$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: NPkB+7BYuUsmzBpgHbIfwbxeijdAgelTZ6szN4BPLHA= Subject key identifier: 52:04:27:6A:D2:93:CC:0F:A0:5C:EB:D9:0E:D3:9D:C6:7E:A8:BC:5F Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F432858478CB682BA88624291AAE13900 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:82:ba:88:62:42:91:aa:e1:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=fece777e-54ed-4b14-88fa-f1859a5198a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:2f:b9:8b:e4:3a:30:78:49:6f:23:10:06: 27:7a:bb:eb:5b:02:32:a7:ce:84:f4:0c:49:cf:92: a7:f3:12:02:c4:36:c8:8b:47:33:cb:9b:f4:51:ae: af:55:44:f9:68:bb:38:14:eb:cc:8c:b4:84:09:f6: 7e:c1:4f:36:11:02:4f:4e:fc:7f:2d:62:bf:b6:ba: da:86:9b:17:05:28:ee:23:ec:3d:fb:4f:7a:1f:bf: 56:e4:03:88:67:22:6d:02:85:04:a0:16:20:ac:96: 4e:c9:39:27:56:45:2c:ec:12:86:a8:28:93:f8:61: c8:91:0b:9f:e7:5e:27:71:76:2a:e9:95:ae:82:86: 23:c6:81:72:c6:b8:10:5f:0b:8e:fe:83:6b:58:43: 0c:da:32:9c:3b:72:7e:6e:42:8c:58:2e:44:63:f4: 19:32:2c:d7:57:38:81:81:28:fa:4f:6f:61:0e:e5: cf:a1:6a:08:7f:13:9b:d4:3c:e5:42:e4:b2:aa:ed: 32:36:ea:d1:fc:0e:a5:c0:44:fe:59:7d:12:30:b4: 77:08:66:53:9c:df:6e:92:20:ea:07:bf:c9:22:de: 59:5f:09:93:c3:ea:8c:ed:61:25:b2:53:d3:c6:0b: 68:b3:b7:7b:11:bb:95:07:55:3a:18:5a:8a:e0:d0: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:27:6A:D2:93:CC:0F:A0:5C:EB:D9:0E:D3:9D:C6:7E:A8:BC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e1:59:9b:c8:2a:35:a1:57:74:7a:ca:d0:17:45:21:5c:2d: 1a:c9:40:ba:1d:78:2a:2a:8d:04:dc:46:6a:03:a5:a4:52:45: 3a:f5:3c:d2:52:60:f5:ae:4e:d4:f8:17:58:3d:42:90:52:10: 41:46:a4:29:09:e8:9a:a2:a2:14:7f:80:d1:51:c5:cc:59:df: 71:cf:7a:05:ff:1d:35:66:30:6c:2e:59:9c:2f:e6:f5:5e:f4: 5e:71:0e:0a:ec:d9:8a:13:f9:e7:86:d5:88:ff:3f:09:cd:e3: fc:bf:1e:a7:e2:69:64:38:8b:cc:2e:f7:12:5a:5d:85:e9:79: 77:de:77:55:07:08:f6:0c:ce:0f:28:ca:68:f6:fe:e0:78:4b: f6:54:dd:6e:6a:03:14:93:8f:5e:c4:31:7d:ad:14:ab:f4:1b: fc:a7:b4:ac:14:96:70:80:0d:80:61:27:4e:6f:7c:2b:17:92: bd:ce:c2:1d:15:3e:d4:c5:c1:a5:ba:0e:dd:e7:de:c3:b8:05: 6f:c9:4a:56:06:0a:f0:56:27:a8:cf:67:1f:d6:7a:a5:56:db: 90:da:13:72:93:f7:9e:45:8f:bd:96:d6:96:95:13:7d:1f:e3: 24:6b:ee:fb:e9:67:8e:7a:c9:f2:7b:d8:54:bc:f2:83:96:7d: f2:86:69:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtoK6iGJCkarhOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk ZmVjZTc3N2UtNTRlZC00YjE0LTg4ZmEtZjE4NTlhNTE5OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHwvuYvkOjB4SW8jEAYnervrWwIyp86E9AxJ z5Kn8xICxDbIi0czy5v0Ua6vVUT5aLs4FOvMjLSECfZ+wU82EQJPTvx/LWK/trra hpsXBSjuI+w9+096H79W5AOIZyJtAoUEoBYgrJZOyTknVkUs7BKGqCiT+GHIkQuf 514ncXYq6ZWugoYjxoFyxrgQXwuO/oNrWEMM2jKcO3J+bkKMWC5EY/QZMizXVziB gSj6T29hDuXPoWoIfxOb1DzlQuSyqu0yNurR/A6lwET+WX0SMLR3CGZTnN9ukiDq B7/JIt5ZXwmTw+qM7WElslPTxgtos7d7EbuVB1U6GFqK4NCIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIEJ2rSk8wPoFzr2Q7TncZ+qLxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzhWZvIKjWhV3R6ytAXRSFcLRrJQLodeCoqjQTcRmoDpaRSRTr1PNJS YPWuTtT4F1g9QpBSEEFGpCkJ6JqiohR/gNFRxcxZ33HPegX/HTVmMGwuWZwv5vVe 9F5xDgrs2YoT+eeG1Yj/PwnN4/y/HqfiaWQ4i8wu9xJaXYXpeXfed1UHCPYMzg8o ymj2/uB4S/ZU3W5qAxSTj17EMX2tFKv0G/yntKwUlnCADYBhJ05vfCsXkr3Owh0V PtTFwaW6Dt3n3sO4BW/JSlYGCvBWJ6jPZx/WeqVW25DaE3KT955Fj72W1paVE30f 4yRr7vvpZ456yfJ72FS88oOWffKGaQY= -----END CERTIFICATE-----Generated at Mon Nov 25 16:00:49 2024 by rpki-client on console-fra.rpki-client.org