$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json) Hash identifier: h1/vD9xzN6S5JFqxJGHTwjErhUnfi4OcPGiKmoW8K2w= Subject key identifier: 62:20:84:F4:6A:83:31:2D:57:91:35:AA:19:53:E8:66:1F:BA:C4:EC Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F43285847845678D5246AF7FD08D43E80 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 833 IP address blocks: 165.140.200.0/24 maxlen: 24 165.140.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:78:d5:24:6a:f7:fd:08:d4:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=0e17e3b9-af08-4b72-97b3-fdb9a71fd344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:5a:fe:f9:65:64:9e:fa:b7:81:92:1b:ac: 30:90:6b:a5:fb:ee:24:fb:a6:55:4d:91:b4:92:fe: 4f:73:87:b5:17:e9:8c:da:97:4a:75:aa:d2:9b:e4: 90:65:08:1e:e1:77:48:20:ba:5f:a7:f4:16:a9:65: c7:53:37:b4:84:43:56:ef:ef:e5:d9:ce:f6:8e:39: cf:db:83:82:db:e7:f5:d8:56:94:1c:02:e6:be:f2: 08:1d:c2:89:40:b1:e1:00:9d:96:d3:2f:5b:bb:9c: 23:92:cb:d3:d7:6d:48:29:82:d4:4c:9a:1e:35:e7: f6:19:d1:43:b9:29:31:e5:22:3f:7a:53:71:00:4c: 74:59:b8:a4:e1:3b:5c:68:62:09:95:07:8d:25:b7: c7:53:30:57:9b:8d:25:d2:a5:60:55:dc:61:04:c9: f3:00:86:97:0f:a9:0c:21:30:91:fb:05:c8:90:4f: a0:60:4e:0e:b0:60:b5:18:e1:46:fc:1c:84:53:5f: 8a:9a:55:52:6a:19:f6:e4:24:8f:3d:06:28:63:36: 91:b9:11:24:d8:b6:5e:21:ec:19:6a:10:db:0b:1c: db:d1:86:24:12:54:36:99:f2:5d:76:1f:29:83:9f: 3b:f2:96:e2:98:8c:86:a0:e2:c6:c7:2e:5f:bf:81: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:20:84:F4:6A:83:31:2D:57:91:35:AA:19:53:E8:66:1F:BA:C4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:25:a3:ea:26:91:27:18:d5:74:cb:91:7c:04:4c:80:d1:8f: 46:ce:3e:a8:1e:b1:10:29:e5:f9:5f:93:f6:1b:06:bf:81:9a: fc:3c:f2:27:c2:b2:27:21:18:26:36:7a:b9:7d:f2:d8:15:f4: 7f:90:15:7f:b0:90:59:81:64:61:1f:3c:bc:a5:1f:df:ae:46: 01:f2:d8:17:60:96:3c:cd:9d:75:12:14:75:a7:2c:5f:dc:1c: 7c:25:4c:2e:71:dd:fb:a8:77:3f:84:db:c1:84:21:60:59:00: 94:a5:64:75:02:70:ac:97:0f:3b:e9:48:2b:74:5e:bc:3a:2a: 2f:49:15:73:0a:1d:32:e7:47:13:33:2a:ed:c3:d1:16:de:13: 01:58:c6:0b:56:3a:79:d0:e3:be:19:7a:2e:96:a6:e0:58:61: 00:98:46:24:62:7f:b4:a3:2d:0e:51:02:f7:d2:60:6d:1c:0b: 6d:ac:10:8b:ba:e3:33:8d:d9:f8:d3:43:cb:df:2e:78:fb:2c: 4f:26:85:d0:4b:db:89:2c:e7:dc:d8:19:13:f4:46:39:5a:cc: 61:24:cc:bb:67:8a:34:ec:bf:31:29:82:0c:e7:07:e9:2e:0e: 1a:06:1c:17:95:78:43:47:c8:31:6b:56:23:77:7e:69:d0:e3: 77:8c:8b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVnjVJGr3/QjUPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk MGUxN2UzYjktYWYwOC00YjcyLTk3YjMtZmRiOWE3MWZkMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2la/vllZJ76t4GSG6wwkGul++4k+6ZVTZG0 kv5Pc4e1F+mM2pdKdarSm+SQZQge4XdIILpfp/QWqWXHUze0hENW7+/l2c72jjnP 24OC2+f12FaUHALmvvIIHcKJQLHhAJ2W0y9bu5wjksvT121IKYLUTJoeNef2GdFD uSkx5SI/elNxAEx0Wbik4TtcaGIJlQeNJbfHUzBXm40l0qVgVdxhBMnzAIaXD6kM ITCR+wXIkE+gYE4OsGC1GOFG/ByEU1+KmlVSahn25CSPPQYoYzaRuREk2LZeIewZ ahDbCxzb0YYkElQ2mfJddh8pg5878pbimIyGoOLGxy5fv4FB2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIghPRqgzEtV5E1qhlT6GYfusTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNzIwZDNlOWMtZTgwYi0z OTg5LWE5ZDctNGIzNWYxZDEwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0lo+omkScY1XTLkXwETIDRj0bOPqgesRAp5flfk/YbBr+Bmvw88ifC sichGCY2erl98tgV9H+QFX+wkFmBZGEfPLylH9+uRgHy2BdgljzNnXUSFHWnLF/c HHwlTC5x3fuodz+E28GEIWBZAJSlZHUCcKyXDzvpSCt0Xrw6Ki9JFXMKHTLnRxMz Ku3D0RbeEwFYxgtWOnnQ474Zei6WpuBYYQCYRiRif7SjLQ5RAvfSYG0cC22sEIu6 4zON2fjTQ8vfLnj7LE8mhdBL24ks59zYGRP0RjlazGEkzLtnijTsvzEpggznB+ku DhoGHBeVeENHyDFrViN3fmnQ43eMix8= -----END CERTIFICATE-----Generated at Fri Nov 22 09:32:29 2024 by rpki-client on console-fra.rpki-client.org