$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa File: 3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa (raw, json) Hash identifier: atre+IBjKx2NThM6pORNZkevL8PCq1AX+XdNZa9l4JA= Subject key identifier: 3A:F9:E1:DA:08:C5:93:E5:E3:62:F4:0A:A9:55:EF:87:3B:89:22:5B Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F43285847669CDEC04B711B7A409C6840 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa Signing time: Tue 01 Oct 2024 21:28:29 +0000 ROA not before: Tue 01 Oct 2024 21:28:29 +0000 ROA not after: Mon 30 Dec 2024 22:28:29 +0000 asID: 398156 IP address blocks: 158.120.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:66:9c:de:c0:4b:71:1b:7a:40:9c:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 1 21:28:29 2024 GMT Not After : Dec 30 22:28:29 2024 GMT Subject: CN=b801f663-b401-41b5-87a4-8b1a4400df47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:53:03:84:41:27:63:bc:e5:5f:45:4d:a3:72: ac:75:ba:08:a9:7d:52:f5:15:0b:ec:b6:39:84:53: c3:a9:b0:2e:d4:0d:a5:f5:61:2d:0b:ec:e0:ab:47: 2d:3d:a6:05:d7:63:75:49:a3:4a:e9:5d:54:7d:79: 28:58:57:ed:36:07:f8:74:85:28:dd:d2:c4:ab:8f: 12:22:70:e9:5b:fa:db:ea:22:52:3e:b4:e2:8e:57: be:2f:be:d8:e3:36:2a:7f:86:b3:0d:9d:f5:95:b0: 4e:c3:6b:e5:48:33:17:fe:b8:24:d9:fa:cf:af:42: 35:71:68:da:39:63:7c:19:78:65:f8:75:de:6c:28: 40:a5:76:34:ec:b7:a0:4b:23:20:23:bd:74:ff:78: 3d:15:f8:65:cc:1d:40:86:1e:f3:99:c9:34:8b:f6: ea:89:0f:82:29:75:59:03:0e:66:7d:65:e3:c9:5a: 96:61:a0:b3:81:2d:97:32:fc:36:38:36:75:af:0f: 52:02:7d:2d:87:b8:d9:2e:f6:61:c2:cc:87:c8:72: 03:e3:bd:be:5f:65:99:0e:5f:f0:70:12:d8:9c:c2: d8:35:ed:0a:97:53:b7:53:5c:28:2e:69:77:e1:4e: c6:11:e9:49:60:52:52:7f:45:7e:94:a0:8c:76:21: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F9:E1:DA:08:C5:93:E5:E3:62:F4:0A:A9:55:EF:87:3B:89:22:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:5e:e1:75:c3:1e:eb:c4:3b:d4:de:ca:1a:4e:70:38:1f:a5: ca:e8:8b:30:3f:c9:60:8b:c1:b5:98:23:e7:9f:44:43:77:ed: 5d:b1:da:ae:68:11:63:2d:78:43:66:4f:d4:94:20:7b:3b:36: 13:ac:21:27:6d:95:bf:b0:33:e6:f6:6f:bd:59:a4:8b:51:de: 43:d0:0e:a1:7c:89:3f:0a:9a:84:ee:a6:2d:26:77:7d:19:02: ba:e8:b5:58:0b:03:78:3b:5a:04:d8:ce:7a:1c:21:31:31:ff: 4e:92:b0:eb:75:f8:3b:e7:73:ba:36:33:67:42:69:52:ec:54: 15:be:15:74:bd:90:07:8f:f7:57:59:2e:4f:90:c2:82:da:95: 07:08:81:a9:86:9d:7d:e2:5b:5d:a2:a8:83:b4:ab:ec:fc:b8: 52:7d:08:75:01:40:18:86:70:5c:4f:08:5b:ac:44:01:5d:e5: 5a:e2:4d:62:96:45:c9:11:4c:2a:f7:b2:17:a0:53:d7:4d:ac: bb:55:a9:f9:5d:27:95:92:f9:13:f0:55:a8:4c:77:ee:b1:05: 2f:36:55:ad:13:82:e5:75:ab:ef:2f:24:8d:15:4e:99:d0:32: ea:62:a4:70:20:dd:a4:f8:ca:7b:53:66:89:82:7c:79:d4:a1: d4:04:fb:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmnN7AS3EbekCcaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI0MTAwMTIxMjgyOVoXDTI0MTIzMDIyMjgyOVowLzEtMCsGA1UEAxMk YjgwMWY2NjMtYjQwMS00MWI1LTg3YTQtOGIxYTQ0MDBkZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VMDhEEnY7zlX0VNo3KsdboIqX1S9RUL7LY5 hFPDqbAu1A2l9WEtC+zgq0ctPaYF12N1SaNK6V1UfXkoWFftNgf4dIUo3dLEq48S InDpW/rb6iJSPrTijle+L77Y4zYqf4azDZ31lbBOw2vlSDMX/rgk2frPr0I1cWja OWN8GXhl+HXebChApXY07LegSyMgI710/3g9FfhlzB1Ahh7zmck0i/bqiQ+CKXVZ Aw5mfWXjyVqWYaCzgS2XMvw2ODZ1rw9SAn0th7jZLvZhwsyHyHID472+X2WZDl/w cBLYnMLYNe0Kl1O3U1woLml34U7GEelJYFJSf0V+lKCMdiEuSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr54doIxZPl42L0CqlV74c7iSJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvM2ZkNDczNDQtYzljZC0z NTcwLThmOGQtMzgwMjlkNmQ0MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnnjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZe4XXDHuvEO9TeyhpOcDgfpcroizA/yWCLwbWYI+efREN37V2x2q5o EWMteENmT9SUIHs7NhOsISdtlb+wM+b2b71ZpItR3kPQDqF8iT8KmoTupi0md30Z ArrotVgLA3g7WgTYznocITEx/06SsOt1+Dvnc7o2M2dCaVLsVBW+FXS9kAeP91dZ Lk+QwoLalQcIgamGnX3iW12iqIO0q+z8uFJ9CHUBQBiGcFxPCFusRAFd5VriTWKW RckRTCr3shegU9dNrLtVqfldJ5WS+RPwVahMd+6xBS82Va0TguV1q+8vJI0VTpnQ MupipHAg3aT4yntTZomCfHnUodQE+yE= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org