$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa File: 0d2c580c-ba11-3551-b662-e0e416396c1b.roa (raw, json) Hash identifier: DTBx2eTILUG+ayXVaBTR+B23aIN2klLYCdXKaenBSE4= Subject key identifier: 25:2A:8D:42:11:AE:D7:2B:DB:D8:27:68:6E:97:74:4F:A7:DE:A0:B4 Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F43285847EFEF8CDB2ED2A13610493280 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 27370 IP address blocks: 140.241.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:8c:db:2e:d2:a1:36:10:49:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=db7d5fbc-23b7-4d2e-89e3-178440f06c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:a8:e5:12:76:74:2c:12:08:ff:c3:52:3f: 13:1c:89:d4:11:fb:9b:13:f1:a1:00:3b:f6:80:ac: c1:51:db:11:63:a7:00:68:62:7e:cb:d1:4a:a8:b6: 88:57:73:af:ef:08:c0:0a:60:a1:af:91:c9:67:cc: 4f:8c:1c:25:71:2c:09:25:25:60:5c:25:54:70:82: 0a:e3:da:64:5b:22:a3:f2:56:96:02:8b:6f:ec:47: 2b:f0:03:5b:73:34:38:d2:6f:c5:62:99:59:10:ff: b2:6c:39:6b:2d:ac:57:20:96:a2:2d:ca:e5:e1:80: 3a:91:d9:55:7f:ac:a3:d5:21:d8:51:27:04:aa:a8: 01:f6:a7:30:c4:b3:00:2b:b6:21:ed:b5:d0:e1:ce: 91:ef:cc:de:24:69:3c:ca:6f:30:23:d4:b4:9c:b4: 6b:9f:27:38:86:5b:64:10:26:cf:7c:81:ae:28:52: c6:c0:bf:69:6e:3c:9e:51:6f:b8:31:77:23:40:3d: f9:fc:7f:24:d2:22:a7:7f:c9:64:14:b3:c7:ad:f2: 95:56:44:29:74:2b:b2:61:5f:f0:f1:d8:44:53:ab: 6b:05:18:f3:d2:6d:25:c0:12:c6:d4:a2:dc:5b:70: 62:27:a7:14:ee:a2:9f:69:95:fd:35:f0:b5:a1:b7: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2A:8D:42:11:AE:D7:2B:DB:D8:27:68:6E:97:74:4F:A7:DE:A0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:86:48:d4:49:ba:11:19:6c:e2:2e:16:0b:53:e5:d1:37:ef: e1:b0:8d:f3:e7:00:8a:df:32:cf:0c:8c:d9:08:0a:53:f2:2a: 0f:c1:e6:0a:5d:7e:2a:27:f6:0f:83:f0:13:bd:b1:8b:7c:e0: 2f:a2:69:35:0d:e4:74:c8:90:87:21:99:48:62:e2:3d:e7:af: 41:e8:a7:e7:39:64:16:c8:f5:eb:b7:da:96:6f:b0:88:6b:6e: cc:85:2b:08:85:f6:b6:c8:de:82:24:57:0d:87:14:15:bb:14: 2f:04:85:62:8e:95:18:1a:92:1f:73:c7:e2:f1:0a:94:22:14: 17:d9:b4:8b:45:ab:42:cc:2e:4e:87:e2:2f:56:96:8e:13:6a: b1:1e:76:90:ef:b8:22:ce:92:ed:cd:17:ba:ca:7a:f8:f7:85: 31:7a:15:26:c9:65:19:e7:ae:c3:df:43:9b:db:e2:91:21:cd: 62:88:6e:30:45:c3:57:9c:e3:dd:c7:ed:f7:f2:e2:39:08:a0: d2:03:c0:26:1d:6d:c5:d1:b8:79:89:c5:d1:f4:2e:85:78:82: 42:0d:18:8d:2a:94:ea:6c:4e:b9:a9:8c:c5:0c:4d:e4:14:3d: 7b:5b:86:42:fd:64:9f:f0:77:23:71:88:94:4a:3a:04:8d:1a: 57:ae:2b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74zbLtKhNhBJMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk ZGI3ZDVmYmMtMjNiNy00ZDJlLTg5ZTMtMTc4NDQwZjA2YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK2o5RJ2dCwSCP/DUj8THInUEfubE/GhADv2 gKzBUdsRY6cAaGJ+y9FKqLaIV3Ov7wjACmChr5HJZ8xPjBwlcSwJJSVgXCVUcIIK 49pkWyKj8laWAotv7Ecr8ANbczQ40m/FYplZEP+ybDlrLaxXIJaiLcrl4YA6kdlV f6yj1SHYUScEqqgB9qcwxLMAK7Yh7bXQ4c6R78zeJGk8ym8wI9S0nLRrnyc4hltk ECbPfIGuKFLGwL9pbjyeUW+4MXcjQD35/H8k0iKnf8lkFLPHrfKVVkQpdCuyYV/w 8dhEU6trBRjz0m0lwBLG1KLcW3BiJ6cU7qKfaZX9NfC1obfLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUqjUIRrtcr29gnaG6XdE+n3qC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvMGQyYzU4MGMtYmExMS0z NTUxLWI2NjItZTBlNDE2Mzk2YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiGSNRJuhEZbOIuFgtT5dE37+GwjfPnAIrfMs8MjNkIClPyKg/B5gpd fion9g+D8BO9sYt84C+iaTUN5HTIkIchmUhi4j3nr0Hop+c5ZBbI9eu32pZvsIhr bsyFKwiF9rbI3oIkVw2HFBW7FC8EhWKOlRgakh9zx+LxCpQiFBfZtItFq0LMLk6H 4i9Wlo4TarEedpDvuCLOku3NF7rKevj3hTF6FSbJZRnnrsPfQ5vb4pEhzWKIbjBF w1ec493H7ffy4jkIoNIDwCYdbcXRuHmJxdH0LoV4gkINGI0qlOpsTrmpjMUMTeQU PXtbhkL9ZJ/wdyNxiJRKOgSNGleuK+c= -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org