$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/baf15eac-88d5-372b-8150-7e0a1049e51a.roa File: baf15eac-88d5-372b-8150-7e0a1049e51a.roa (raw, json) Hash identifier: 9BkIC9/O2gZX+AUOydXH5N/LmJbht+LdO+UBjbJmvts= Subject key identifier: 14:47:40:D5:94:9B:96:17:2F:F4:8A:28:62:58:2E:E0:66:5E:80:2A Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335 Certificate serial: 010D0C9F43285846D0453377DE2EAD3D01345740 Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/baf15eac-88d5-372b-8150-7e0a1049e51a.roa Signing time: Fri 09 Aug 2024 01:00:28 +0000 ROA not before: Fri 09 Aug 2024 01:00:28 +0000 ROA not after: Thu 07 Nov 2024 02:00:28 +0000 asID: 1239 IP address blocks: 128.254.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d0:45:33:77:de:2e:ad:3d:01:34:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335 Validity Not Before: Aug 9 01:00:28 2024 GMT Not After : Nov 7 02:00:28 2024 GMT Subject: CN=548d9dc8-dbf6-4534-9649-687c2db61836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:bc:8c:e5:4b:90:7c:3c:77:58:d2:4c:e9: fe:8e:26:4d:c3:a7:09:02:a0:5a:b0:9a:63:be:d0: f9:23:f1:d4:b3:a1:dd:b7:6e:3a:05:87:96:99:fb: 34:99:3f:4b:7f:17:69:22:bc:06:64:ed:67:46:b9: fa:92:e0:d5:50:a6:5d:63:c1:f8:e3:4b:09:0f:86: d3:aa:9f:f0:49:8e:02:5a:2e:58:a9:d2:a1:21:f3: bb:49:56:c7:66:6e:1f:69:a4:4c:94:10:2a:54:fb: 92:d1:2f:cc:7b:57:7a:33:da:66:b7:7a:25:cb:49: d7:22:b2:ef:79:77:1d:cd:b1:7c:95:69:54:96:f8: b0:e6:e0:e2:b7:82:1d:fb:27:f1:ba:76:29:2b:75: b7:6b:c5:f1:d7:00:b3:12:31:8e:e2:ed:04:11:25: 64:2f:27:9e:24:42:28:83:a7:0c:cd:c0:84:28:16: 41:db:cf:85:af:ea:e3:d6:0a:99:ea:1f:27:af:49: 22:bf:af:0d:55:e2:db:12:74:35:51:41:42:f4:8a: 84:1a:a1:e8:72:5e:c5:21:63:03:cd:be:23:36:38: 97:66:0e:f6:bc:0b:9b:6c:c6:89:c9:f9:34:4e:41: 41:75:a7:43:90:ab:64:9a:28:81:1c:2a:ce:fb:92: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:47:40:D5:94:9B:96:17:2F:F4:8A:28:62:58:2E:E0:66:5E:80:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/baf15eac-88d5-372b-8150-7e0a1049e51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl X509v3 Authority Key Identifier: keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer sbgp-ipAddrBlock: critical IPv4: 128.254.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ce:ed:f0:9f:ee:17:63:f3:0e:76:8d:7f:06:3a:61:a1:bb: e6:78:fb:e9:93:9a:81:5f:5a:46:89:ae:fc:25:42:07:17:7f: 20:eb:97:11:9a:44:0a:24:b0:47:5c:27:7b:50:3d:71:77:db: 81:9d:9b:87:5b:87:d0:84:86:51:a3:a1:de:aa:c1:06:aa:0e: 0f:b8:07:17:7c:db:83:56:80:f6:1b:62:9c:94:0c:09:d3:42: df:29:c3:50:1c:89:e5:ea:0f:31:d5:37:5f:a8:e3:aa:ee:36: 61:3d:85:a4:78:22:7f:5e:a8:a4:d4:15:bb:f6:12:f8:22:1c: bc:b6:76:03:30:38:93:0b:52:c1:7a:f0:0b:66:49:6c:b4:ac: 49:44:bf:e1:c1:d4:c9:67:0a:dd:36:16:36:b1:8b:3a:63:42: 5c:1c:ad:54:83:5d:78:57:37:70:42:77:f7:53:d0:1f:9a:55: c0:da:63:71:dd:6d:5b:5e:8a:2e:53:13:3f:1f:3e:bf:26:a5: 73:42:81:5d:ef:28:77:04:9e:c6:cc:59:ad:30:bd:52:9e:c9: 29:60:6c:03:a8:aa:7d:8f:c4:a1:5a:67:6e:fd:ac:c9:5c:28: 7f:b2:ec:52:c7:8c:33:e8:2b:54:79:f4:96:83:78:71:79:7c: 10:b3:5a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbQRTN33i6tPQE0V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl MzM1MB4XDTI0MDgwOTAxMDAyOFoXDTI0MTEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NTQ4ZDlkYzgtZGJmNi00NTM0LTk2NDktNjg3YzJkYjYxODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwu8jOVLkHw8d1jSTOn+jiZNw6cJAqBasJpj vtD5I/HUs6Hdt246BYeWmfs0mT9LfxdpIrwGZO1nRrn6kuDVUKZdY8H440sJD4bT qp/wSY4CWi5YqdKhIfO7SVbHZm4faaRMlBAqVPuS0S/Me1d6M9pmt3oly0nXIrLv eXcdzbF8lWlUlviw5uDit4Id+yfxunYpK3W3a8Xx1wCzEjGO4u0EESVkLyeeJEIo g6cMzcCEKBZB28+Fr+rj1gqZ6h8nr0kiv68NVeLbEnQ1UUFC9IqEGqHocl7FIWMD zb4jNjiXZg72vAubbMaJyfk0TkFBdadDkKtkmiiBHCrO+5LOewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRHQNWUm5YXL/SKKGJYLuBmXoAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvYmFmMTVlYWMtODhkNS0z NzJiLTgxNTAtN2UwYTEwNDllNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5 NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP6RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzO7fCf7hdj8w52jX8GOmGhu+Z4++mTmoFfWkaJrvwlQgcXfyDrlxGa RAoksEdcJ3tQPXF324Gdm4dbh9CEhlGjod6qwQaqDg+4Bxd824NWgPYbYpyUDAnT Qt8pw1AcieXqDzHVN1+o46ruNmE9haR4In9eqKTUFbv2EvgiHLy2dgMwOJMLUsF6 8AtmSWy0rElEv+HB1MlnCt02FjaxizpjQlwcrVSDXXhXN3BCd/dT0B+aVcDaY3Hd bVteii5TEz8fPr8mpXNCgV3vKHcEnsbMWa0wvVKeySlgbAOoqn2PxKFaZ279rMlc KH+y7FLHjDPoK1R59JaDeHF5fBCzWtA= -----END CERTIFICATE-----Generated at Tue Oct 22 17:21:32 2024 by rpki-client on console-fra.rpki-client.org