$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa File: 8810de1f-a392-3d60-8edb-e6eed27b2547.roa (raw, json) Hash identifier: N1KRr/ZaGOMsJ4YdEFIYEAiH4YywDaPHb4HNaAd5+CA= Subject key identifier: 70:6C:91:C6:81:4F:F0:D9:B6:65:5D:8E:24:97:70:44:89:E4:7A:D4 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F432858475A3ED1E6047E649AA5AF9340 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa Signing time: Fri 27 Sep 2024 11:09:17 +0000 ROA not before: Fri 27 Sep 2024 11:09:17 +0000 ROA not after: Thu 26 Dec 2024 12:09:17 +0000 asID: 398343 IP address blocks: 167.253.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:3e:d1:e6:04:7e:64:9a:a5:af:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Sep 27 11:09:17 2024 GMT Not After : Dec 26 12:09:17 2024 GMT Subject: CN=9b890c3c-ac9c-429d-8bdf-8650df4ae248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:73:f6:3b:18:71:fb:d3:d4:4f:31:df:0c: 28:ca:db:07:74:b6:0c:1f:e0:d0:02:ac:6b:46:52: 4b:65:c4:89:01:5a:91:5a:5b:2d:c7:d4:14:6a:cb: 68:01:4b:96:5e:5c:cc:16:a7:c6:6f:fd:b7:67:bd: a9:01:52:15:ea:82:73:99:f5:a3:33:cf:f5:c3:55: 61:21:d7:21:29:d3:07:3f:18:c0:c2:58:30:7d:ae: 3e:9d:ef:0c:27:d4:90:12:cf:91:53:4f:bd:8f:a3: 03:20:a3:f8:04:ee:3f:c7:48:39:0b:4b:f1:ef:af: ab:35:f0:b4:85:f3:a8:eb:1e:6c:0a:d2:68:fc:a2: de:12:b0:45:84:79:eb:88:f5:8f:63:2d:70:f9:86: 85:4a:97:74:e6:98:e7:f0:b4:66:29:21:92:5e:65: 99:34:10:b5:3d:0f:11:18:27:a9:23:36:2f:05:e0: 3f:03:b0:99:ea:1b:a6:e4:31:65:47:c0:23:40:cb: f6:50:94:ec:c8:44:97:44:12:fe:e9:85:12:57:20: 82:62:bb:55:3b:94:f2:10:85:41:5c:d8:56:01:38: f8:cc:0e:70:b2:c3:02:67:d9:21:91:83:b8:a3:1f: 0c:a3:b0:57:b5:67:a0:6a:db:54:a1:0b:50:7f:5c: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:91:C6:81:4F:F0:D9:B6:65:5D:8E:24:97:70:44:89:E4:7A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9e:76:05:29:0d:35:6f:81:ad:9a:60:86:db:d8:fa:ff:66: 00:a2:0b:68:6f:2d:e8:fb:e5:19:56:89:8e:58:cc:62:5d:48: 98:cc:01:65:e8:a0:b8:55:b3:f3:92:b9:2f:73:b1:1b:1f:12: fd:30:15:b8:96:13:2f:9c:d4:af:7e:12:a6:d9:a9:f7:11:35: 98:9c:89:49:36:8d:4e:b5:dc:b8:f7:06:75:76:af:69:a1:b5: aa:91:9c:eb:ad:8a:29:bf:04:11:a9:0d:fe:78:2a:b6:66:19: dd:5d:75:ae:ac:1d:12:44:71:c7:ad:c0:8d:80:8e:81:f2:4f: 79:7c:a2:f8:e4:e4:2f:8b:df:28:2b:35:0e:7e:57:8d:50:da: d8:63:ee:34:2d:af:6c:0e:a7:42:4b:f8:bc:3c:b9:d1:45:9d: 6a:9a:1c:ab:29:c9:0a:a4:13:9e:c4:16:d2:ea:81:d8:67:74: 50:0f:6e:54:25:53:63:64:a6:f3:5e:a0:45:8a:24:91:40:c9: 34:f0:88:32:81:c7:71:e4:b4:4d:b1:a0:2f:65:a7:bc:aa:81: ba:e2:be:5c:9a:66:ad:a2:42:a9:0e:d9:98:16:2d:7c:4d:3a: 5f:6d:2d:db:a2:a8:d0:af:f7:c3:b4:5b:cc:98:71:01:51:4f: 30:94:f8:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdaPtHmBH5kmqWvk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI0MDkyNzExMDkxN1oXDTI0MTIyNjEyMDkxN1owLzEtMCsGA1UEAxMk OWI4OTBjM2MtYWM5Yy00MjlkLThiZGYtODY1MGRmNGFlMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWJz9jsYcfvT1E8x3wwoytsHdLYMH+DQAqxr RlJLZcSJAVqRWlstx9QUastoAUuWXlzMFqfGb/23Z72pAVIV6oJzmfWjM8/1w1Vh IdchKdMHPxjAwlgwfa4+ne8MJ9SQEs+RU0+9j6MDIKP4BO4/x0g5C0vx76+rNfC0 hfOo6x5sCtJo/KLeErBFhHnriPWPYy1w+YaFSpd05pjn8LRmKSGSXmWZNBC1PQ8R GCepIzYvBeA/A7CZ6hum5DFlR8AjQMv2UJTsyESXRBL+6YUSVyCCYrtVO5TyEIVB XNhWATj4zA5wssMCZ9khkYO4ox8Mo7BXtWegattUoQtQf1yKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBskcaBT/DZtmVdjiSXcESJ5HrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvODgxMGRlMWYtYTM5Mi0z ZDYwLThlZGItZTZlZWQyN2IyNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOedgUpDTVvga2aYIbb2Pr/ZgCiC2hvLej75RlWiY5YzGJdSJjMAWXo oLhVs/OSuS9zsRsfEv0wFbiWEy+c1K9+EqbZqfcRNZiciUk2jU613Lj3BnV2r2mh taqRnOutiim/BBGpDf54KrZmGd1dda6sHRJEccetwI2AjoHyT3l8ovjk5C+L3ygr NQ5+V41Q2thj7jQtr2wOp0JL+Lw8udFFnWqaHKspyQqkE57EFtLqgdhndFAPblQl U2NkpvNeoEWKJJFAyTTwiDKBx3HktE2xoC9lp7yqgbrivlyaZq2iQqkO2ZgWLXxN Ol9tLduiqNCv98O0W8yYcQFRTzCU+Hk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:02 2024 by rpki-client on console-fra.rpki-client.org