$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa File: 4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa (raw, json) Hash identifier: 2EwnnR7ZvoDs/kmhgnGcgaaAt0vdyu1ZBc/NolKAPoI= Subject key identifier: 6E:D5:72:18:BE:D4:FB:95:20:C2:24:7B:50:A7:FF:2D:EC:31:68:8B Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F43285847AB6C1919BE4E8CEEE60A85C0 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 25697 IP address blocks: 209.151.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:19:19:be:4e:8c:ee:e6:0a:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=b24cbeaf-c718-449d-978c-b90470d57734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:09:fe:fc:95:1e:ba:20:d2:06:2e:3b:4b:1d: c4:83:e8:77:fa:cc:90:37:14:08:03:37:98:89:b0: 34:d7:d6:f2:2a:df:c5:8c:a7:33:d7:20:92:d2:f5: b8:82:c2:9b:3f:db:89:32:4d:3c:15:c7:80:e3:6c: 34:d1:f2:1d:62:79:f9:66:b5:c9:6a:2c:03:fe:d6: 30:08:8f:88:fe:04:0e:b7:29:2e:b3:b3:54:a3:d4: df:eb:1e:41:80:93:02:35:f1:09:3c:10:59:e0:b2: c2:54:b3:8f:ec:ff:74:c3:1c:be:c8:4a:93:8f:ee: 1f:e5:18:64:88:51:e7:ee:db:af:8c:1d:a2:0c:5f: 86:d4:cb:ef:15:31:23:ba:02:33:e6:c1:6c:d4:d7: 43:57:97:5f:c3:d3:74:39:a7:7a:3b:c8:e2:dd:47: 90:3a:dd:eb:32:2a:d5:d0:6c:9e:7c:c1:58:63:a6: 17:a4:0f:8f:ca:fa:f9:25:a7:8b:89:d0:8b:c1:87: 1e:aa:63:62:05:56:27:67:fb:27:1a:85:da:49:cf: 02:1b:5a:71:34:21:2b:fc:f4:be:7b:a9:d8:82:f8: d9:3a:e1:f3:12:56:dc:ec:d3:9d:8d:99:76:e2:bb: 8d:b4:92:66:4e:fd:7f:5c:31:e3:e7:84:07:d0:41: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D5:72:18:BE:D4:FB:95:20:C2:24:7B:50:A7:FF:2D:EC:31:68:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:53:47:e6:06:47:92:d7:bc:40:18:b0:97:92:08:bc:b3:59: 44:7e:f8:98:dc:83:76:2c:e5:d8:a4:b4:48:c9:2e:92:dc:1b: 78:05:5e:11:ea:83:0a:5f:08:8f:3d:ce:d4:9b:17:5a:a4:16: 40:2a:00:0c:3e:be:98:1a:87:92:f2:4f:5f:72:29:2a:8d:df: 95:fc:15:e0:83:f9:fe:d5:da:8d:9f:98:ed:71:ff:b7:3b:d4: 4f:f0:39:fe:99:e3:6a:cb:c3:31:0e:d8:a7:6c:b9:29:1e:c2: b6:db:35:e8:ef:6d:19:5a:96:e1:82:48:a0:36:04:73:fd:39: 25:f9:f6:e4:45:05:cf:55:8b:12:55:1f:17:0a:e4:99:20:21: 78:2f:44:4f:33:c0:a1:9b:0e:22:28:a2:43:3b:fd:bd:54:c5: 1c:05:b2:03:6e:2b:04:15:64:2b:39:d3:00:9a:c9:f1:47:11: 9c:78:2f:45:c3:79:a2:84:88:ea:86:e9:b5:67:94:5c:c7:d3: 9a:68:4d:2e:a7:7c:97:cf:a0:5c:48:35:32:e8:e5:47:fe:2d: ca:c2:13:66:a1:d9:b6:e1:c4:82:25:05:dc:eb:c3:23:27:8a: 8b:7e:36:65:49:de:48:9a:24:41:c9:35:a0:d0:91:49:d3:10: b5:52:e6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbBkZvk6M7uYKhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk YjI0Y2JlYWYtYzcxOC00NDlkLTk3OGMtYjkwNDcwZDU3NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwn+/JUeuiDSBi47Sx3Eg+h3+syQNxQIAzeY ibA019byKt/FjKcz1yCS0vW4gsKbP9uJMk08FceA42w00fIdYnn5ZrXJaiwD/tYw CI+I/gQOtykus7NUo9Tf6x5BgJMCNfEJPBBZ4LLCVLOP7P90wxy+yEqTj+4f5Rhk iFHn7tuvjB2iDF+G1MvvFTEjugIz5sFs1NdDV5dfw9N0Oad6O8ji3UeQOt3rMirV 0GyefMFYY6YXpA+Pyvr5JaeLidCLwYceqmNiBVYnZ/snGoXaSc8CG1pxNCEr/PS+ e6nYgvjZOuHzElbc7NOdjZl24ruNtJJmTv1/XDHj54QH0EH74QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7Vchi+1PuVIMIke1Cn/y3sMWiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvNGQzM2FkNzItY2Q2OS0z YjM5LWFmNTQtYmI3ZjYzNGEwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZTR+YGR5LXvEAYsJeSCLyzWUR++Jjcg3Ys5diktEjJLpLcG3gFXhHq gwpfCI89ztSbF1qkFkAqAAw+vpgah5LyT19yKSqN35X8FeCD+f7V2o2fmO1x/7c7 1E/wOf6Z42rLwzEO2KdsuSkewrbbNejvbRlaluGCSKA2BHP9OSX59uRFBc9VixJV HxcK5JkgIXgvRE8zwKGbDiIookM7/b1UxRwFsgNuKwQVZCs50wCayfFHEZx4L0XD eaKEiOqG6bVnlFzH05poTS6nfJfPoFxINTLo5Uf+LcrCE2ah2bbhxIIlBdzrwyMn iot+NmVJ3kiaJEHJNaDQkUnTELVS5oE= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:31 2024 by rpki-client on console-fra.rpki-client.org