$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa File: 5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa (raw, json) Hash identifier: KupwNi4dw0PX2iOqbH4GAVFiAq9Nph3z3PiPxYIn+F8= Subject key identifier: 7E:AC:40:98:AA:32:C3:A8:DB:55:A6:2D:50:AC:C8:15:EF:52:B9:A0 Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F43285847EFEF8CCC00B2F015A1900D80 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 27370 IP address blocks: 140.241.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:8c:cc:00:b2:f0:15:a1:90:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=5e2f0bbc-58a9-4402-bab1-630f82df63b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:66:43:c2:55:0f:0f:4f:81:53:fc:bb:a2:91: 37:34:cb:7a:23:a5:64:ea:ce:1c:b2:d8:c0:22:0a: c1:37:bb:e2:fc:af:c0:ea:67:2a:8d:97:44:a3:74: cf:a6:86:7b:81:fd:3b:db:93:d6:07:bf:90:2f:f2: 51:6f:61:01:d9:36:11:e6:16:c7:43:1a:f4:02:00: 13:87:2c:92:30:bc:a7:af:06:f9:fb:99:d2:26:02: 1d:ad:92:22:72:f1:41:6a:6c:ec:16:d0:b1:58:66: 74:ec:cc:4f:aa:f3:4e:d9:a8:a7:0f:35:66:d9:ca: 16:38:5a:1c:53:0f:ca:0b:02:36:e9:83:40:47:f9: b3:bd:d2:c3:f6:b1:03:1d:09:21:30:40:54:d6:95: f9:c9:aa:90:04:d1:d0:2f:4d:e0:23:bd:b4:ae:93: d2:b9:9e:e6:74:3a:f5:86:96:40:c7:06:db:08:cc: 36:49:d2:11:84:b7:74:ac:49:0a:ef:db:b3:2c:dd: 86:90:f1:82:b9:f4:82:31:62:83:fd:54:36:16:9b: 98:b7:12:60:da:a7:35:2e:65:ae:46:84:9e:e3:42: b1:5e:25:58:45:7e:40:a3:58:45:e8:06:a9:a6:e5: 59:70:0d:a5:89:d4:13:e2:2a:d1:94:ba:36:87:df: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AC:40:98:AA:32:C3:A8:DB:55:A6:2D:50:AC:C8:15:EF:52:B9:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/5f01fdc8-59dd-3afb-b4ce-0efc261043d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b3:f7:71:87:06:73:0d:c0:85:7f:bb:e5:a8:46:4a:ab:90: 6b:74:7a:89:97:fe:de:ba:df:8f:0f:26:10:ab:47:f9:63:58: 30:c7:9f:e3:89:dd:df:c1:ed:77:a1:e9:1e:7b:0b:51:94:0a: c0:7e:b5:ef:e1:23:0b:62:da:e7:59:72:de:58:e1:f1:44:a5: b4:1b:3b:b5:c0:f5:d8:b1:39:4b:1a:29:e9:c5:a8:c7:c2:ac: 54:d4:0b:87:b4:44:a4:47:14:44:9a:4c:a0:a5:8b:d0:41:1f: 33:88:f4:11:11:f4:4e:c1:34:c0:99:ad:f8:ee:af:90:d3:ec: 93:b3:10:b2:08:2e:1c:2d:30:c6:02:20:2f:0d:5c:31:a2:bf: c5:fd:20:42:db:13:fc:55:99:c2:13:29:cf:61:b5:d5:89:b6: d5:76:91:54:ca:9f:b7:40:b3:af:20:0e:9f:72:0b:58:87:73: c8:2c:e1:1f:59:83:05:52:53:6f:b1:76:37:ca:fe:cd:c7:3f: c0:50:d5:82:65:c3:b5:15:1b:88:ad:44:41:49:e6:cf:a0:72: 20:a1:2c:66:3e:fe:dd:32:51:e0:3e:09:35:78:c5:8a:32:43: fc:85:26:4d:82:aa:63:ba:50:55:29:a0:eb:79:76:d2:a8:8e: 2d:69:a9:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74zMALLwFaGQDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk NWUyZjBiYmMtNThhOS00NDAyLWJhYjEtNjMwZjgyZGY2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GZDwlUPD0+BU/y7opE3NMt6I6Vk6s4cstjA IgrBN7vi/K/A6mcqjZdEo3TPpoZ7gf0725PWB7+QL/JRb2EB2TYR5hbHQxr0AgAT hyySMLynrwb5+5nSJgIdrZIicvFBamzsFtCxWGZ07MxPqvNO2ainDzVm2coWOFoc Uw/KCwI26YNAR/mzvdLD9rEDHQkhMEBU1pX5yaqQBNHQL03gI720rpPSuZ7mdDr1 hpZAxwbbCMw2SdIRhLd0rEkK79uzLN2GkPGCufSCMWKD/VQ2FpuYtxJg2qc1LmWu RoSe40KxXiVYRX5Ao1hF6AappuVZcA2lidQT4irRlLo2h98L1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6sQJiqMsOo21WmLVCsyBXvUrmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvNWYwMWZkYzgtNTlkZC0z YWZiLWI0Y2UtMGVmYzI2MTA0M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOz93GHBnMNwIV/u+WoRkqrkGt0eomX/t66348PJhCrR/ljWDDHn+OJ 3d/B7Xeh6R57C1GUCsB+te/hIwti2udZct5Y4fFEpbQbO7XA9dixOUsaKenFqMfC rFTUC4e0RKRHFESaTKCli9BBHzOI9BER9E7BNMCZrfjur5DT7JOzELIILhwtMMYC IC8NXDGiv8X9IELbE/xVmcITKc9htdWJttV2kVTKn7dAs68gDp9yC1iHc8gs4R9Z gwVSU2+xdjfK/s3HP8BQ1YJlw7UVG4itREFJ5s+gciChLGY+/t0yUeA+CTV4xYoy Q/yFJk2CqmO6UFUpoOt5dtKoji1pqfE= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:44 2024 by rpki-client on console-fra.rpki-client.org