$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json) Hash identifier: 17vP8SGsCC/zj00SCpgC56WyCBZaBxeQMJPfV/+h+eg= Subject key identifier: 7B:B5:6D:AC:56:07:0C:B8:3F:EB:F8:DF:03:45:78:5E:4A:46:35:94 Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F43285847B266A0EC775210B4E16E0A80 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa Signing time: Tue 29 Oct 2024 01:00:32 +0000 ROA not before: Tue 29 Oct 2024 01:00:32 +0000 ROA not after: Mon 27 Jan 2025 02:00:32 +0000 asID: 16920 IP address blocks: 128.224.254.0/24 maxlen: 24 128.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:66:a0:ec:77:52:10:b4:e1:6e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: Oct 29 01:00:32 2024 GMT Not After : Jan 27 02:00:32 2025 GMT Subject: CN=b4b51bb8-07fc-4257-895e-be8b784ea37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:65:10:50:0e:7b:f6:8d:e5:ff:db:7c:f2: d3:b7:08:2d:b9:31:3c:15:03:8b:d8:ed:f3:a7:07: 28:85:25:5e:9b:8e:b2:dd:ed:9f:f0:21:2f:47:22: b5:96:d2:18:c0:09:9c:be:f5:fc:15:55:6a:a3:63: a0:f9:10:7b:42:c9:6b:8b:2f:37:33:38:4f:7a:8e: a5:3c:37:1d:38:0b:25:78:31:06:ec:3d:70:c1:23: ba:2c:cc:1b:5d:1c:df:55:05:db:c0:66:be:39:29: 24:3a:0b:a7:3a:e5:f7:af:8d:64:a9:4e:c0:cf:53: 83:1a:3b:5a:d7:2b:6b:b6:f2:41:08:46:b8:b0:ba: 6b:a4:75:11:4f:7b:c8:d8:ef:66:f1:ae:52:f2:73: 48:af:b5:18:b9:11:f2:70:f1:1a:43:b0:54:1f:f9: 13:fa:44:98:26:fb:53:99:2f:fd:35:fa:67:ea:2b: 25:31:96:b0:40:61:98:2a:97:02:4e:bb:f0:3d:1f: b1:a2:f0:61:52:bf:f8:c5:3c:82:4a:8d:d4:57:58: fe:73:60:83:59:13:73:fe:98:31:e8:68:13:ff:cd: 7f:97:6b:d5:78:de:03:66:db:80:03:6d:85:94:5c: 6c:71:d6:fb:4d:13:ce:a4:8c:f5:65:e5:77:8a:10: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B5:6D:AC:56:07:0C:B8:3F:EB:F8:DF:03:45:78:5E:4A:46:35:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: 128.224.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:45:75:5c:45:b9:9f:1d:30:b1:00:56:11:38:21:4b:12:c9: c4:35:52:f9:d9:13:57:74:16:cd:e8:28:92:84:81:23:6e:c0: d7:c9:e7:16:56:2f:47:dd:16:9a:83:86:e0:39:ca:08:d1:26: 7a:8f:c1:54:9b:a2:02:a1:2f:38:cb:79:2d:60:8d:ae:4f:08: b5:a4:f1:50:76:68:c2:b3:a2:c4:81:e5:e8:db:4d:e4:84:6f: b1:9e:19:aa:ee:06:ff:56:56:f4:0c:a4:c7:c1:b6:d4:91:d1: d4:bf:6c:8a:d5:e2:95:01:73:7e:60:d0:41:4b:77:02:0c:a0: 82:70:84:5d:b6:25:a1:f6:f4:a3:61:ed:6f:11:56:9f:2e:8b: 2d:d4:61:e1:85:7f:79:08:95:e7:1d:da:48:c7:22:f7:d9:f2: c6:0b:54:11:24:29:a1:22:8f:c7:d1:f9:29:7a:ae:54:68:57: 00:45:f5:03:76:78:81:92:05:66:ff:74:53:d2:b7:38:12:f5: 14:55:34:2c:3c:cc:44:5c:ee:6a:9c:76:26:b7:0c:2d:c1:b9: f1:04:0d:c1:ba:3f:63:96:e7:8b:0e:79:dc:af:2a:e2:93:b8: f3:1e:52:3b:17:e2:01:1e:40:45:0f:1a:52:ea:f2:6d:ac:0c: dd:83:4e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeyZqDsd1IQtOFuCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk YjRiNTFiYjgtMDdmYy00MjU3LTg5NWUtYmU4Yjc4NGVhMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqllEFAOe/aN5f/bfPLTtwgtuTE8FQOL2O3z pwcohSVem46y3e2f8CEvRyK1ltIYwAmcvvX8FVVqo2Og+RB7Qslriy83MzhPeo6l PDcdOAsleDEG7D1wwSO6LMwbXRzfVQXbwGa+OSkkOgunOuX3r41kqU7Az1ODGjta 1ytrtvJBCEa4sLprpHURT3vI2O9m8a5S8nNIr7UYuRHycPEaQ7BUH/kT+kSYJvtT mS/9Nfpn6islMZawQGGYKpcCTrvwPR+xovBhUr/4xTyCSo3UV1j+c2CDWRNz/pgx 6GgT/81/l2vVeN4DZtuAA22FlFxscdb7TRPOpIz1ZeV3ihBSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu1baxWBwy4P+v43wNFeF5KRjWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9FdVxFuZ8dMLEAVhE4IUsSycQ1UvnZE1d0Fs3oKJKEgSNuwNfJ5xZW L0fdFpqDhuA5ygjRJnqPwVSbogKhLzjLeS1gja5PCLWk8VB2aMKzosSB5ejbTeSE b7GeGaruBv9WVvQMpMfBttSR0dS/bIrV4pUBc35g0EFLdwIMoIJwhF22JaH29KNh 7W8RVp8uiy3UYeGFf3kIlecd2kjHIvfZ8sYLVBEkKaEij8fR+Sl6rlRoVwBF9QN2 eIGSBWb/dFPStzgS9RRVNCw8zERc7mqcdia3DC3BufEEDcG6P2OW54sOedyvKuKT uPMeUjsX4gEeQEUPGlLq8m2sDN2DTow= -----END CERTIFICATE-----Generated at Fri Nov 22 11:39:39 2024 by rpki-client on console-fra.rpki-client.org