$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json) Hash identifier: 6s0jVx4QBIQ8cEh3d2gNGh1cTNWCx2EO+A2XNLe1ZTQ= Subject key identifier: EE:2E:27:ED:55:A6:22:B3:31:C1:7F:16:C9:A0:C8:84:4A:72:D9:9A Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611 Certificate serial: 010D0C9F4328584748509BC3D7E0085372F30780 Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 12980 IP address blocks: 129.35.160.0/20 maxlen: 20 170.225.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:9b:c3:d7:e0:08:53:72:f3:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=0385cc68-764e-4fa2-9e19-27d27f1bdcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:cb:13:b7:65:e3:9d:89:5a:58:ea:cb:c1: 17:86:10:f7:68:d3:36:85:d4:43:34:e6:0e:55:5a: a6:f2:57:c9:38:03:a4:0b:1f:07:f8:28:f3:d2:b3: f7:5c:0a:56:05:43:76:02:2e:7c:00:77:ba:3b:1e: 05:9d:bb:7c:3b:b5:f7:1c:b2:80:72:44:9b:1f:2f: ca:51:9b:36:21:6c:75:20:8c:0d:7a:a6:81:ac:c4: c0:09:dd:85:ef:f4:d8:2b:ee:8f:9b:cf:02:d0:15: 84:5e:17:32:ed:d9:a1:ab:f7:87:74:fe:9f:87:da: 9e:44:41:74:7b:30:39:00:64:41:40:fa:6a:75:1e: 8c:ac:57:19:50:ee:5b:15:7d:c6:c5:96:90:b9:13: 36:8b:1d:83:7a:4b:9e:f8:e4:c6:bc:51:64:82:d0: 15:99:1b:c9:72:57:f7:05:3d:0a:40:5f:ce:94:61: 4c:58:88:fa:80:8b:c9:25:e7:f8:aa:2c:94:bf:72: 63:da:ab:34:4a:37:ff:d3:d9:6c:e4:3d:76:20:50: b4:e0:c9:03:39:b1:31:2e:46:0a:4e:ab:91:c7:d2: 32:fc:3e:96:01:ff:67:bf:03:cb:3d:60:de:8d:05: 8c:f2:2f:f7:d8:31:e0:21:0d:52:ee:5d:59:d7:8c: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:27:ED:55:A6:22:B3:31:C1:7F:16:C9:A0:C8:84:4A:72:D9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl X509v3 Authority Key Identifier: keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer sbgp-ipAddrBlock: critical IPv4: 129.35.160.0/20 170.225.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2c:c3:8b:b0:9d:6e:fa:17:e4:45:31:5c:93:6f:ba:cc:d6: 2a:8a:89:d5:92:0b:20:11:05:78:f5:0f:24:b0:fd:94:eb:da: 04:75:0d:30:3f:8f:72:13:f1:e8:41:2d:b2:cf:ed:6a:1a:c2: f7:f6:af:e8:be:f2:5d:ce:1c:0f:0a:8b:1d:6b:fb:a4:70:fe: b7:76:ed:71:0a:9f:0f:99:8f:75:b0:6f:88:95:ef:32:6c:cc: 8d:6d:90:6a:4d:11:c4:1a:ff:a9:59:dd:47:25:9e:91:7d:03: 13:2f:19:4a:01:1f:7e:64:9d:a9:92:5f:43:b8:a1:c9:b8:0b: e5:d0:1e:c7:ee:ee:ab:69:56:e6:ad:c1:ce:92:0b:76:ee:0f: 09:72:eb:b6:67:9b:b5:8f:63:cb:90:30:83:43:25:d8:66:ce: 5e:93:5e:1a:64:5b:97:9b:05:f9:90:62:e9:20:4a:e8:a9:85: e8:12:69:13:2d:2f:8b:d6:d7:25:0b:95:51:78:0a:0f:82:7c: 21:cc:cf:b9:be:87:d8:39:02:97:b7:ab:f3:e5:a5:b2:5d:b3: 69:be:0d:2c:39:48:fa:c4:00:8a:ac:3b:5f:86:10:04:f4:69: 86:c7:1b:75:87:78:89:e2:72:a3:59:b1:85:fc:e7:6a:1c:95: 30:f8:d9:06 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdIUJvD1+AIU3LzB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy NjExMB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk MDM4NWNjNjgtNzY0ZS00ZmEyLTllMTktMjdkMjdmMWJkY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6DLE7dl452JWljqy8EXhhD3aNM2hdRDNOYO VVqm8lfJOAOkCx8H+Cjz0rP3XApWBUN2Ai58AHe6Ox4Fnbt8O7X3HLKAckSbHy/K UZs2IWx1IIwNeqaBrMTACd2F7/TYK+6Pm88C0BWEXhcy7dmhq/eHdP6fh9qeREF0 ezA5AGRBQPpqdR6MrFcZUO5bFX3GxZaQuRM2ix2Dekue+OTGvFFkgtAVmRvJclf3 BT0KQF/OlGFMWIj6gIvJJef4qiyUv3Jj2qs0Sjf/09ls5D12IFC04MkDObExLkYK TquRx9Iy/D6WAf9nvwPLPWDejQWM8i/32DHgIQ1S7l1Z14x1jwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO4uJ+1VpiKzMcF/FsmgyIRKctmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0 YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvODY2MDRjMWUtZTUyNi0z MzRlLWFiNjEtMWZiMzM5M2ZiMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3 NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4 MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4 MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEgSOgAwQE quGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACAsw4uwnW76F+RFMVyTb7rM1iqKidWSCyARBXj1DySw/ZTr 2gR1DTA/j3IT8ehBLbLP7Woawvf2r+i+8l3OHA8Kix1r+6Rw/rd27XEKnw+Zj3Ww b4iV7zJszI1tkGpNEcQa/6lZ3UclnpF9AxMvGUoBH35knamSX0O4ocm4C+XQHsfu 7qtpVuatwc6SC3buDwly67Znm7WPY8uQMINDJdhmzl6TXhpkW5ebBfmQYukgSuip hegSaRMtL4vW1yULlVF4Cg+CfCHMz7m+h9g5Ape3q/PlpbJds2m+DSw5SPrEAIqs O1+GEAT0aYbHG3WHeInicqNZsYX852oclTD42QY= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:13 2024 by rpki-client on console-fra.rpki-client.org