$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa File: 0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa (raw, json) Hash identifier: 4RYX4LrovwaVMkJYnNjyNM6WsLB0JRgLLgdGcXZU60M= Subject key identifier: C6:7E:C4:65:8B:EF:5F:D6:2F:F5:B0:7B:B9:91:35:DA:B8:CB:89:8A Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584769D0D6AE44B9437FE826F300 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 62610 IP address blocks: 128.1.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d6:ae:44:b9:43:7f:e8:26:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=24d16ea3-4014-4996-992c-25192ad9456f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:02:98:91:5e:72:a4:ee:30:a7:6f:28:02:ec: 9d:ca:3f:d4:fd:c0:16:fa:ec:5a:cf:22:91:5b:d1: b9:36:c0:1a:44:71:ac:cd:78:f0:d7:00:5a:1c:a8: 8e:45:18:3d:5b:91:a5:ca:3b:ce:5c:7c:cb:9c:e4: 4b:b7:b7:bc:77:79:06:ec:d3:ab:30:d3:60:bd:b1: 12:8b:ad:70:75:89:e6:b8:7d:9c:8c:b9:1a:19:44: c8:01:be:16:1b:44:9e:0a:ab:ee:a9:55:af:9a:47: 5d:d2:15:ce:7f:fc:5e:63:91:6c:5e:74:a8:8f:b8: fd:70:89:22:11:71:31:06:01:b7:db:f7:0f:97:f2: 56:71:7c:7e:09:3f:7e:ab:35:56:4f:8c:a5:d6:9a: 12:01:94:82:94:a8:09:50:ec:b7:42:f7:a2:ca:c8: a6:fa:1b:2c:b3:40:aa:28:de:47:d9:b4:77:aa:1e: f3:50:e3:4c:76:f8:42:57:90:60:25:f2:dd:43:df: bb:36:cc:1f:db:1b:8b:f8:70:d7:84:62:95:ee:50: 02:1e:18:da:5f:2a:78:52:ca:21:78:78:be:96:7b: 90:1c:ee:34:dc:b5:83:40:7c:6e:e9:3e:dc:50:87: 61:4a:98:2b:6c:67:a8:cc:8f:2d:af:6f:06:d9:90: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:C4:65:8B:EF:5F:D6:2F:F5:B0:7B:B9:91:35:DA:B8:CB:89:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e3:26:3e:76:86:a5:92:0d:5b:f0:4e:37:f3:6a:06:31:f7: 6a:47:fa:c8:f7:60:76:94:91:4f:86:a8:dc:83:d4:8b:8c:b2: 18:93:5e:50:87:ac:68:b3:63:52:c7:71:fa:22:be:27:9e:00: 60:c2:a3:ca:7f:71:ba:51:0e:c0:64:d9:08:e5:46:5d:1b:48: 57:a5:12:26:38:ac:40:29:eb:33:f4:13:fa:8f:d5:09:cc:99: e1:2a:d8:8e:5c:63:9e:51:2f:2d:3a:82:78:81:b9:31:51:9b: 63:18:95:43:e2:41:9d:02:16:55:be:5a:f6:f0:19:3a:29:01: a4:03:1f:03:76:25:5d:c5:14:cf:b7:8b:3c:40:9b:22:7f:1b: b7:6a:90:87:30:54:ab:8c:c3:6a:58:79:dd:4f:ad:ed:d1:0f: 89:cb:ae:d2:b6:e3:33:a6:e5:a6:0f:cc:d2:e5:73:14:f8:1e: 49:e6:ce:d0:ef:e8:a6:7a:d9:f3:9b:dd:7e:f8:58:01:3d:45: 8d:cc:6e:66:9f:56:9b:11:47:c9:2c:9f:4a:82:1d:14:b2:48: d4:70:57:97:84:16:98:b7:cf:11:2b:1a:2c:fc:b8:d0:ab:56: 9e:c1:d9:f4:a1:38:73:01:29:7c:bb:3f:3e:2b:21:89:a5:f5: 4f:6a:cc:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0NauRLlDf+gm8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjRkMTZlYTMtNDAxNC00OTk2LTk5MmMtMjUxOTJhZDk0NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QKYkV5ypO4wp28oAuydyj/U/cAW+uxazyKR W9G5NsAaRHGszXjw1wBaHKiORRg9W5GlyjvOXHzLnORLt7e8d3kG7NOrMNNgvbES i61wdYnmuH2cjLkaGUTIAb4WG0SeCqvuqVWvmkdd0hXOf/xeY5FsXnSoj7j9cIki EXExBgG32/cPl/JWcXx+CT9+qzVWT4yl1poSAZSClKgJUOy3Qveiysim+hsss0Cq KN5H2bR3qh7zUONMdvhCV5BgJfLdQ9+7Nswf2xuL+HDXhGKV7lACHhjaXyp4Usoh eHi+lnuQHO403LWDQHxu6T7cUIdhSpgrbGeozI8tr28G2ZDozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ+xGWL71/WL/Wwe7mRNdq4y4mKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMDc2OGI4MmEtNDlmOS0z YWE4LWFjNzctOTdkZTk0YmI1NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPjJj52hqWSDVvwTjfzagYx92pH+sj3YHaUkU+GqNyD1IuMshiTXlCH rGizY1LHcfoivieeAGDCo8p/cbpRDsBk2QjlRl0bSFelEiY4rEAp6zP0E/qP1QnM meEq2I5cY55RLy06gniBuTFRm2MYlUPiQZ0CFlW+WvbwGTopAaQDHwN2JV3FFM+3 izxAmyJ/G7dqkIcwVKuMw2pYed1Pre3RD4nLrtK24zOm5aYPzNLlcxT4HknmztDv 6KZ62fOb3X74WAE9RY3MbmafVpsRR8ksn0qCHRSySNRwV5eEFpi3zxErGiz8uNCr Vp7B2fShOHMBKXy7Pz4rIYml9U9qzOo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:25:27 2024 by rpki-client on console-fra.rpki-client.org