$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa File: b758d768-536e-3bf2-96a6-ecc0554032dd.roa (raw, json) Hash identifier: HxqPuAlQ1HY5trWnRe+whfbNf/CyLmDqZ0weMUjM+WE= Subject key identifier: 10:30:8B:EB:96:F5:9F:A1:4E:27:87:5F:0F:D4:18:05:AD:39:01:45 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F432858477EC1152B7C9C8B61A85D1880 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 14041 IP address blocks: 129.19.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:15:2b:7c:9c:8b:61:a8:5d:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=d5df688c-4318-4f6a-90ac-f70587bc82cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:11:be:67:1b:95:bd:4e:5d:96:0f:28:38: 6a:7a:1d:54:07:81:45:58:1b:b3:b6:45:bb:17:b7: be:b1:9c:4d:a5:27:d0:32:2d:d4:25:b9:58:62:1f: 10:0b:9d:06:b5:dd:27:ab:5b:83:a2:5b:cb:bc:dc: 6f:29:34:44:e2:74:c2:c7:99:85:92:9a:8d:2e:e5: ac:c5:43:b6:94:f7:dd:5a:48:0b:61:d8:f0:75:6e: 5e:2a:44:38:b3:d1:d4:cd:50:c3:94:d2:0c:d0:d1: 0f:17:4d:81:5a:8d:85:17:61:6d:f8:4d:8c:8e:80: 63:f7:d8:75:18:92:05:a3:33:0c:b6:f9:5f:54:4f: f9:25:4e:05:c5:97:9c:d2:6c:26:b9:40:0c:b6:1e: d4:56:1b:c7:54:47:9f:87:d0:9c:9e:84:3a:0a:b6: aa:1d:3f:45:3a:60:f5:a0:34:8f:9b:db:f3:03:de: f6:20:f1:b0:cf:99:ec:c7:12:99:a4:78:d2:ee:3c: 09:e7:a0:0e:b0:06:cc:d5:6f:c7:70:8a:09:2d:c8: d9:f9:01:fb:c7:44:b9:69:45:6a:d7:e6:ef:1f:e3: f4:95:a2:e5:da:00:b3:61:ab:b1:77:72:5f:6f:a1: 68:c7:34:f7:0c:3e:e5:25:01:ea:36:20:fb:3e:8a: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:30:8B:EB:96:F5:9F:A1:4E:27:87:5F:0F:D4:18:05:AD:39:01:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ed:a0:6e:1a:0c:d4:40:6d:ef:1d:00:ad:fd:08:29:e9:c3: 33:ae:bd:e4:1f:b2:c5:dc:91:bb:37:4a:13:18:5b:5f:45:38: 39:8a:df:2e:ae:c4:97:71:ed:e8:38:3a:07:62:4b:a8:4c:1f: 10:c6:0a:ec:6d:78:3a:5b:2e:49:3d:92:62:6b:1b:8a:f6:e9: 07:96:b4:89:f6:1b:df:c5:52:e9:6d:e9:c1:91:65:55:2b:0d: a5:a3:f1:dc:f0:26:f6:86:2f:b1:f3:0a:57:a0:e2:5e:82:82: 91:98:4c:b2:2a:3f:44:a1:f3:82:eb:56:bf:1f:86:5a:6b:fe: 17:d2:79:8b:f6:c9:71:e5:de:01:ef:03:bd:8e:84:e9:96:12: 09:17:6c:9d:15:d7:64:5c:cf:4d:f0:f5:3e:3e:39:0e:2b:18: 70:72:7b:ec:13:d1:2d:8c:d2:6b:3a:dd:4d:be:ad:04:6c:e3: 89:54:13:b6:be:a3:14:dc:96:8e:15:34:34:77:c7:be:19:81: 89:05:df:b9:73:26:eb:7c:9f:ad:40:e3:a5:94:46:5d:77:f8: 71:8e:f6:bb:73:02:c9:1b:02:e2:46:2b:0e:d3:d0:af:18:53: c0:dc:7a:df:f7:fc:f5:a5:a5:30:4d:28:ad:2e:fb:f3:79:00: 22:a5:93:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd+wRUrfJyLYahdGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDVkZjY4OGMtNDMxOC00ZjZhLTkwYWMtZjcwNTg3YmM4MmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvQRvmcblb1OXZYPKDhqeh1UB4FFWBuztkW7 F7e+sZxNpSfQMi3UJblYYh8QC50Gtd0nq1uDolvLvNxvKTRE4nTCx5mFkpqNLuWs xUO2lPfdWkgLYdjwdW5eKkQ4s9HUzVDDlNIM0NEPF02BWo2FF2Ft+E2MjoBj99h1 GJIFozMMtvlfVE/5JU4FxZec0mwmuUAMth7UVhvHVEefh9CcnoQ6CraqHT9FOmD1 oDSPm9vzA972IPGwz5nsxxKZpHjS7jwJ56AOsAbM1W/HcIoJLcjZ+QH7x0S5aUVq 1+bvH+P0laLl2gCzYauxd3Jfb6FoxzT3DD7lJQHqNiD7PoqWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAwi+uW9Z+hTieHXw/UGAWtOQFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYjc1OGQ3NjgtNTM2ZS0z YmYyLTk2YTYtZWNjMDU1NDAzMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXtoG4aDNRAbe8dAK39CCnpwzOuveQfssXckbs3ShMYW19FODmK3y6u xJdx7eg4OgdiS6hMHxDGCuxteDpbLkk9kmJrG4r26QeWtIn2G9/FUult6cGRZVUr DaWj8dzwJvaGL7HzCleg4l6CgpGYTLIqP0Sh84LrVr8fhlpr/hfSeYv2yXHl3gHv A72OhOmWEgkXbJ0V12Rcz03w9T4+OQ4rGHBye+wT0S2M0ms63U2+rQRs44lUE7a+ oxTclo4VNDR3x74ZgYkF37lzJut8n61A46WURl13+HGO9rtzAskbAuJGKw7T0K8Y U8Dcet/3/PWlpTBNKK0u+/N5ACKlk3I= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org