$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa File: c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa (raw, json) Hash identifier: PvE5qf52mwl2w3LGbekY6596B4dXmGiOPERQZjbpKRQ= Subject key identifier: 03:25:66:82:0A:5B:8A:D6:72:9C:D8:D0:AB:65:0A:C3:A6:FB:90:DC Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F432858476E52F0A4187B79ECBCB72E80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa Signing time: Fri 04 Oct 2024 15:45:59 +0000 ROA not before: Fri 04 Oct 2024 15:45:59 +0000 ROA not after: Thu 02 Jan 2025 16:45:59 +0000 asID: 0 IP address blocks: 157.133.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:52:f0:a4:18:7b:79:ec:bc:b7:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 4 15:45:59 2024 GMT Not After : Jan 2 16:45:59 2025 GMT Subject: CN=318f061d-11a0-49c5-9200-98101ab18f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:39:f8:f3:7e:05:c3:dd:eb:c5:42:a6:cf: bf:51:5a:30:31:2c:b6:6c:55:be:41:ae:34:4a:50: 41:bd:37:56:8a:1d:3d:cb:b1:84:93:ed:0d:3b:8b: 33:4c:cd:a9:dc:fb:ca:0a:70:7a:71:ef:84:eb:90: 56:6c:4f:36:1a:ad:23:f7:94:86:e2:60:6c:5e:b4: 1d:b2:db:60:26:1a:ed:fb:d8:72:06:7e:15:57:33: eb:3d:08:49:fd:b0:44:7b:61:a7:49:86:c9:02:72: b2:e5:7a:0c:e8:9a:02:ac:05:1a:7b:4b:24:9e:70: 92:17:ef:f6:c3:b6:3d:02:ca:cf:3b:af:24:a5:06: 5e:db:9f:c8:49:6b:97:86:a3:92:04:2a:40:45:4e: 90:d4:ce:2d:1a:dd:6c:af:3e:fa:db:bb:41:f8:39: c3:57:da:47:b0:dd:9d:0f:96:5e:ea:ba:f3:99:1a: 80:7f:0f:66:e5:6d:13:1b:cb:8b:54:64:61:2d:f1: 0f:03:95:df:2a:5d:79:77:a7:2c:18:20:22:e6:3f: 66:17:35:8e:81:ab:03:7c:c1:47:75:43:9d:b0:66: 12:ef:8f:b5:70:21:24:82:86:0f:b4:c1:ea:08:92: 51:a4:55:04:37:e5:a5:eb:9f:5f:57:bb:fe:df:78: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:25:66:82:0A:5B:8A:D6:72:9C:D8:D0:AB:65:0A:C3:A6:FB:90:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4a:63:31:6f:65:e2:3f:0a:bc:1c:82:d5:17:75:c8:18:eb: 93:72:e5:9e:9f:76:80:c6:d9:61:64:aa:5e:55:a9:e0:3c:9b: 9b:5a:2a:95:2f:9a:37:96:ba:d0:62:f2:11:78:08:bf:09:47: 60:69:42:0e:ad:1a:55:b3:8a:f7:47:9c:b9:60:bc:da:42:ff: a1:ce:df:25:27:f5:f0:9c:2d:e5:3e:af:c1:a9:71:6e:cc:03: 8a:6f:28:bb:0d:a5:b7:b0:df:4c:c2:9f:c2:5c:23:33:af:e4: 3d:82:46:06:d3:25:73:cc:dc:b3:91:e5:74:bc:c9:9f:59:c7: b3:79:a0:c6:8c:c2:00:64:a4:70:99:ab:86:36:bf:ab:75:20: 5c:fc:f8:32:55:4b:81:35:7c:14:32:d4:6d:fa:3c:42:85:1b: 08:9d:d6:30:a3:32:d5:5c:32:5f:8f:8a:9c:7d:63:94:bf:ef: 5c:e4:b5:15:e7:72:b3:dd:24:2b:3b:ed:2c:ba:ae:07:37:54: 37:97:90:96:ab:f1:cf:58:09:48:f1:8e:70:30:8c:1e:6a:9d: 45:a9:74:d9:7d:00:12:23:ff:8f:19:21:9b:58:88:cb:46:9f: d9:06:88:f3:6c:87:ce:9d:76:39:1a:93:18:a7:96:b0:3d:94: c1:9b:8f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEduUvCkGHt57Ly3LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI0MTAwNDE1NDU1OVoXDTI1MDEwMjE2NDU1OVowLzEtMCsGA1UEAxMk MzE4ZjA2MWQtMTFhMC00OWM1LTkyMDAtOTgxMDFhYjE4ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsw5+PN+BcPd68VCps+/UVowMSy2bFW+Qa40 SlBBvTdWih09y7GEk+0NO4szTM2p3PvKCnB6ce+E65BWbE82Gq0j95SG4mBsXrQd sttgJhrt+9hyBn4VVzPrPQhJ/bBEe2GnSYbJAnKy5XoM6JoCrAUae0sknnCSF+/2 w7Y9AsrPO68kpQZe25/ISWuXhqOSBCpARU6Q1M4tGt1srz7627tB+DnDV9pHsN2d D5Ze6rrzmRqAfw9m5W0TG8uLVGRhLfEPA5XfKl15d6csGCAi5j9mFzWOgasDfMFH dUOdsGYS74+1cCEkgoYPtMHqCJJRpFUEN+Wl659fV7v+33hqpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMlZoIKW4rWcpzY0KtlCsOm+5DcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYzUzMWQ0MjktOWQ5ZC0z ZTVlLThlZWYtZDk3NjY0OWYyY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJKYzFvZeI/CrwcgtUXdcgY65Ny5Z6fdoDG2WFkql5VqeA8m5taKpUv mjeWutBi8hF4CL8JR2BpQg6tGlWzivdHnLlgvNpC/6HO3yUn9fCcLeU+r8GpcW7M A4pvKLsNpbew30zCn8JcIzOv5D2CRgbTJXPM3LOR5XS8yZ9Zx7N5oMaMwgBkpHCZ q4Y2v6t1IFz8+DJVS4E1fBQy1G36PEKFGwid1jCjMtVcMl+Pipx9Y5S/71zktRXn crPdJCs77Sy6rgc3VDeXkJar8c9YCUjxjnAwjB5qnUWpdNl9ABIj/48ZIZtYiMtG n9kGiPNsh86ddjkakxinlrA9lMGbj+Y= -----END CERTIFICATE-----Generated at Tue Oct 22 16:06:07 2024 by rpki-client on console-ams.rpki-client.org