$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa File: 5530f811-421c-3e6a-94f4-ec500c171493.roa (raw, json) Hash identifier: aDQfs84i1hTVKA/8u8kdBFXrZe2dZOJnqgumGC4ExJI= Subject key identifier: 40:E9:91:48:10:1F:10:39:CA:32:55:BD:EA:CA:DB:46:21:FF:BC:97 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584774FB8EB9313C222D5C98BF80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 396982 IP address blocks: 152.38.154.0/24 maxlen: 24 152.38.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:8e:b9:31:3c:22:2d:5c:98:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=97580b1d-7458-4000-987f-729fded2661f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:05:94:8c:17:ab:be:84:ae:11:b2:4a:90: 59:52:e2:06:25:c2:b4:0c:af:e1:d1:2e:95:2e:d1: 61:2d:49:f9:4b:23:ef:86:17:a6:0c:37:64:a9:06: 6f:89:a3:68:9a:ac:3e:66:2a:27:b3:e9:63:38:0f: 6e:a6:1b:39:be:97:f6:69:84:a7:83:0a:1b:e4:b7: 2d:b1:46:93:5f:3e:14:a2:2b:89:15:9f:40:5a:41: 35:7e:f2:44:5c:c8:65:9e:01:36:e1:42:b6:2c:9c: 8e:6d:b3:19:20:dc:ee:00:c7:31:da:16:d6:4e:3b: 91:68:22:13:1b:1a:d6:a3:0f:33:cf:2e:b0:5a:0c: 9b:b3:58:88:d5:4b:4b:99:32:a0:d3:5a:38:e2:7f: 1d:3f:19:83:61:5b:14:33:86:a2:ae:85:1d:e5:24: 2f:b0:14:86:07:eb:7e:6c:5e:f2:ee:36:8c:d2:9b: fe:7f:6d:7b:84:8e:a6:09:de:e9:9a:14:e3:27:0e: 0f:70:8e:43:b6:14:2e:d4:60:e6:e4:5f:da:1d:fd: ba:8b:72:af:48:fb:d7:40:ac:e0:03:0b:9e:7e:5f: c2:65:cf:08:d5:71:4e:96:61:e7:a2:88:35:2b:0c: 95:f2:77:8b:4e:cb:7f:80:89:0e:17:60:38:50:4e: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E9:91:48:10:1F:10:39:CA:32:55:BD:EA:CA:DB:46:21:FF:BC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/5530f811-421c-3e6a-94f4-ec500c171493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:15:be:11:f8:18:a7:6d:04:47:3e:f4:c2:57:ac:51:88:33: 39:29:5d:95:2f:7f:4e:dd:a0:ed:db:1d:f3:19:81:e2:00:75: 0e:4c:40:f7:da:18:2f:27:0d:9a:48:05:f6:a2:84:5e:ac:f0: 79:fa:85:9e:ec:dc:3b:ab:49:49:5b:f8:b3:70:d4:8b:d8:f7: e0:f5:e7:b2:68:2d:9e:27:50:21:18:2e:81:af:bc:72:4d:d7: 85:2c:f1:3d:35:c7:63:ca:95:05:ca:76:26:16:4e:2a:6c:19: 4b:78:ea:21:1c:f0:ae:bb:25:57:be:27:af:69:5b:48:82:6d: be:8d:9b:ee:9b:49:c2:30:45:0b:87:20:07:0d:bb:e4:d2:a5: 74:57:39:de:7f:c8:a2:30:5b:49:64:7e:04:39:eb:f1:91:83: 4e:c1:2a:c6:50:a5:8b:14:08:f5:05:26:4a:28:d1:d1:e3:79: 3c:7a:14:da:89:bc:f9:f3:3d:6a:a2:bf:a9:46:53:b4:17:83: 5f:84:d2:10:22:86:78:4c:00:64:21:c3:57:f7:fd:dd:a4:1a: 14:ca:77:74:ae:30:eb:80:8e:d1:7e:eb:aa:fe:40:db:b7:ed: 74:e0:02:07:b2:a3:3a:6c:d1:08:b5:4f:ab:9e:ba:eb:64:2e: 64:58:f1:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+465MTwiLVyYv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk OTc1ODBiMWQtNzQ1OC00MDAwLTk4N2YtNzI5ZmRlZDI2NjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOgFlIwXq76ErhGySpBZUuIGJcK0DK/h0S6V LtFhLUn5SyPvhhemDDdkqQZviaNomqw+Zions+ljOA9uphs5vpf2aYSngwob5Lct sUaTXz4UoiuJFZ9AWkE1fvJEXMhlngE24UK2LJyObbMZINzuAMcx2hbWTjuRaCIT GxrWow8zzy6wWgybs1iI1UtLmTKg01o44n8dPxmDYVsUM4airoUd5SQvsBSGB+t+ bF7y7jaM0pv+f217hI6mCd7pmhTjJw4PcI5DthQu1GDm5F/aHf26i3KvSPvXQKzg Awuefl/CZc8I1XFOlmHnoog1KwyV8neLTst/gIkOF2A4UE6diQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDpkUgQHxA5yjJVverK20Yh/7yXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNTUzMGY4MTEtNDIxYy0z ZTZhLTk0ZjQtZWM1MDBjMTcxNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIVvhH4GKdtBEc+9MJXrFGIMzkpXZUvf07doO3bHfMZgeIAdQ5MQPfa GC8nDZpIBfaihF6s8Hn6hZ7s3DurSUlb+LNw1IvY9+D157JoLZ4nUCEYLoGvvHJN 14Us8T01x2PKlQXKdiYWTipsGUt46iEc8K67JVe+J69pW0iCbb6Nm+6bScIwRQuH IAcNu+TSpXRXOd5/yKIwW0lkfgQ56/GRg07BKsZQpYsUCPUFJkoo0dHjeTx6FNqJ vPnzPWqiv6lGU7QXg1+E0hAihnhMAGQhw1f3/d2kGhTKd3SuMOuAjtF+66r+QNu3 7XTgAgeyozps0Qi1T6ueuutkLmRY8UY= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:29 2024 by rpki-client on console-ams.rpki-client.org