmIwYzc3NDcvNDEyZjFlZDctMmI4Yi0z NDA3LTk0ZjEtOWUxMDk2YjgzODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTJlNjYyZjYtNDgxMC00YmY3LTg3 MjItODYzNWZiMGM3NzQ3LzEyZTY2MmY2LTQ4MTAtNGJmNy04NzIyLTg2MzVmYjBj Nzc0Ny5jcmwwHwYDVR0jBBgwFoAUYNwiQQnT5p26pFGpTvPGJZsOEqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMmU2NjJmNi00ODEwLTRiZjctODcyMi04NjM1 ZmIwYzc3NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFoHsfjJc/H8+5DzrwWbKlUrI8gnmOqr8eSDJeEsZ5bhAIKLN9EzhTj qgG8oXmpWGe5xE3sjd+0c9JDF+kMG3qnkdcI3NRZR1d3TVQXagWTW4gQRZTwSIFH 1d5cSlwdYt4RDRj31uNsdkG/WktPfwEJ3EhwlL21g+PrddqzBHE5Zgk06da7G/U6 7vOxwUkqlvnlorjWy8fAJgo1wVRxEWUzcHl5US7RdAMeDdc7Si9NluZseLf2Z4al VYGdzZrDzIQftnqo8PGw1JQ4/nJ6TpSZizKzjVZxB+m2l1QGSC/j+lkpTvHn425m foKuFF4u/Kj8vUMlD39h9kivQkRELxQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:21 2024 by rpki-client on console-ams.rpki-client.org