$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json) Hash identifier: yPODo31QMhx3jS/3GlEOT0yRU3TsuT/Ug8LagU2hDqc= Subject key identifier: 02:30:7F:BA:09:D9:EC:EB:1F:4D:A0:60:3C:55:46:88:06:3A:38:3F Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584765A0E6370057C3B34029DC50 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 16509 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:e6:37:00:57:c3:b3:40:29:dc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=0e231298-e772-4244-ae05-67e4e41a1f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dd:9a:e9:42:b8:43:81:c0:a0:95:12:2f:1a: 09:af:45:bb:d9:61:a6:e6:28:49:a5:c0:75:8b:5d: 97:41:65:51:57:65:ca:4c:1d:81:0f:db:9a:50:1d: 9a:50:e3:83:01:a3:83:31:89:c0:bb:4c:0e:97:b6: 58:61:e3:0f:59:39:ba:16:49:88:d2:b6:e6:dc:17: eb:5d:83:eb:e1:12:2a:0a:b2:1e:a4:2c:4b:b2:f1: 82:6a:7b:d3:06:15:34:65:e5:11:55:a8:5f:ff:e9: dc:64:29:d9:a4:ea:96:f1:0e:b6:0c:f7:85:ed:bf: 51:bc:fc:71:29:83:7b:de:4a:a6:31:ba:92:d1:ac: 16:d5:25:9b:21:df:b5:a3:a8:00:de:0a:a4:73:e3: 5c:e2:84:3b:12:1d:be:f2:78:da:d7:f1:72:04:fa: 6a:dd:ae:4a:e5:c2:bc:0e:20:85:15:19:b1:43:40: a6:10:e2:1b:50:95:21:ec:60:74:52:4a:de:73:e0: 59:60:16:a4:50:1c:1c:af:ce:5c:60:ca:40:69:61: 97:00:a8:71:d9:6f:ef:8a:cc:fa:d3:5d:fe:cc:55: 0b:fc:90:3e:d2:78:c1:a7:2c:68:be:82:f7:b5:fb: 00:ca:94:c8:7b:29:76:cf:6a:cc:54:f3:ba:2c:c3: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:30:7F:BA:09:D9:EC:EB:1F:4D:A0:60:3C:55:46:88:06:3A:38:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3a:d4:ff:0d:ae:07:ee:4c:4e:11:af:81:45:57:a5:69:3e: 34:54:b2:e7:73:be:db:89:15:32:b0:c9:7b:85:9a:75:06:1f: 9e:0a:91:37:18:e2:fc:7d:0f:ac:08:54:11:21:1f:6d:5c:7d: 46:87:cc:d3:58:24:97:c4:43:78:8b:89:7e:91:be:80:72:0d: 21:ff:68:43:36:51:7a:17:2f:f7:07:58:ca:c0:e3:cc:d4:26: 05:fb:0b:f9:0b:06:de:c9:4d:45:1c:9f:e7:d7:c4:34:18:a7: 9c:00:07:54:6b:fc:bf:34:45:be:a2:1e:3d:f3:0d:ef:52:c7: c8:a8:7d:9e:b7:1f:e8:8e:db:dc:9e:6e:8f:72:63:a2:b2:e0: 84:f4:f7:91:43:61:aa:77:54:f8:63:f5:7d:ae:14:0b:ff:e9: 0d:b0:9f:34:18:af:d5:ff:30:5e:54:f3:74:ec:33:8c:df:c0: 29:1d:0c:05:1c:16:82:a4:9e:45:b2:25:3b:25:4d:86:54:d5: 87:14:a2:e9:0c:fc:3b:6d:05:59:03:ac:7c:51:66:7b:8b:8f: dc:61:32:bb:54:2b:cc:b7:e9:5b:24:f7:8a:8d:23:3e:4d:26: 03:81:56:c6:0f:44:08:55:58:7d:5a:2d:af:e8:df:f0:c3:3b: 59:c0:95:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloOY3AFfDs0Ap3FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk MGUyMzEyOTgtZTc3Mi00MjQ0LWFlMDUtNjdlNGU0MWExZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt2a6UK4Q4HAoJUSLxoJr0W72WGm5ihJpcB1 i12XQWVRV2XKTB2BD9uaUB2aUOODAaODMYnAu0wOl7ZYYeMPWTm6FkmI0rbm3Bfr XYPr4RIqCrIepCxLsvGCanvTBhU0ZeURVahf/+ncZCnZpOqW8Q62DPeF7b9RvPxx KYN73kqmMbqS0awW1SWbId+1o6gA3gqkc+Nc4oQ7Eh2+8nja1/FyBPpq3a5K5cK8 DiCFFRmxQ0CmEOIbUJUh7GB0Ukrec+BZYBakUBwcr85cYMpAaWGXAKhx2W/visz6 013+zFUL/JA+0njBpyxovoL3tfsAypTIeyl2z2rMVPO6LMNTBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIwf7oJ2ezrH02gYDxVRogGOjg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvZDJiNTIyNTItZDVhNS0z MWEzLWIzM2YtOWVlNDRkMTExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs61P8NrgfuTE4Rr4FFV6VpPjRUsudzvtuJFTKwyXuFmnUGH54KkTcY 4vx9D6wIVBEhH21cfUaHzNNYJJfEQ3iLiX6RvoByDSH/aEM2UXoXL/cHWMrA48zU JgX7C/kLBt7JTUUcn+fXxDQYp5wAB1Rr/L80Rb6iHj3zDe9Sx8iofZ63H+iO29ye bo9yY6Ky4IT095FDYap3VPhj9X2uFAv/6Q2wnzQYr9X/MF5U83TsM4zfwCkdDAUc FoKknkWyJTslTYZU1YcUoukM/DttBVkDrHxRZnuLj9xhMrtUK8y36Vsk94qNIz5N JgOBVsYPRAhVWH1aLa/o3/DDO1nAlb4= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:19 2024 by rpki-client on console-fra.rpki-client.org