$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa File: dab1f656-370e-3952-a1d7-0dd4adb670a3.roa (raw, json) Hash identifier: X51PBWMn+nYH+40TCWQacsaHznNR7Vtq5rBfzhQlQgA= Subject key identifier: 02:6D:98:C8:21:00:2D:26:4F:64:2E:00:9D:6F:D2:D9:A1:66:75:E7 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F432858476E4811EC8619F8790792C680 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa Signing time: Fri 04 Oct 2024 15:24:05 +0000 ROA not before: Fri 04 Oct 2024 15:24:05 +0000 ROA not after: Thu 02 Jan 2025 16:24:05 +0000 asID: 0 IP address blocks: 157.133.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:48:11:ec:86:19:f8:79:07:92:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 4 15:24:05 2024 GMT Not After : Jan 2 16:24:05 2025 GMT Subject: CN=64bf4960-8b86-48e4-b06d-fa431083e4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:40:25:9f:38:53:65:3b:84:a5:3c:50:3f: d8:90:11:e0:4a:c6:25:76:d0:d5:b9:18:f3:a2:7a: 20:83:9d:be:a0:f4:a8:5e:98:76:f9:fa:4b:50:96: 66:dc:80:c0:71:46:a3:56:11:24:1e:36:8a:de:f1: 22:80:e7:8c:e1:67:d2:c1:76:a8:f5:ef:89:43:fe: 22:42:14:da:be:ea:6a:29:2e:0a:b0:d6:db:72:ae: 87:cd:c6:d8:0c:4f:e6:50:6c:64:a4:7c:a9:2f:25: b3:50:32:7c:67:ed:f4:b5:85:64:5f:7c:f9:26:86: 99:5c:c5:13:9a:e2:bb:98:b9:4e:47:09:9b:e6:8e: f1:94:8f:21:01:32:33:f6:45:1e:9a:b7:94:2f:49: 08:bf:26:8f:67:8e:67:15:34:3b:7a:5e:15:45:8e: 92:9a:87:9b:25:89:34:4b:ba:40:f7:34:f9:8d:8f: 04:54:b5:6d:a3:85:ee:12:23:ac:b8:81:ba:96:ce: d7:39:4a:f7:01:cc:e5:34:6c:69:aa:0e:66:3c:87: 96:25:82:d8:f9:53:94:b6:ee:7c:37:61:80:b7:e1: d1:50:a5:c9:a5:6b:58:03:dc:58:70:82:95:82:53: 15:6d:53:16:ee:ff:27:8e:65:13:be:24:bb:42:bc: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6D:98:C8:21:00:2D:26:4F:64:2E:00:9D:6F:D2:D9:A1:66:75:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3d:33:6e:5d:d8:34:c2:ff:9c:40:df:b5:f9:73:3a:10:86: 3e:03:70:d1:25:e7:6e:1b:27:cf:78:f8:6e:4a:4e:ec:51:b6: dc:88:31:55:5c:20:ee:bf:2e:4e:0d:ef:ab:b3:69:fd:96:8d: 24:61:41:9e:9c:74:9f:82:0d:c2:47:c5:6b:9c:30:07:d3:e2: 13:99:dc:45:9a:db:51:9a:a7:bd:58:8c:92:49:73:1e:88:6a: 80:29:d3:85:28:90:ea:70:99:62:bc:db:c1:38:b2:81:60:e8: ca:52:a8:e6:05:f7:12:36:bc:92:db:e7:da:eb:7b:25:41:83: 1b:90:2a:ea:6a:d7:cc:58:3a:de:d3:5f:10:6d:bc:4d:56:aa: ce:27:bf:51:8e:71:e7:87:c2:c4:20:c3:4a:ac:bb:7e:b1:31: ec:5b:df:92:92:3d:95:57:e7:4e:71:32:fc:15:0b:c3:02:fd: 3d:6d:82:68:96:e7:9d:3a:d3:cf:37:71:a6:43:d1:e2:a2:75: 24:8d:fe:e9:26:3e:42:65:65:1e:6c:8d:cb:1b:23:e8:08:ed: 65:c5:35:fc:d4:63:32:85:b0:91:75:3c:36:1c:ee:08:72:1e: 6c:90:c2:ce:69:1f:03:0d:f7:96:99:57:f5:5c:c8:ae:07:f0: c2:78:75:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEduSBHshhn4eQeSxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI0MTAwNDE1MjQwNVoXDTI1MDEwMjE2MjQwNVowLzEtMCsGA1UEAxMk NjRiZjQ5NjAtOGI4Ni00OGU0LWIwNmQtZmE0MzEwODNlNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPJAJZ84U2U7hKU8UD/YkBHgSsYldtDVuRjz onogg52+oPSoXph2+fpLUJZm3IDAcUajVhEkHjaK3vEigOeM4WfSwXao9e+JQ/4i QhTavupqKS4KsNbbcq6HzcbYDE/mUGxkpHypLyWzUDJ8Z+30tYVkX3z5JoaZXMUT muK7mLlORwmb5o7xlI8hATIz9kUemreUL0kIvyaPZ45nFTQ7el4VRY6SmoebJYk0 S7pA9zT5jY8EVLVto4XuEiOsuIG6ls7XOUr3AczlNGxpqg5mPIeWJYLY+VOUtu58 N2GAt+HRUKXJpWtYA9xYcIKVglMVbVMW7v8njmUTviS7QrxVzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJtmMghAC0mT2QuAJ1v0tmhZnXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGFiMWY2NTYtMzcwZS0z OTUyLWExZDctMGRkNGFkYjY3MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY9M25d2DTC/5xA37X5czoQhj4DcNEl524bJ894+G5KTuxRttyIMVVc IO6/Lk4N76uzaf2WjSRhQZ6cdJ+CDcJHxWucMAfT4hOZ3EWa21Gap71YjJJJcx6I aoAp04UokOpwmWK828E4soFg6MpSqOYF9xI2vJLb59rreyVBgxuQKupq18xYOt7T XxBtvE1Wqs4nv1GOceeHwsQgw0qsu36xMexb35KSPZVX505xMvwVC8MC/T1tgmiW 55060883caZD0eKidSSN/ukmPkJlZR5sjcsbI+gI7WXFNfzUYzKFsJF1PDYc7ghy HmyQws5pHwMN95aZV/VcyK4H8MJ4dVs= -----END CERTIFICATE-----Generated at Tue Oct 22 16:06:07 2024 by rpki-client on console-ams.rpki-client.org