$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa File: 85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json) Hash identifier: 2UZ/cPWKUs7rwz8IoCb4NdrglRjBYsoEoXbgpf+zgGk= Subject key identifier: 95:5F:92:27:3D:90:17:9F:D2:34:5F:4C:44:DD:89:76:44:80:9D:36 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858471BA5A3F1D1F13020DA94A520 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa Signing time: Thu 05 Sep 2024 01:00:30 +0000 ROA not before: Thu 05 Sep 2024 01:00:30 +0000 ROA not after: Wed 04 Dec 2024 02:00:30 +0000 asID: 16509 IP address blocks: 158.115.158.0/24 maxlen: 24 2606:7bc0:1093::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1b:a5:a3:f1:d1:f1:30:20:da:94:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 5 01:00:30 2024 GMT Not After : Dec 4 02:00:30 2024 GMT Subject: CN=868c6f77-2dd8-45f9-9514-2694e476ef8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:2d:03:c5:53:4e:86:95:89:d7:a6:39:5d: 05:00:8e:2f:02:3a:e5:74:1c:4e:00:5d:1f:f7:0d: 14:01:d3:57:16:88:06:d4:76:77:88:3e:05:a2:40: 0e:d6:94:15:e0:77:a1:67:67:77:03:9c:b0:93:62: e9:76:39:76:ae:66:b6:b7:b9:76:fc:e1:bd:00:15: 9f:7a:81:22:52:50:06:13:51:b0:d3:e6:7a:79:b8: 7a:e1:78:56:ff:52:43:0d:ee:0f:b2:e5:52:7a:9b: 87:d5:3c:e8:a2:47:54:fb:bd:63:e1:4e:33:85:1a: 2d:7d:bd:55:04:6d:0c:e2:f9:bf:ba:eb:f3:42:c4: 3c:e6:14:e5:12:53:f8:db:fa:0a:61:ce:7a:aa:13: b0:f7:ae:61:2e:e0:23:2c:49:f4:75:bb:8c:d6:64: e3:77:9c:ec:5a:0f:e7:2b:65:7f:a2:20:02:98:0a: cc:4e:63:93:e2:ff:de:77:90:3d:bb:da:80:70:84: 04:fa:52:77:3a:49:f5:5d:11:dd:81:b7:e3:68:1f: 79:bb:66:47:f7:9c:e0:a6:43:7a:6a:9c:58:cf:dd: aa:2c:f7:af:f9:dd:99:e4:0f:5a:98:4e:a1:25:e1: 6d:c3:4a:1d:79:ae:92:e3:c7:34:2f:de:b7:f0:61: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:92:27:3D:90:17:9F:D2:34:5F:4C:44:DD:89:76:44:80:9D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.158.0/24 IPv6: 2606:7bc0:1093::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:04:80:b8:05:f8:8b:eb:5c:d2:f7:24:b9:ec:31:91:b1:6a: 98:4d:a5:df:68:96:55:87:e5:90:73:1b:1b:55:e4:c4:8e:c9: 47:5a:50:3c:8d:ca:04:3e:ac:1b:d7:65:3d:e1:78:a5:b3:fc: 3a:10:e2:08:29:cd:44:9f:c0:cd:5c:9e:52:42:f3:49:29:31: 59:7e:ba:19:f9:7f:d8:4e:0a:a5:54:76:c4:ad:28:dd:c1:02: 82:08:c8:35:06:1d:7a:53:d8:10:68:f7:cd:f0:5a:0b:9a:9f: 65:ea:d6:1e:cc:27:dd:18:aa:c3:66:0f:e1:d0:03:9a:cc:fc: e4:3d:91:94:2d:f8:1d:00:80:95:e1:f1:d9:4b:39:8b:cf:32: 02:12:b6:ca:4a:4d:1d:24:bf:4d:05:b3:07:cb:73:c4:5c:ed: 67:25:cd:60:1d:ad:6a:81:3b:f4:3a:6a:2f:1a:95:50:69:d8: 3a:dd:0e:09:ad:96:8e:8a:e2:6a:fc:84:19:95:5e:e7:9a:ae: d1:db:af:a3:b2:6b:95:4b:61:2f:ec:ca:21:3d:a0:1e:5c:f6: 89:9a:82:c0:eb:99:8c:e9:be:13:bf:83:2c:5a:a3:05:e8:2e: be:f2:32:2b:33:d4:94:fa:97:94:88:77:60:8a:a8:9d:30:d5: 71:0a:f2:3c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEcbpaPx0fEwINqUpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDkwNTAxMDAzMFoXDTI0MTIwNDAyMDAzMFowLzEtMCsGA1UEAxMk ODY4YzZmNzctMmRkOC00NWY5LTk1MTQtMjY5NGU0NzZlZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirQtA8VTToaVidemOV0FAI4vAjrldBxOAF0f 9w0UAdNXFogG1HZ3iD4FokAO1pQV4HehZ2d3A5ywk2Lpdjl2rma2t7l2/OG9ABWf eoEiUlAGE1Gw0+Z6ebh64XhW/1JDDe4PsuVSepuH1TzookdU+71j4U4zhRotfb1V BG0M4vm/uuvzQsQ85hTlElP42/oKYc56qhOw965hLuAjLEn0dbuM1mTjd5zsWg/n K2V/oiACmArMTmOT4v/ed5A9u9qAcIQE+lJ3Okn1XRHdgbfjaB95u2ZH95zgpkN6 apxYz92qLPev+d2Z5A9amE6hJeFtw0odea6S48c0L9638GEeBQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJVfkic9kBef0jRfTETdiXZEgJ02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODUyNDBjYTctNDFlOS0z MjliLThhMjktMzA3MTg3ZjU2NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOeMA8E AgACMAkDBwAmBnvAEJMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjQSAuAX4i+tc0vckuewxkbFqmE2l32iW VYflkHMbG1XkxI7JR1pQPI3KBD6sG9dlPeF4pbP8OhDiCCnNRJ/AzVyeUkLzSSkx WX66Gfl/2E4KpVR2xK0o3cECggjINQYdelPYEGj3zfBaC5qfZerWHswn3Riqw2YP 4dADmsz85D2RlC34HQCAleHx2Us5i88yAhK2ykpNHSS/TQWzB8tzxFztZyXNYB2t aoE79DpqLxqVUGnYOt0OCa2WjoriavyEGZVe55qu0duvo7JrlUthL+zKIT2gHlz2 iZqCwOuZjOm+E7+DLFqjBeguvvIyKzPUlPqXlIh3YIqonTDVcQryPA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:18:05 2024 by rpki-client on console-ams.rpki-client.org