$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f787e513-b5bd-3e77-956b-77a1fb17ef61.roa File: f787e513-b5bd-3e77-956b-77a1fb17ef61.roa (raw, json) Hash identifier: kNe/UfyIy1AAKO5ZwBA8i/20aoL+nMT2WQ9llRnn590= Subject key identifier: 87:FB:3A:BC:A3:A5:87:61:AF:2C:4F:41:4E:3C:CA:A7:15:AF:94:64 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285847F84F7DBD3D6BA7E8DFF81800 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f787e513-b5bd-3e77-956b-77a1fb17ef61.roa Signing time: Sat 23 Nov 2024 02:00:28 +0000 ROA not before: Sat 23 Nov 2024 02:00:28 +0000 ROA not after: Fri 21 Feb 2025 02:00:28 +0000 asID: 397630 IP address blocks: 130.254.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f8:4f:7d:bd:3d:6b:a7:e8:df:f8:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 23 02:00:28 2024 GMT Not After : Feb 21 02:00:28 2025 GMT Subject: CN=07d1076f-a62e-4ebc-8fad-450a2550e7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:d6:0f:d4:7c:9d:39:0c:a0:c3:00:e5:43: 75:45:83:3d:1e:0c:7f:70:51:3e:01:1e:6c:d7:b7: 6f:10:85:46:c8:df:b7:0e:46:19:d3:7f:bb:0d:77: 6e:36:d8:de:65:e1:7e:cc:8e:ef:e3:5b:57:e7:16: 31:b0:de:92:02:04:d7:89:9d:38:d0:52:77:cb:ee: e8:27:64:52:4a:2f:c7:55:a5:82:6d:a2:8e:c1:40: 08:2f:21:8e:d0:06:d7:6c:25:9f:c8:b8:6f:5a:10: 44:a1:b5:5e:5a:1b:8b:55:7f:76:f4:e2:a7:f7:79: 62:12:f3:12:06:1b:d6:db:92:1c:dc:33:f3:9f:c4: 17:70:2e:13:55:04:09:85:2d:e7:a9:05:c3:4e:30: 94:3e:54:ad:32:a9:1e:2d:84:91:bd:4e:31:78:3a: bf:d3:9d:f1:4e:eb:b7:5a:cf:55:42:fc:98:27:9e: db:d6:c7:99:c9:40:aa:81:61:2d:a8:54:66:d1:da: f7:62:10:8d:86:3c:c7:8f:a7:7d:52:3b:90:3f:4b: 87:cc:4e:5b:ec:e7:16:6f:94:ee:be:3a:a4:b8:97: b3:12:1a:24:ab:fb:12:7b:a7:fd:27:8c:51:e8:a5: 5e:c0:ec:dc:04:0c:11:b1:33:dc:3d:a5:0f:1f:0e: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:3A:BC:A3:A5:87:61:AF:2C:4F:41:4E:3C:CA:A7:15:AF:94:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f787e513-b5bd-3e77-956b-77a1fb17ef61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:6d:8d:03:31:0c:9d:8a:c6:ea:22:ed:a6:d7:35:66:4d:0a: d4:c6:52:73:b0:6c:ea:2f:04:9d:e8:17:df:95:2e:3d:3a:0a: 54:56:cc:8d:18:ef:ed:ef:41:8e:06:eb:5b:ee:d8:7e:36:53: 70:1c:10:f5:7a:9b:13:5e:b7:e8:3a:76:8b:6c:1e:29:65:a0: 17:e2:24:58:a2:ac:3d:4d:56:de:1c:f4:79:07:1e:37:1b:86: 48:95:fd:d4:23:21:0f:7b:72:49:1c:7b:28:03:76:20:90:36: 7c:5b:1b:7a:19:60:7d:f3:4b:31:5c:be:31:ca:00:ac:a6:3c: b8:00:0f:53:a6:b9:7e:6f:a6:95:74:8a:30:d7:62:08:ff:ef: 0d:68:30:60:ac:b3:45:eb:7f:ef:18:a6:a2:b2:56:97:9c:3e: 8c:4e:d9:10:40:14:14:26:2b:90:b4:f0:41:66:86:3e:05:42: 78:93:3a:1e:bd:cd:f1:ca:20:6e:b8:73:4f:cc:66:aa:be:d7: 0b:14:9e:0b:55:7b:51:18:4a:79:a8:87:4c:da:3b:83:f6:25: 29:c4:9c:f0:0b:7f:0b:97:c7:ea:a1:ff:a7:c1:56:94:57:88: 31:c9:c1:c3:0d:06:e0:98:a8:f0:ba:28:96:19:48:be:9f:43: b3:54:be:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T329PWun6N/4GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk MDdkMTA3NmYtYTYyZS00ZWJjLThmYWQtNDUwYTI1NTBlN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIfWD9R8nTkMoMMA5UN1RYM9Hgx/cFE+AR5s 17dvEIVGyN+3DkYZ03+7DXduNtjeZeF+zI7v41tX5xYxsN6SAgTXiZ040FJ3y+7o J2RSSi/HVaWCbaKOwUAILyGO0AbXbCWfyLhvWhBEobVeWhuLVX929OKn93liEvMS BhvW25Ic3DPzn8QXcC4TVQQJhS3nqQXDTjCUPlStMqkeLYSRvU4xeDq/053xTuu3 Ws9VQvyYJ57b1seZyUCqgWEtqFRm0dr3YhCNhjzHj6d9UjuQP0uHzE5b7OcWb5Tu vjqkuJezEhokq/sSe6f9J4xR6KVewOzcBAwRsTPcPaUPHw4hdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf7OryjpYdhryxPQU48yqcVr5RkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjc4N2U1MTMtYjViZC0z ZTc3LTk1NmItNzdhMWZiMTdlZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9tjQMxDJ2Kxuoi7abXNWZNCtTGUnOwbOovBJ3oF9+VLj06ClRWzI0Y 7+3vQY4G61vu2H42U3AcEPV6mxNet+g6dotsHilloBfiJFiirD1NVt4c9HkHHjcb hkiV/dQjIQ97ckkceygDdiCQNnxbG3oZYH3zSzFcvjHKAKymPLgAD1OmuX5vppV0 ijDXYgj/7w1oMGCss0Xrf+8YpqKyVpecPoxO2RBAFBQmK5C08EFmhj4FQniTOh69 zfHKIG64c0/MZqq+1wsUngtVe1EYSnmoh0zaO4P2JSnEnPALfwuXx+qh/6fBVpRX iDHJwcMNBuCYqPC6KJYZSL6fQ7NUvgQ= -----END CERTIFICATE-----Generated at Sun Nov 24 16:06:22 2024 by rpki-client on console-ams.rpki-client.org