$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa File: 22bea922-373a-3050-a929-ae142e552b24.roa (raw, json) Hash identifier: EXp912mGUtoDSiXY4gNXox+vghxGcfstSnLQiKyW33o= Subject key identifier: 5F:0D:72:F2:E7:3A:1C:AB:08:EB:A9:26:4C:1B:A2:12:62:61:56:72 Certificate issuer: /CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e Certificate serial: 010D0C9F432858475910C34737AA1259D3E143C0 Authority key identifier: 05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 165.140.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:c3:47:37:aa:12:59:d3:e1:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=8cf3703d-313d-4a92-86d6-09418c032d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:ce:06:3e:8c:9e:1f:31:01:a3:17:73:2d: 88:1d:04:0a:12:4a:57:87:3c:23:58:37:bd:97:9c: 1b:80:cc:80:51:a1:50:c0:45:dd:90:a5:ef:7e:cf: 0c:e3:d8:02:06:5f:0d:ec:34:94:8e:c5:ec:2e:39: 37:9e:9f:68:d2:2d:d1:31:9d:5b:31:7e:17:39:4d: 26:03:db:af:8f:69:68:46:7a:95:22:dd:d0:16:5f: 6d:01:a6:1c:0d:99:1e:f1:8b:d4:9e:d1:c8:7e:e6: 6a:bb:10:d2:9d:ec:b0:33:61:f2:58:20:c0:0d:cc: 27:28:af:2a:2d:9b:1e:d0:0c:8c:20:c0:07:dc:1f: d7:87:bb:8f:90:ed:81:db:30:66:9e:fa:4b:ea:5e: 95:25:f3:9c:7f:aa:e2:61:bf:d3:6f:19:7b:25:1a: b6:6f:e7:54:74:7c:cb:64:92:27:5d:da:29:39:4b: 87:b7:11:b6:f8:69:b5:cc:7a:20:39:1c:8d:82:e7: e4:5a:11:b7:64:a8:90:d5:8a:7e:04:d7:0d:92:15: ff:40:4e:b7:cb:29:9c:99:85:87:83:63:22:8c:86: b9:39:dc:a7:37:11:47:29:6f:69:e1:e0:5d:a1:c3: 38:58:27:35:25:e7:c9:76:7d:c4:7a:3c:36:0b:58: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0D:72:F2:E7:3A:1C:AB:08:EB:A9:26:4C:1B:A2:12:62:61:56:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/22bea922-373a-3050-a929-ae142e552b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl X509v3 Authority Key Identifier: keyid:05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer sbgp-ipAddrBlock: critical IPv4: 165.140.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:95:bc:e4:95:44:10:a9:85:66:90:f9:73:ae:77:50:4a:54: a3:21:e1:20:bd:5e:78:70:ed:1c:1a:5f:33:19:38:3b:97:f2: 5a:99:23:c0:29:51:3e:18:d7:c7:39:04:41:dd:45:4e:ba:99: 71:e3:3c:16:0d:31:25:eb:fa:ff:ec:15:b0:ae:09:eb:ae:86: 38:1f:36:af:c2:5b:33:00:8c:6c:23:ce:de:31:f7:3f:f3:c8: de:e5:14:8c:8c:e1:a9:62:dd:a0:26:b1:71:50:03:ec:af:39: e1:80:03:65:00:1e:32:9c:11:35:a6:e6:ad:af:31:e4:ab:24: 68:b7:90:7d:53:a2:8e:cb:6a:43:c6:8c:44:cf:de:44:89:4c: 3a:3d:e2:c1:6a:a3:b3:54:ec:a8:d1:6d:1c:45:1a:53:a8:74: 86:7b:e6:54:e1:22:a5:53:c6:fc:f3:34:49:42:77:88:e7:b8: 19:b4:db:50:ac:34:a4:9d:4c:8d:9f:9b:28:6a:80:39:50:4f: fd:21:82:b4:99:51:97:0d:ae:44:28:ea:2b:23:7e:03:dc:7e: 21:3f:1f:b6:ae:7c:15:fe:de:d1:78:15:59:67:bf:09:5e:b7: 08:c1:36:ef:85:5e:4b:3e:11:31:df:fe:1a:02:ca:fa:1e:16: a6:1d:5b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMNHN6oSWdPhQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhhYjIwNjUtZWM2NS00MWI3LWIyNGQtY2Q4ZDljMmMy NzZlMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk OGNmMzcwM2QtMzEzZC00YTkyLTg2ZDYtMDk0MThjMDMyZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaXOBj6Mnh8xAaMXcy2IHQQKEkpXhzwjWDe9 l5wbgMyAUaFQwEXdkKXvfs8M49gCBl8N7DSUjsXsLjk3np9o0i3RMZ1bMX4XOU0m A9uvj2loRnqVIt3QFl9tAaYcDZke8YvUntHIfuZquxDSneywM2HyWCDADcwnKK8q LZse0AyMIMAH3B/Xh7uPkO2B2zBmnvpL6l6VJfOcf6riYb/Tbxl7JRq2b+dUdHzL ZJInXdopOUuHtxG2+Gm1zHogORyNgufkWhG3ZKiQ1Yp+BNcNkhX/QE63yymcmYWH g2MijIa5OdynNxFHKW9p4eBdocM4WCc1JefJdn3Eejw2C1jfzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8NcvLnOhyrCOupJkwbohJiYVZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGFi MjA2NS1lYzY1LTQxYjctYjI0ZC1jZDhkOWMyYzI3NmUvMjJiZWE5MjItMzczYS0z MDUwLWE5MjktYWUxNDJlNTUyYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhhYjIwNjUtZWM2NS00MWI3LWIy NGQtY2Q4ZDljMmMyNzZlLzg4YWIyMDY1LWVjNjUtNDFiNy1iMjRkLWNkOGQ5YzJj Mjc2ZS5jcmwwHwYDVR0jBBgwFoAUBdBmTQWRvaUSnYbf/jaMNgG5Yh0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGFiMjA2NS1lYzY1LTQxYjctYjI0ZC1jZDhk OWMyYzI3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGVvOSVRBCphWaQ+XOud1BKVKMh4SC9Xnhw7RwaXzMZODuX8lqZI8Ap UT4Y18c5BEHdRU66mXHjPBYNMSXr+v/sFbCuCeuuhjgfNq/CWzMAjGwjzt4x9z/z yN7lFIyM4ali3aAmsXFQA+yvOeGAA2UAHjKcETWm5q2vMeSrJGi3kH1Too7LakPG jETP3kSJTDo94sFqo7NU7KjRbRxFGlOodIZ75lThIqVTxvzzNElCd4jnuBm021Cs NKSdTI2fmyhqgDlQT/0hgrSZUZcNrkQo6isjfgPcfiE/H7aufBX+3tF4FVlnvwle twjBNu+FXks+ETHf/hoCyvoeFqYdW6o= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:24 2024 by rpki-client on console-ams.rpki-client.org