$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: 1BP263X5Ctl8vISmRR168pZ+SdJsCdKcS1npBay7aKQ= Subject key identifier: 01:7C:1B:0D:C7:18:52:6C:FD:F4:72:BA:98:6E:74:45:2C:3B:B3:0D Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858471BA5A3C10823F06B26F29180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Thu 05 Sep 2024 01:00:30 +0000 ROA not before: Thu 05 Sep 2024 01:00:30 +0000 ROA not after: Wed 04 Dec 2024 02:00:30 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1b:a5:a3:c1:08:23:f0:6b:26:f2:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 5 01:00:30 2024 GMT Not After : Dec 4 02:00:30 2024 GMT Subject: CN=e0b1a096-9088-45fb-a52b-436792852694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:d7:53:36:35:f1:cc:d6:46:96:b6:39:87: d2:c4:b3:ce:4f:c2:13:a9:7e:48:05:90:5d:5c:77: b9:d7:dd:b3:ba:7b:6f:9d:c9:60:35:8c:07:bb:8d: ab:6d:32:c8:cd:43:b9:07:ee:a2:de:37:3f:a9:87: e0:32:ea:59:93:12:ba:b9:f2:7a:b7:96:01:0e:3a: 37:1b:21:58:22:86:99:7f:06:b8:a6:b9:dd:b3:1e: fe:91:de:ba:83:42:26:fc:82:23:59:d3:98:e9:99: 34:c0:d2:96:bf:a0:77:d2:66:3a:2a:17:ae:17:82: 4e:28:df:4d:71:16:00:14:d2:8b:04:59:56:a2:3d: 65:5c:ae:25:33:41:22:b9:32:85:d5:b2:3f:dd:97: 55:ce:11:99:0c:3d:b7:74:1c:7e:9b:86:63:81:13: ba:69:d6:f1:8c:43:9b:74:c4:af:30:c6:a6:42:03: 0a:32:23:db:dd:68:dd:4e:d4:68:6d:37:ab:48:66: 9b:3b:af:7c:65:54:9a:29:76:48:5b:6c:f9:77:dd: 9e:03:0b:06:5d:28:f6:61:52:ad:a4:06:bc:0a:56: ef:55:05:39:ab:56:bb:1c:d2:9c:29:35:b7:65:89: 26:98:c3:52:cb:fb:e7:8b:9e:1b:34:9d:89:75:84: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7C:1B:0D:C7:18:52:6C:FD:F4:72:BA:98:6E:74:45:2C:3B:B3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:69:fc:e1:0f:e5:b1:1b:cd:ca:e0:7b:6f:12:f8:64:8d:ce: 66:25:46:d6:b2:66:89:12:1b:2f:98:af:0d:26:09:4f:8f:6e: 07:ea:a3:36:ce:f0:8a:ac:56:fa:72:68:e4:fa:5e:d8:74:be: 71:23:fa:b5:22:04:c1:1d:25:08:53:ee:1f:82:d4:02:bd:73: ca:bb:47:9c:4f:eb:cb:c1:d6:cf:b5:cc:9b:a3:5f:b0:57:01: ba:6b:67:b9:3b:6f:ca:df:b0:2f:cf:32:70:f2:a6:ab:74:0a: a1:3c:7d:4a:8d:63:c1:ed:71:05:2a:40:fc:7c:5f:5a:92:ea: 58:c5:fe:da:99:cf:0d:c4:87:7b:e1:04:8c:35:cd:e4:38:dc: 16:1f:22:b4:fd:de:96:6e:7a:f5:87:c4:61:b2:f5:39:1a:b6: d4:5a:5f:8a:aa:59:71:fd:95:07:c4:d7:be:57:ab:0e:3e:ef: 91:d4:a9:0d:13:ca:84:3e:01:6c:06:83:7a:34:ce:ee:e1:0e: 73:e2:8d:d4:7c:78:c2:91:d5:f3:b6:74:c5:3d:db:2a:e8:4a: 8d:ce:ab:7c:a3:d9:e7:52:87:3b:59:30:5e:46:f5:c3:ed:2d: da:e8:90:8f:4c:18:48:c1:ff:a3:0b:cb:fb:67:23:f0:d7:f4: c5:70:3e:cd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEcbpaPBCCPwaybykYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDkwNTAxMDAzMFoXDTI0MTIwNDAyMDAzMFowLzEtMCsGA1UEAxMk ZTBiMWEwOTYtOTA4OC00NWZiLWE1MmItNDM2NzkyODUyNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix/XUzY18czWRpa2OYfSxLPOT8ITqX5IBZBd XHe5192zuntvnclgNYwHu42rbTLIzUO5B+6i3jc/qYfgMupZkxK6ufJ6t5YBDjo3 GyFYIoaZfwa4prndsx7+kd66g0Im/IIjWdOY6Zk0wNKWv6B30mY6KheuF4JOKN9N cRYAFNKLBFlWoj1lXK4lM0EiuTKF1bI/3ZdVzhGZDD23dBx+m4ZjgRO6adbxjEOb dMSvMMamQgMKMiPb3WjdTtRobTerSGabO698ZVSaKXZIW2z5d92eAwsGXSj2YVKt pAa8ClbvVQU5q1a7HNKcKTW3ZYkmmMNSy/vni54bNJ2JdYQgEQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAF8Gw3HGFJs/fRyuphudEUsO7MNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ2n84Q/lsRvNyuB7bxL4ZI3OZiVG1rJm iRIbL5ivDSYJT49uB+qjNs7wiqxW+nJo5Ppe2HS+cSP6tSIEwR0lCFPuH4LUAr1z yrtHnE/ry8HWz7XMm6NfsFcBumtnuTtvyt+wL88ycPKmq3QKoTx9So1jwe1xBSpA /HxfWpLqWMX+2pnPDcSHe+EEjDXN5DjcFh8itP3elm569YfEYbL1ORq21FpfiqpZ cf2VB8TXvlerDj7vkdSpDRPKhD4BbAaDejTO7uEOc+KN1Hx4wpHV87Z0xT3bKuhK jc6rfKPZ51KHO1kwXkb1w+0t2uiQj0wYSMH/owvL+2cj8Nf0xXA+zQ== -----END CERTIFICATE-----Generated at Thu Nov 21 16:18:05 2024 by rpki-client on console-ams.rpki-client.org