$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json) Hash identifier: taMyEyXjMu4lihshjVB4hV7W5CSV54p2Yip9tmDAazo= Subject key identifier: BC:1F:70:54:AB:5D:67:41:A4:84:D0:56:9C:E6:2F:EB:7F:63:A7:3C Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858471BA5A71D6004027927B9F080 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa Signing time: Thu 05 Sep 2024 01:00:30 +0000 ROA not before: Thu 05 Sep 2024 01:00:30 +0000 ROA not after: Wed 04 Dec 2024 02:00:30 +0000 asID: 14618 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1b:a5:a7:1d:60:04:02:79:27:b9:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 5 01:00:30 2024 GMT Not After : Dec 4 02:00:30 2024 GMT Subject: CN=12ae85e8-d6dd-43ed-b59c-4c9371d1fa15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:54:13:db:95:9a:a2:05:71:ef:e7:eb:f8:a0: 7b:ee:76:55:dc:5e:47:99:2b:bf:c4:c1:63:b8:a0: 44:3e:e9:5c:96:cc:b0:eb:d0:bb:58:aa:28:d7:6d: cf:a0:52:b3:7c:e5:f7:55:a2:7b:e9:27:e1:48:b8: 57:18:b4:c7:74:0e:b9:b6:59:69:cd:0b:34:7d:59: 22:40:1b:f0:4d:fb:49:ff:49:b1:79:9b:f8:6a:be: e6:5b:95:13:a3:07:20:ea:30:81:a5:fc:ab:9c:73: 76:56:fa:cb:87:f5:d5:a9:09:7e:a6:bf:be:30:d3: f0:b5:24:97:bd:ec:cd:f5:b4:9c:01:dd:96:60:b7: d3:05:44:59:f0:34:55:cc:e5:f4:b7:f1:5c:47:ec: c1:7f:18:63:e8:94:25:e0:67:a9:c0:e0:2a:0b:63: 22:eb:cd:7d:4e:e3:a6:71:f4:98:af:8e:4a:5d:fe: 88:41:36:d1:37:ba:e6:c5:be:b3:15:05:90:02:2f: 5f:50:35:b7:6e:84:ac:6b:ae:1b:93:39:32:71:96: c3:1f:0a:79:b6:b4:b1:79:71:4e:57:58:90:da:0c: 06:27:df:b6:04:c0:55:fe:e3:60:f6:a5:e1:68:32: 54:ca:22:f8:e9:48:60:b9:5b:c8:bd:bb:3c:c8:a5: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1F:70:54:AB:5D:67:41:A4:84:D0:56:9C:E6:2F:EB:7F:63:A7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:af:01:9f:bf:64:9f:1d:c5:02:52:7b:7f:5a:93:0d:db:2f: 9e:d6:fc:5d:3e:4a:38:05:3a:54:16:77:31:50:4d:8a:dc:06: d0:12:ff:27:5e:32:f8:db:91:2a:41:59:d2:83:34:fe:f4:ff: 38:01:26:c9:39:9f:5f:d5:37:83:18:57:df:88:1f:ef:e0:9a: 59:77:10:cc:25:3e:23:c6:b0:be:e3:d1:96:a2:21:3d:1f:12: 90:49:bf:56:9c:7b:ac:6a:9f:23:42:dc:1a:65:e8:93:5e:16: 21:43:07:7d:c5:07:45:af:47:93:54:86:2b:1b:47:64:e9:48: 81:66:29:6b:bb:b0:45:32:28:20:98:86:3b:a1:e1:bc:ee:26: 20:a1:77:71:67:38:7b:6c:6d:11:ef:0b:c2:28:2e:be:7e:c7: f6:57:cf:83:0b:0b:26:a9:dd:14:ba:cc:6b:92:8e:67:1c:86: 54:4a:f5:51:32:65:2e:26:65:0c:08:7e:92:fd:74:b4:d6:0a: a3:dd:a6:66:ba:b8:95:73:da:b9:51:fa:a4:ea:b8:97:06:df: a4:3b:fa:bb:46:4b:32:b4:94:fa:d0:a2:a0:1d:d3:8a:95:b3: 8b:01:9a:41:69:9a:04:c1:da:cb:d6:ae:68:b6:18:84:f2:ca: 37:d8:9c:2e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEcbpacdYAQCeSe58IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDkwNTAxMDAzMFoXDTI0MTIwNDAyMDAzMFowLzEtMCsGA1UEAxMk MTJhZTg1ZTgtZDZkZC00M2VkLWI1OWMtNGM5MzcxZDFmYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1QT25WaogVx7+fr+KB77nZV3F5HmSu/xMFj uKBEPulclsyw69C7WKoo123PoFKzfOX3VaJ76SfhSLhXGLTHdA65tllpzQs0fVki QBvwTftJ/0mxeZv4ar7mW5UTowcg6jCBpfyrnHN2VvrLh/XVqQl+pr++MNPwtSSX vezN9bScAd2WYLfTBURZ8DRVzOX0t/FcR+zBfxhj6JQl4GepwOAqC2Mi6819TuOm cfSYr45KXf6IQTbRN7rmxb6zFQWQAi9fUDW3boSsa64bkzkycZbDHwp5trSxeXFO V1iQ2gwGJ9+2BMBV/uNg9qXhaDJUyiL46UhguVvIvbs8yKU7AQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLwfcFSrXWdBpITQVpzmL+t/Y6c8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2E0ZTBhMTgtZDBmOC0z YmU2LTg5NTMtNWZkODI2M2ZkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa68Bn79knx3FAlJ7f1qTDdsvntb8XT5K OAU6VBZ3MVBNitwG0BL/J14y+NuRKkFZ0oM0/vT/OAEmyTmfX9U3gxhX34gf7+Ca WXcQzCU+I8awvuPRlqIhPR8SkEm/Vpx7rGqfI0LcGmXok14WIUMHfcUHRa9Hk1SG KxtHZOlIgWYpa7uwRTIoIJiGO6HhvO4mIKF3cWc4e2xtEe8Lwiguvn7H9lfPgwsL JqndFLrMa5KOZxyGVEr1UTJlLiZlDAh+kv10tNYKo92mZrq4lXPauVH6pOq4lwbf pDv6u0ZLMrSU+tCioB3TipWziwGaQWmaBMHay9auaLYYhPLKN9icLg== -----END CERTIFICATE-----Generated at Thu Nov 21 15:31:39 2024 by rpki-client on console-fra.rpki-client.org