$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa File: f829599e-00f8-3c5a-95c8-1624e200ebd0.roa (raw, json) Hash identifier: XK0h8akmJKyKfmQfm7/GsQZ/NYIBRXNPv+82zoNsDmQ= Subject key identifier: 32:AD:EB:F6:05:6B:9A:9E:08:4D:86:BD:43:4E:43:9E:13:55:63:EF Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F4328584765A0E8E664C958529BFEFE80 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 194 IP address blocks: 128.117.0.0/16 maxlen: 16 192.43.244.0/24 maxlen: 24 192.52.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:e8:e6:64:c9:58:52:9b:fe:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=209a8f3b-f208-4fe0-9c86-0ce605336293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:87:5f:45:f9:06:db:a1:38:85:07:b3:72: cd:5e:24:bf:cc:cd:59:b9:a9:be:dc:43:16:64:28: 16:d6:7d:fd:78:30:79:a8:a0:27:b9:50:a4:53:86: 61:60:7b:42:d8:24:44:2c:bf:cf:27:1b:f3:5e:7b: 36:1d:08:49:7a:95:df:65:8f:8e:d4:ce:97:cf:5c: 8e:a9:5e:c0:7f:ee:72:57:bf:af:61:f6:e8:2e:f5: ac:f0:9f:4e:54:07:61:37:79:2d:4a:5c:3e:7a:b0: 47:61:1f:7f:75:96:a9:f4:6a:9e:1b:0a:e1:ea:2c: d6:b0:ee:30:dc:30:94:f4:08:9b:22:7b:1d:d7:ed: a5:06:80:0a:f8:63:ef:25:07:a5:f6:d2:db:41:32: 52:87:0c:42:04:5b:2b:08:48:91:b9:de:cd:81:83: 15:05:a6:78:d2:3f:18:e1:a8:ab:f0:91:4e:24:ed: 8a:0c:82:8a:7e:8a:24:c3:b5:e7:17:d9:e5:9a:17: 45:17:00:a7:57:7d:90:9f:f7:a5:7c:3b:d4:eb:e2: 6f:94:22:63:0e:6b:be:d4:10:9b:0e:f5:32:34:b5: 38:dd:53:50:29:fb:66:73:7c:15:11:08:8f:66:f9: e2:f9:fe:d8:0f:d7:32:42:d6:05:36:dd:0d:73:f5: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AD:EB:F6:05:6B:9A:9E:08:4D:86:BD:43:4E:43:9E:13:55:63:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/f829599e-00f8-3c5a-95c8-1624e200ebd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 128.117.0.0/16 192.43.244.0/24 192.52.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:21:f6:17:e5:1e:16:a8:8e:e8:fc:09:91:c4:bc:89:f5:75: 53:2d:3f:12:7c:20:5b:eb:c4:4a:3d:38:93:eb:f1:44:ec:16: ba:e2:ee:45:db:0b:8e:89:8c:3b:9e:15:70:d0:0d:da:6f:7d: 83:e2:33:9a:5a:a5:f5:c2:3d:fb:d9:02:d4:a4:8a:74:5d:8d: db:08:4c:9b:c6:1e:d2:2f:39:ec:a3:9f:f4:ac:5c:04:ef:61: 2f:03:62:01:85:27:d2:57:fb:f2:64:7e:15:a1:99:1f:b8:5a: 29:8f:45:8d:06:65:69:ae:2d:ce:b1:1a:78:61:3c:01:1f:fd: 16:be:8b:6d:ce:cc:c4:ea:97:b7:94:8c:f2:1f:31:2f:c7:37: 5e:31:48:1d:fa:9e:19:e7:41:73:ec:9a:c1:12:ba:8b:cc:b0: d6:c3:76:6c:0b:36:55:b6:43:bb:75:73:f8:a7:a6:03:bb:23: de:be:6e:6e:be:57:50:19:db:b3:46:ef:af:9c:a0:04:e5:d2: 3b:20:34:ea:c4:14:97:46:10:f2:8c:33:fa:41:57:61:8d:52: 04:8f:b4:5c:7c:f3:48:20:15:54:4e:87:ce:83:1b:0a:ef:39: 10:00:65:d1:33:bd:1a:87:4e:ab:0b:9f:81:69:9f:48:f7:84: 5a:40:af:77 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEdloOjmZMlYUpv+/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk MjA5YThmM2ItZjIwOC00ZmUwLTljODYtMGNlNjA1MzM2MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqiHX0X5BtuhOIUHs3LNXiS/zM1Zuam+3EMW ZCgW1n39eDB5qKAnuVCkU4ZhYHtC2CRELL/PJxvzXns2HQhJepXfZY+O1M6Xz1yO qV7Af+5yV7+vYfboLvWs8J9OVAdhN3ktSlw+erBHYR9/dZap9GqeGwrh6izWsO4w 3DCU9AibInsd1+2lBoAK+GPvJQel9tLbQTJShwxCBFsrCEiRud7NgYMVBaZ40j8Y 4air8JFOJO2KDIKKfookw7XnF9nlmhdFFwCnV32Qn/elfDvU6+JvlCJjDmu+1BCb DvUyNLU43VNQKftmc3wVEQiPZvni+f7YD9cyQtYFNt0Nc/XWCQIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFDKt6/YFa5qeCE2GvUNOQ54TVWPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZjgyOTU5OWUtMDBmOC0z YzVhLTk1YzgtMTYyNGUyMDBlYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAgHUDBADA K/QDBADANGowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAaSH2F+UeFqiO6PwJkcS8ifV1Uy0/EnwgW+vESj04 k+vxROwWuuLuRdsLjomMO54VcNAN2m99g+Izmlql9cI9+9kC1KSKdF2N2whMm8Ye 0i857KOf9KxcBO9hLwNiAYUn0lf78mR+FaGZH7haKY9FjQZlaa4tzrEaeGE8AR/9 Fr6Lbc7MxOqXt5SM8h8xL8c3XjFIHfqeGedBc+yawRK6i8yw1sN2bAs2VbZDu3Vz +KemA7sj3r5ubr5XUBnbs0bvr5ygBOXSOyA06sQUl0YQ8owz+kFXYY1SBI+0XHzz SCAVVE6HzoMbCu85EABl0TO9GodOqwufgWmfSPeEWkCvdw== -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org