$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa File: a08f2739-bc57-3f01-8de6-25e8506410f0.roa (raw, json) Hash identifier: /ws7camkNBWy1TVJMIauLZQKWm2NRxYTrM2vOQ9apHY= Subject key identifier: 5D:00:9E:D5:EA:52:B7:4B:80:27:9C:50:24:DA:E4:A9:CA:BB:2A:B3 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F432858477EC10B252EB1DB1833D7B380 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 15092 IP address blocks: 161.199.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:0b:25:2e:b1:db:18:33:d7:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=f77a7416-4079-47d4-8737-789e192721e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:b8:01:43:67:5f:ba:22:1e:75:f3:34:9a: 0a:8d:96:15:50:3d:6e:b1:c2:9c:0e:8e:29:28:79: 9a:92:bf:18:89:c9:ba:ee:47:94:8d:41:15:89:49: bd:51:bf:5c:24:c0:97:9f:6e:e3:79:5b:7e:36:b2: ec:af:0e:48:71:8d:99:f3:b8:57:aa:c2:70:4f:89: 0e:6b:99:5d:1a:de:96:f8:c3:90:ef:e2:f4:0e:40: 20:58:57:68:da:e7:a6:68:9e:d7:92:b8:27:53:30: a5:e3:8f:60:0d:c1:db:34:81:99:e2:9e:62:46:4d: 4a:da:50:e4:ba:b9:11:9c:fd:95:ad:36:2f:b7:17: 68:17:78:80:27:45:a3:31:bf:b7:46:98:7f:87:05: b1:97:53:1f:ff:d0:00:1d:f5:f5:34:3d:03:bf:0b: 98:50:65:97:fe:3a:dd:f3:0d:a0:f1:22:5d:de:2e: a7:1a:54:cc:31:44:31:60:ce:08:7c:74:f8:3d:e3: fd:94:63:d3:32:9a:0d:05:81:4c:5a:80:9c:49:65: 8d:20:23:76:e4:d8:db:44:39:d0:bd:89:87:3b:a1: cb:20:34:2a:47:c2:f9:11:c4:62:3f:3f:d5:43:de: 61:af:32:f5:66:b5:d2:0f:f5:df:71:61:9c:d6:77: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:00:9E:D5:EA:52:B7:4B:80:27:9C:50:24:DA:E4:A9:CA:BB:2A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 161.199.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b0:85:d2:86:27:25:2e:9b:07:84:94:56:4d:fb:5d:9f:10: ce:d8:e2:4d:a1:f9:9f:33:ac:4f:97:f3:6a:3f:18:64:f8:f1: fe:97:d0:ec:fe:95:a8:08:65:d1:25:29:59:4d:69:e5:0c:2d: e4:de:3d:52:89:69:e4:6d:f1:c4:8e:6a:d3:fc:85:33:66:78: 0d:da:6e:e3:71:5f:04:00:14:89:41:d2:d0:d2:0f:09:a0:77: 9a:3a:4d:4c:05:7c:db:aa:63:fb:fd:97:12:a5:7a:65:3b:24: 2d:aa:1e:76:ee:7a:9b:58:f8:18:7a:e1:4e:c5:bc:0c:82:17: d9:8f:3d:46:1c:d3:82:76:a9:56:6a:57:8b:78:56:fe:ba:a1: c1:e0:f1:c9:49:f2:25:3d:b7:b0:20:f8:13:1a:db:c9:06:e4: 58:4f:f6:51:47:15:a2:2f:25:47:1a:e4:42:5f:41:32:3d:d1: a7:2d:d7:85:a9:fd:0c:b2:e4:b0:f5:11:52:3f:7d:64:f2:71: 69:7e:dc:c2:64:e5:ca:c4:3b:a1:3b:58:5c:a9:9b:38:e7:d6: 23:fb:01:39:bc:70:fd:43:06:a0:80:c2:03:c3:a9:cb:cb:68: 29:05:a4:2c:de:20:8e:e5:c9:4b:69:c6:b3:41:87:aa:9a:b2: 4c:80:b4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wQslLrHbGDPXs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk Zjc3YTc0MTYtNDA3OS00N2Q0LTg3MzctNzg5ZTE5MjcyMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4S4AUNnX7oiHnXzNJoKjZYVUD1uscKcDo4p KHmakr8Yicm67keUjUEViUm9Ub9cJMCXn27jeVt+NrLsrw5IcY2Z87hXqsJwT4kO a5ldGt6W+MOQ7+L0DkAgWFdo2uemaJ7XkrgnUzCl449gDcHbNIGZ4p5iRk1K2lDk urkRnP2VrTYvtxdoF3iAJ0WjMb+3Rph/hwWxl1Mf/9AAHfX1ND0DvwuYUGWX/jrd 8w2g8SJd3i6nGlTMMUQxYM4IfHT4PeP9lGPTMpoNBYFMWoCcSWWNICN25NjbRDnQ vYmHO6HLIDQqR8L5EcRiPz/VQ95hrzL1ZrXSD/XfcWGc1nfA1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0AntXqUrdLgCecUCTa5KnKuyqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYTA4ZjI3MzktYmM1Ny0z ZjAxLThkZTYtMjVlODUwNjQxMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADawhdKGJyUumweElFZN+12fEM7Y4k2h+Z8zrE+X82o/GGT48f6X0Oz+ lagIZdElKVlNaeUMLeTePVKJaeRt8cSOatP8hTNmeA3abuNxXwQAFIlB0tDSDwmg d5o6TUwFfNuqY/v9lxKlemU7JC2qHnbueptY+Bh64U7FvAyCF9mPPUYc04J2qVZq V4t4Vv66ocHg8clJ8iU9t7Ag+BMa28kG5FhP9lFHFaIvJUca5EJfQTI90act14Wp /Qyy5LD1EVI/fWTycWl+3MJk5crEO6E7WFypmzjn1iP7ATm8cP1DBqCAwgPDqcvL aCkFpCzeII7lyUtpxrNBh6qaskyAtFA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:27 2024 by rpki-client on console-fra.rpki-client.org