$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa File: 672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa (raw, json) Hash identifier: 8T4FOZ1oRh+gyCFcSGWnhce8KZ74fpzd11ZO2qxohuE= Subject key identifier: 7E:68:37:96:83:EB:3F:73:14:79:22:99:2F:DD:24:53:4C:E5:76:BD Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285847E1F33965892F24894507A714 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa Signing time: Fri 15 Nov 2024 01:46:54 +0000 ROA not before: Fri 15 Nov 2024 01:46:54 +0000 ROA not after: Thu 13 Feb 2025 01:46:54 +0000 asID: 931 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f3:39:65:89:2f:24:89:45:07:a7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Nov 15 01:46:54 2024 GMT Not After : Feb 13 01:46:54 2025 GMT Subject: CN=cc9d16e0-a4fb-4a04-af68-6c1d790c97f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:79:d7:1a:f7:1a:12:b1:39:d3:7b:e8:ff: e8:9f:34:61:41:3d:c3:4c:ce:85:7c:80:10:24:ad: 8a:4d:0f:22:bc:81:75:f1:f0:ae:c9:a1:a4:74:3c: d6:15:93:43:65:ae:4d:6c:ba:b1:da:df:39:55:2d: 83:79:e8:6b:75:c9:3d:c0:4f:f3:69:1b:6f:e0:7d: 06:a9:2f:91:57:65:62:a7:78:7c:a6:a9:f7:e0:39: d8:7e:0f:04:f6:48:38:f2:aa:94:b5:dd:a0:08:1b: 6c:1d:c0:07:8a:61:d0:f3:9f:a9:19:c7:ad:08:41: c7:1c:ef:d9:bf:40:6e:f9:b6:54:8a:fe:2e:3c:d6: d5:e3:1c:cf:04:29:47:99:c5:d5:1a:0f:d3:ce:fc: 3a:54:59:7e:82:7e:be:dd:4e:e6:2b:51:f9:be:34: 6d:63:e3:a8:34:b9:e6:93:80:89:a1:f4:3a:38:a2: 11:56:d9:41:00:9d:74:ae:02:b3:9f:f3:fb:10:46: 76:a9:74:08:fd:dd:b9:38:74:49:2c:7c:b8:fb:e0: 6d:44:6e:44:9f:75:5b:c5:64:c5:39:be:7e:81:96: ec:71:83:f7:4d:d9:60:e8:62:51:5b:63:18:be:c4: b0:a3:3e:30:48:5a:45:d0:60:db:29:89:b9:4f:4e: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:37:96:83:EB:3F:73:14:79:22:99:2F:DD:24:53:4C:E5:76:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:99:53:b8:bf:be:b9:64:34:36:b1:29:34:77:8f:71:f0:ac: 16:23:bf:c7:31:32:0b:10:5b:39:5f:dc:2f:3a:97:7b:cb:25: f8:2b:a9:db:4f:0d:eb:aa:d5:56:01:02:6b:e8:2a:14:e9:b1: d5:e2:80:46:b4:9f:5c:1d:a9:a8:dc:5e:f0:d1:36:e6:59:62: a5:55:70:73:5c:9f:1c:71:a1:d6:30:9e:ad:06:64:d6:ad:4a: 35:e9:52:a6:ea:2d:09:a0:5f:b7:4f:36:41:b5:41:b8:a0:e5: 11:59:06:e5:5c:10:53:63:87:6b:21:04:e0:d4:df:7c:3d:93: c5:b4:8e:a7:64:00:1e:89:7b:f7:e2:1e:c3:c3:b6:21:32:e8: b7:98:c2:93:e1:2e:1b:33:36:4c:65:4b:97:da:8a:90:2b:e4: 9e:b5:f2:f4:4d:a8:a8:92:fa:40:a1:04:10:8e:2d:9d:8f:10: 4f:2a:a7:b0:3d:02:a4:62:0a:c3:92:65:1e:c8:96:37:2f:94: 99:93:d4:9e:73:dc:be:a5:09:80:b5:3b:e4:43:67:e2:a1:21: fa:5d:f6:de:70:de:9b:2c:b7:3e:18:fc:f2:c2:d4:4c:4d:d9: bc:64:1a:57:5b:aa:ac:e3:ed:5c:82:b0:3d:8f:05:05:0b:b3: d8:81:60:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh8zlliS8kiUUHpxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI0MTExNTAxNDY1NFoXDTI1MDIxMzAxNDY1NFowLzEtMCsGA1UEAxMk Y2M5ZDE2ZTAtYTRmYi00YTA0LWFmNjgtNmMxZDc5MGM5N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyh51xr3GhKxOdN76P/onzRhQT3DTM6FfIAQ JK2KTQ8ivIF18fCuyaGkdDzWFZNDZa5NbLqx2t85VS2Deehrdck9wE/zaRtv4H0G qS+RV2Vip3h8pqn34DnYfg8E9kg48qqUtd2gCBtsHcAHimHQ85+pGcetCEHHHO/Z v0Bu+bZUiv4uPNbV4xzPBClHmcXVGg/Tzvw6VFl+gn6+3U7mK1H5vjRtY+OoNLnm k4CJofQ6OKIRVtlBAJ10rgKzn/P7EEZ2qXQI/d25OHRJLHy4++BtRG5En3VbxWTF Ob5+gZbscYP3Tdlg6GJRW2MYvsSwoz4wSFpF0GDbKYm5T07aeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5oN5aD6z9zFHkimS/dJFNM5Xa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjcyMTk0YzItNGFhMS0z Yzg0LWE5ZDgtYjhlODk1NjZmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaZU7i/vrlkNDaxKTR3j3HwrBYjv8cxMgsQWzlf3C86l3vLJfgrqdtP Deuq1VYBAmvoKhTpsdXigEa0n1wdqajcXvDRNuZZYqVVcHNcnxxxodYwnq0GZNat SjXpUqbqLQmgX7dPNkG1Qbig5RFZBuVcEFNjh2shBODU33w9k8W0jqdkAB6Je/fi HsPDtiEy6LeYwpPhLhszNkxlS5faipAr5J618vRNqKiS+kChBBCOLZ2PEE8qp7A9 AqRiCsOSZR7IljcvlJmT1J5z3L6lCYC1O+RDZ+KhIfpd9t5w3psstz4Y/PLC1ExN 2bxkGldbqqzj7VyCsD2PBQULs9iBYIo= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:32 2024 by rpki-client on console-fra.rpki-client.org