$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: XxKlsIh6/Jo7XOjlRUbUSQMTLFm2NUhR0J1/+6os6iw= Subject key identifier: BD:BF:E0:80:A6:1A:15:81:45:15:2E:89:99:41:B1:47:27:72:8B:82 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F432858471B51CF59C99AE7C96FA48F00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Wed 04 Sep 2024 22:11:37 +0000 ROA not before: Wed 04 Sep 2024 22:11:37 +0000 ROA not after: Tue 03 Dec 2024 23:11:37 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1b:51:cf:59:c9:9a:e7:c9:6f:a4:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 4 22:11:37 2024 GMT Not After : Dec 3 23:11:37 2024 GMT Subject: CN=cc393564-0bc7-45b6-851b-202fa1240cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:b9:37:67:2f:e6:66:3e:96:94:5d:00:56: b5:64:4e:1d:4f:0f:2a:6d:d7:d8:57:46:21:6d:42: b8:4b:01:cb:34:7c:a4:b6:f4:5a:f2:1f:84:9f:3d: dc:5f:50:02:d8:1e:be:47:d8:66:07:06:74:75:e2: 4d:29:24:7f:18:f2:38:0e:93:e5:e6:32:c0:27:9e: 01:05:59:0b:ed:18:9f:84:ff:74:61:c3:ef:88:a1: 13:3b:2b:31:c7:81:56:ee:3a:af:3e:09:0b:47:0e: 6c:ae:e7:1c:aa:08:f0:e4:1c:c4:7a:4b:ea:b7:14: c3:5c:b4:76:aa:e7:3b:de:87:5d:7a:18:03:90:f2: 8e:46:bf:4d:8c:af:02:eb:b9:bb:85:48:d7:7f:ea: f8:4a:94:0b:8f:6c:dd:14:3a:8c:d2:28:f3:de:82: 42:37:3a:ae:1e:29:eb:2e:58:84:96:e7:4b:19:c3: 91:ee:dd:3a:91:9d:58:42:19:e8:97:53:1b:23:3f: 13:35:22:90:c0:cc:30:1e:b3:24:10:23:0e:4c:da: f5:b4:1e:6b:ce:63:44:0a:67:45:65:46:e7:5c:d7: 5c:a1:1a:27:74:1f:df:68:7b:01:86:6d:3f:6f:9b: 05:7e:4d:2e:5f:1a:3c:ce:0f:e7:3e:89:be:60:60: 70:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BF:E0:80:A6:1A:15:81:45:15:2E:89:99:41:B1:47:27:72:8B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:94:01:7c:8f:36:76:e0:d7:99:23:f8:e9:1b:35:2b:b1:ff: 16:54:bb:3d:e7:e0:22:24:1e:99:8a:88:9e:b8:88:e9:9c:b9: 7e:3d:fa:8e:cd:5c:2a:39:8a:e5:a5:bb:8a:29:c5:4e:c4:1a: 11:99:9d:6b:88:0f:81:04:9a:ff:36:a0:59:52:7c:03:c2:96: a2:9d:05:e8:e8:72:15:4f:fc:ed:30:b2:0b:ef:49:f3:18:33: ff:a5:5d:aa:7f:41:41:41:ab:5a:e9:94:af:42:42:04:54:98: 53:18:3c:87:33:f1:f7:e8:49:d4:07:82:f0:f6:f7:77:9e:ae: 83:02:c1:69:3d:2f:63:d0:9e:b2:72:52:68:59:90:34:dd:68: 46:23:ec:f8:2d:fe:e7:29:5a:8e:d1:b0:87:be:b9:92:4f:7f: 05:a0:66:ba:b3:95:77:5a:60:3c:74:8a:c9:ed:fe:36:fe:bf: f2:f9:87:99:cd:22:41:3e:96:a4:1b:5d:46:fe:e9:a0:ac:8e: bb:29:59:24:68:51:63:4b:41:17:38:08:6d:10:48:33:f0:d3: bc:e8:e6:b3:f9:22:2e:83:d1:6a:5e:77:cf:c9:8e:f4:68:43: e7:b6:80:30:e1:eb:03:00:4b:d3:20:51:03:99:5b:c4:74:e0: 15:c7:9e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcbUc9ZyZrnyW+kjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI0MDkwNDIyMTEzN1oXDTI0MTIwMzIzMTEzN1owLzEtMCsGA1UEAxMk Y2MzOTM1NjQtMGJjNy00NWI2LTg1MWItMjAyZmExMjQwY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYa5N2cv5mY+lpRdAFa1ZE4dTw8qbdfYV0Yh bUK4SwHLNHyktvRa8h+Enz3cX1AC2B6+R9hmBwZ0deJNKSR/GPI4DpPl5jLAJ54B BVkL7RifhP90YcPviKETOysxx4FW7jqvPgkLRw5sruccqgjw5BzEekvqtxTDXLR2 quc73oddehgDkPKORr9NjK8C67m7hUjXf+r4SpQLj2zdFDqM0ijz3oJCNzquHinr LliEludLGcOR7t06kZ1YQhnol1MbIz8TNSKQwMwwHrMkECMOTNr1tB5rzmNECmdF ZUbnXNdcoRondB/faHsBhm0/b5sFfk0uXxo8zg/nPom+YGBwiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2/4ICmGhWBRRUuiZlBsUcncouCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmUAXyPNnbg15kj+OkbNSux/xZUuz3n4CIkHpmKiJ64iOmcuX49+o7N XCo5iuWlu4opxU7EGhGZnWuID4EEmv82oFlSfAPClqKdBejochVP/O0wsgvvSfMY M/+lXap/QUFBq1rplK9CQgRUmFMYPIcz8ffoSdQHgvD293eeroMCwWk9L2PQnrJy UmhZkDTdaEYj7Pgt/ucpWo7RsIe+uZJPfwWgZrqzlXdaYDx0isnt/jb+v/L5h5nN IkE+lqQbXUb+6aCsjrspWSRoUWNLQRc4CG0QSDPw07zo5rP5Ii6D0Wped8/JjvRo Q+e2gDDh6wMAS9MgUQOZW8R04BXHnpA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:26 2024 by rpki-client on console-fra.rpki-client.org