$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f40f5931-63bf-3c5d-a652-e6f0a5031d08.roa File: f40f5931-63bf-3c5d-a652-e6f0a5031d08.roa (raw, json) Hash identifier: DrT0tHsZXXY0Gb/S3lCDgYM6Dq5Mb7P/fRRJ7vKYtks= Subject key identifier: 5E:7E:2B:43:E7:B4:09:28:E5:22:B8:4D:65:C9:EB:5F:57:AD:71:27 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F43285847CFF480B67D14C14944246E80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f40f5931-63bf-3c5d-a652-e6f0a5031d08.roa Signing time: Fri 08 Nov 2024 15:04:55 +0000 ROA not before: Fri 08 Nov 2024 15:04:55 +0000 ROA not after: Thu 06 Feb 2025 15:04:55 +0000 asID: 81 IP address blocks: 152.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:f4:80:b6:7d:14:c1:49:44:24:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Nov 8 15:04:55 2024 GMT Not After : Feb 6 15:04:55 2025 GMT Subject: CN=974d84cf-192b-4b0c-b2c6-790f0452f434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d5:86:f6:4b:6d:7f:c1:ae:1c:e9:bf:8c:42: 79:7e:5c:a9:16:f9:75:b2:82:0c:9d:36:a5:76:88: 52:89:d1:64:9b:e9:f8:3a:1a:ff:4b:2a:22:96:d4: e8:d4:7c:75:94:f1:ad:ae:97:3b:4d:fb:83:56:79: fe:ad:a6:f8:1e:2c:7b:4a:0f:1e:94:10:ca:dd:e4: 9f:75:ff:df:3f:ce:61:ef:d0:c6:58:6b:05:69:fa: af:93:82:da:6a:be:02:d2:37:52:de:32:d0:37:b8: 11:d5:89:12:e5:7e:46:36:9e:2f:5f:73:b6:2e:f9: 2f:6b:4d:d9:65:bd:50:36:2b:f3:a1:a0:76:2e:5e: 08:a6:a5:60:67:4e:9d:8e:20:e4:51:87:a1:06:f0: e7:05:aa:d6:2f:6b:73:44:ea:b9:b7:33:b5:33:b8: da:ff:1c:d1:03:6c:0f:ea:83:0b:05:32:46:b9:30: 3c:ce:48:57:c0:2c:99:0e:aa:a7:ed:c2:eb:61:cd: 83:ec:60:dd:b4:b3:a5:0b:33:0d:15:8b:ae:fa:d5: 62:c7:db:de:11:3b:67:8d:48:1d:c4:8f:ce:0e:02: 35:75:b7:eb:7a:2d:76:e0:68:72:48:c0:71:d1:0a: c4:e0:cd:a3:9e:ae:02:dc:2c:7f:39:ec:e3:03:1b: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7E:2B:43:E7:B4:09:28:E5:22:B8:4D:65:C9:EB:5F:57:AD:71:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f40f5931-63bf-3c5d-a652-e6f0a5031d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0d:e1:e6:2f:32:e9:ca:f6:78:00:5e:00:71:0b:2d:c8:51: 4e:2a:e5:86:5f:ab:9a:73:3c:10:47:02:c6:4e:3d:66:fa:dd: 1b:65:17:66:54:4c:8c:66:a5:33:82:94:0b:11:c5:cc:6a:9c: b0:3e:e8:36:7b:81:30:7a:50:19:45:6a:80:27:69:3e:41:a3: 1f:58:aa:14:6c:16:68:cc:1d:7f:d8:8e:b7:89:29:4f:bf:84: f7:1d:75:93:78:80:fd:41:b2:35:14:d5:bc:79:34:15:77:8e: c4:bf:23:8f:1d:9c:36:7d:65:9e:70:bb:ec:34:d2:c7:1a:69: f6:e3:26:3e:56:9e:ab:fa:e6:50:9a:0e:6a:17:cb:90:e7:a8: 9f:a0:1c:ef:48:1d:1b:a3:06:f2:26:e3:d1:c7:05:36:1f:c5: 5e:b8:fb:57:37:4d:0d:a9:c8:cc:c5:44:97:8b:1f:43:44:1c: 2d:62:65:4a:2c:6b:c8:de:1c:a0:72:45:d8:66:16:f4:ed:1a: 20:37:bd:eb:b3:f6:d5:c9:f0:80:d8:5c:57:e8:0e:b7:d0:f2: df:3a:01:1f:82:4a:c0:25:bc:e1:37:a7:55:fd:c4:4e:fd:ad: 9e:f0:59:5e:38:11:8c:38:61:8d:45:1f:78:25:fa:2a:44:f1: 00:d5:0b:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfP9IC2fRTBSUQkboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI0MTEwODE1MDQ1NVoXDTI1MDIwNjE1MDQ1NVowLzEtMCsGA1UEAxMk OTc0ZDg0Y2YtMTkyYi00YjBjLWIyYzYtNzkwZjA0NTJmNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitWG9kttf8GuHOm/jEJ5flypFvl1soIMnTal dohSidFkm+n4Ohr/SyoiltTo1Hx1lPGtrpc7TfuDVnn+rab4Hix7Sg8elBDK3eSf df/fP85h79DGWGsFafqvk4Laar4C0jdS3jLQN7gR1YkS5X5GNp4vX3O2Lvkva03Z Zb1QNivzoaB2Ll4IpqVgZ06djiDkUYehBvDnBarWL2tzROq5tzO1M7ja/xzRA2wP 6oMLBTJGuTA8zkhXwCyZDqqn7cLrYc2D7GDdtLOlCzMNFYuu+tVix9veETtnjUgd xI/ODgI1dbfrei124GhySMBx0QrE4M2jnq4C3Cx/OezjAxu0AwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF5+K0PntAko5SK4TWXJ619XrXEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjQwZjU5MzEtNjNiZi0z YzVkLWE2NTItZTZmMGE1MDMxZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAQ3h5i8y6cr2eABeAHELLchRTirlhl+rmnM8EEcCxk49ZvrdG2UXZlRM jGalM4KUCxHFzGqcsD7oNnuBMHpQGUVqgCdpPkGjH1iqFGwWaMwdf9iOt4kpT7+E 9x11k3iA/UGyNRTVvHk0FXeOxL8jjx2cNn1lnnC77DTSxxpp9uMmPlaeq/rmUJoO ahfLkOeon6Ac70gdG6MG8ibj0ccFNh/FXrj7VzdNDanIzMVEl4sfQ0QcLWJlSixr yN4coHJF2GYW9O0aIDe967P21cnwgNhcV+gOt9Dy3zoBH4JKwCW84TenVf3ETv2t nvBZXjgRjDhhjUUfeCX6KkTxANUL0A== -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:35 2024 by rpki-client on console-fra.rpki-client.org