$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: cgHtxxF+ANLqp1Zfksof3b3HdNxaRwrg9pbINrpRUpk= Subject key identifier: 5A:66:00:2A:2C:82:F5:24:10:56:E4:6A:F1:EA:01:61:2A:04:85:29 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F43285847D139E121599202DAB0FC7CA0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Sat 09 Nov 2024 02:00:28 +0000 ROA not before: Sat 09 Nov 2024 02:00:28 +0000 ROA not after: Fri 07 Feb 2025 02:00:28 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d1:39:e1:21:59:92:02:da:b0:fc:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Nov 9 02:00:28 2024 GMT Not After : Feb 7 02:00:28 2025 GMT Subject: CN=63c5211b-b707-4695-82ef-450336d78f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:c9:84:4a:a1:2b:91:95:08:e2:83:b1:c1: 13:93:31:19:76:da:f8:0b:a3:2b:77:d3:5d:4e:e9: 77:26:d9:b7:91:26:df:47:8d:ef:c7:82:a4:a8:73: 94:35:af:56:1a:66:f1:7c:ba:af:39:62:e9:28:ee: 09:6a:5d:f5:0a:81:ef:e7:0e:f5:78:50:ee:d0:26: 6e:af:74:d5:a7:bb:13:ea:b4:66:a5:1e:23:81:0f: ba:da:82:54:21:de:3b:c0:27:42:31:97:b7:45:df: 83:90:16:c3:c8:e2:54:51:20:a7:52:ef:a4:23:f9: ed:cf:d5:54:a8:9d:c1:e2:a2:4d:be:d0:be:6a:9f: 2a:42:f4:57:eb:9e:22:b0:ae:d6:f4:a9:a0:3e:51: 58:9f:e6:c4:b4:fd:fc:54:6a:c8:e9:c9:8e:31:af: f6:2f:7b:55:be:de:b3:aa:33:e5:d4:ef:e4:e2:75: 9e:5c:e0:cd:66:71:41:d9:b1:46:63:c9:f1:69:d0: 94:f0:a5:04:2c:e4:bc:0f:c8:80:e4:06:7f:62:81: 6b:3f:c1:23:0f:d6:d1:2d:81:bd:31:5a:64:25:35: d7:b2:2a:07:52:81:13:12:0a:2e:19:ea:f1:7f:3c: ad:91:cd:e3:c0:05:8b:f9:36:62:dc:7c:03:12:b5: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:66:00:2A:2C:82:F5:24:10:56:E4:6A:F1:EA:01:61:2A:04:85:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6c:99:08:c2:e4:f7:9b:93:ee:1f:20:e2:1e:32:a8:32:67: b8:27:ef:3b:8b:58:58:cb:8b:0f:56:a2:88:c2:2c:cf:ce:86: 48:36:65:67:5c:b0:18:5e:d5:d4:47:42:b7:56:fc:8a:a4:f4: 92:ef:fb:5b:08:88:c7:1f:2f:88:f4:5a:b2:51:2b:2e:5e:2d: 38:89:ad:ad:4a:bd:53:d9:4c:74:e9:dc:38:47:2e:e4:aa:9e: 2d:0e:5e:48:96:3d:13:60:e1:1e:e3:ac:3a:04:d6:71:b5:ea: 99:35:f7:cc:99:a5:f1:34:11:91:c4:90:a6:73:8f:54:57:86: f4:9b:d4:16:71:44:e0:69:28:51:88:0c:64:8b:3a:aa:b9:f0: 48:a8:60:79:f5:0f:0c:1c:ed:31:c7:9c:77:2c:98:25:81:2f: 42:a2:42:09:79:38:16:45:29:ab:0c:48:54:ea:e8:3b:18:6e: 63:2a:1f:a2:d2:85:5f:ec:0e:2f:43:14:1b:11:7b:cd:27:93: d3:91:93:6f:d5:94:af:a8:f3:2d:d0:5d:60:8a:44:03:0c:7c: 35:98:6f:b0:b2:c0:5a:aa:ae:ac:94:85:75:12:af:3e:af:d4: 42:ae:fe:34:2d:5d:11:d5:30:d4:e2:fd:58:d0:e5:84:41:07: 97:c5:3a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfROeEhWZIC2rD8fKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MTEwOTAyMDAyOFoXDTI1MDIwNzAyMDAyOFowLzEtMCsGA1UEAxMk NjNjNTIxMWItYjcwNy00Njk1LTgyZWYtNDUwMzM2ZDc4ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHJhEqhK5GVCOKDscETkzEZdtr4C6Mrd9Nd Tul3Jtm3kSbfR43vx4KkqHOUNa9WGmbxfLqvOWLpKO4Jal31CoHv5w71eFDu0CZu r3TVp7sT6rRmpR4jgQ+62oJUId47wCdCMZe3Rd+DkBbDyOJUUSCnUu+kI/ntz9VU qJ3B4qJNvtC+ap8qQvRX654isK7W9KmgPlFYn+bEtP38VGrI6cmOMa/2L3tVvt6z qjPl1O/k4nWeXODNZnFB2bFGY8nxadCU8KUELOS8D8iA5AZ/YoFrP8EjD9bRLYG9 MVpkJTXXsioHUoETEgouGerxfzytkc3jwAWL+TZi3HwDErWMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpmACosgvUkEFbkavHqAWEqBIUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9smQjC5Pebk+4fIOIeMqgyZ7gn7zuLWFjLiw9WoojCLM/Ohkg2ZWdc sBhe1dRHQrdW/Iqk9JLv+1sIiMcfL4j0WrJRKy5eLTiJra1KvVPZTHTp3DhHLuSq ni0OXkiWPRNg4R7jrDoE1nG16pk198yZpfE0EZHEkKZzj1RXhvSb1BZxROBpKFGI DGSLOqq58EioYHn1Dwwc7THHnHcsmCWBL0KiQgl5OBZFKasMSFTq6DsYbmMqH6LS hV/sDi9DFBsRe80nk9ORk2/VlK+o8y3QXWCKRAMMfDWYb7CywFqqrqyUhXUSrz6v 1EKu/jQtXRHVMNTi/VjQ5YRBB5fFOig= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:20 2024 by rpki-client on console-fra.rpki-client.org