$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa File: 5ba90132-30fd-3e7f-a67e-05193a6cd348.roa (raw, json) Hash identifier: cY1qTqc0FYdy0DqFWnyNa8KYK+xVvNI4BYoeR9CZyLA= Subject key identifier: 9B:41:D6:70:A4:0B:B2:A2:64:D1:9D:82:A3:2A:15:95:DB:6E:54:1B Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Certificate serial: 010D0C9F4328584765A0EDA7F7043574643438C0 Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 7922 IP address blocks: 134.195.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:ed:a7:f7:04:35:74:64:34:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=f7fc63cb-f0c6-4be6-811e-17834370c34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:ca:e9:59:fb:e9:ae:2e:41:05:c4:60:ff: 79:c4:d1:40:39:7c:67:ef:ba:a3:73:75:00:c6:92: ef:b1:2e:c7:0b:1e:87:fc:bd:ce:aa:e8:0c:f5:fd: 64:bc:f1:bb:e9:e9:f4:12:0d:82:04:a3:d4:d0:5d: ec:92:af:b8:a1:14:5c:3d:d4:98:c6:02:09:4a:85: 71:32:65:4e:bc:02:d0:a7:d5:2d:37:6a:b1:01:0a: 14:d2:92:c4:88:6b:81:b8:21:26:04:40:30:dc:4d: 0e:7e:d5:ec:e2:c3:33:b7:7c:49:c2:74:01:68:b6: c0:8e:03:b2:41:30:c6:0d:ef:eb:ae:e6:68:04:67: dc:98:38:45:68:96:22:6a:f2:f9:f9:46:47:fa:09: ba:fe:69:6d:6d:ce:92:33:70:cf:44:8c:32:f5:65: e9:3e:4d:00:d8:54:67:ff:9b:e1:6a:c4:38:37:b4: 5a:ee:11:b1:8b:a3:5c:aa:76:07:ec:f9:4b:47:23: 62:4e:5d:09:3b:ed:35:21:e3:67:23:b8:f7:54:f9: e7:17:92:ae:da:44:37:b5:b0:70:95:c5:8e:7a:f5: 1c:a4:a7:ee:16:86:23:e7:3e:f0:76:1b:a6:35:e3: 8c:00:0f:34:54:73:0c:93:1a:0f:4f:f8:1d:b2:b2: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:D6:70:A4:0B:B2:A2:64:D1:9D:82:A3:2A:15:95:DB:6E:54:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl X509v3 Authority Key Identifier: keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer sbgp-ipAddrBlock: critical IPv4: 134.195.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:77:97:17:6a:f3:c5:c0:7e:91:27:f6:18:43:e6:03:40:fc: e2:cd:34:8b:52:b6:4b:ac:d3:67:7a:e4:e5:e3:d2:a8:d2:5e: 15:70:32:d5:1b:34:50:cb:5a:5b:b8:00:13:fd:3c:83:44:23: 03:19:17:7f:31:6f:8b:7d:d5:2e:c6:23:6f:70:7e:9d:d8:23: 45:16:20:b4:43:d7:49:ca:82:27:b8:ef:e8:f2:e1:a2:c2:80: 83:b2:38:7e:ac:9e:ff:9b:32:c0:89:e2:b7:11:da:b3:25:89: ba:e8:a8:f5:28:f6:9b:4d:4b:02:b4:bf:fa:4a:d8:17:21:1c: de:68:50:02:46:6d:48:ff:4c:cc:d6:1b:b1:78:59:17:d9:c6: a6:22:43:1f:fb:ab:f8:cb:b0:76:d3:d7:de:35:86:0a:cc:3b: 12:b7:37:1f:59:90:82:1c:c1:9b:d7:d0:70:57:ab:e2:d3:4c: bd:cb:3e:29:89:30:93:03:c2:5e:6e:20:82:54:9c:f2:40:74: ed:6f:e1:0b:c7:6d:07:98:fd:a6:00:dd:04:ad:63:d4:15:e7: 90:01:cb:a4:ba:07:a9:92:2e:49:b6:82:5a:19:86:87:3b:85: ea:fa:56:86:5e:94:cf:d5:2c:12:f2:50:26:e9:c9:8b:c1:cf: 1c:44:a1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloO2n9wQ1dGQ0OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FiYTU1YWUtODMzYS00NDg3LThiZTEtOWI5OTdhZGJi ZWM5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk ZjdmYzYzY2ItZjBjNi00YmU2LTgxMWUtMTc4MzQzNzBjMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi77K6Vn76a4uQQXEYP95xNFAOXxn77qjc3UA xpLvsS7HCx6H/L3OqugM9f1kvPG76en0Eg2CBKPU0F3skq+4oRRcPdSYxgIJSoVx MmVOvALQp9UtN2qxAQoU0pLEiGuBuCEmBEAw3E0OftXs4sMzt3xJwnQBaLbAjgOy QTDGDe/rruZoBGfcmDhFaJYiavL5+UZH+gm6/mltbc6SM3DPRIwy9WXpPk0A2FRn /5vhasQ4N7Ra7hGxi6NcqnYH7PlLRyNiTl0JO+01IeNnI7j3VPnnF5Ku2kQ3tbBw lcWOevUcpKfuFoYj5z7wdhumNeOMAA80VHMMkxoPT/gdsrIYjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtB1nCkC7KiZNGdgqMqFZXbblQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWJh NTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5N2FkYmJlYzkvNWJhOTAxMzItMzBmZC0z ZTdmLWE2N2UtMDUxOTNhNmNkMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FiYTU1YWUtODMzYS00NDg3LThi ZTEtOWI5OTdhZGJiZWM5LzdhYmE1NWFlLTgzM2EtNDQ4Ny04YmUxLTliOTk3YWRi YmVjOS5jcmwwHwYDVR0jBBgwFoAUm7mq9xQHJPlj+rsVMn+tqskRLrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YWJhNTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5 N2FkYmJlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN3lxdq88XAfpEn9hhD5gNA/OLNNItStkus02d65OXj0qjSXhVwMtUb NFDLWlu4ABP9PINEIwMZF38xb4t91S7GI29wfp3YI0UWILRD10nKgie47+jy4aLC gIOyOH6snv+bMsCJ4rcR2rMlibroqPUo9ptNSwK0v/pK2BchHN5oUAJGbUj/TMzW G7F4WRfZxqYiQx/7q/jLsHbT1941hgrMOxK3Nx9ZkIIcwZvX0HBXq+LTTL3LPimJ MJMDwl5uIIJUnPJAdO1v4QvHbQeY/aYA3QStY9QV55ABy6S6B6mSLkm2gloZhoc7 her6VoZelM/VLBLyUCbpyYvBzxxEoYQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:02 2024 by rpki-client on console-fra.rpki-client.org