$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa File: d14d99f6-81f6-3077-9604-b996080b45c9.roa (raw, json) Hash identifier: ATr2wJMTjrkH5wW1ll9LYjgpY57Vp7mD8u9YsuTlvqo= Subject key identifier: 7E:38:E1:98:C2:5F:CD:F1:0B:2C:99:63:31:8F:B1:20:0E:3D:0A:F2 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F43285847D999F63625349901DFFA3600 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 11273 IP address blocks: 204.194.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f6:36:25:34:99:01:df:fa:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=8c5d7217-d4aa-4312-b12d-55243aacd8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:a3:76:8a:af:74:42:b4:53:10:b0:08:1f: 06:cf:19:76:65:4a:51:96:5a:9b:32:bd:73:32:72: 19:49:aa:53:f2:fa:d7:0a:61:55:a5:18:f9:9d:cc: f8:3b:0b:a6:4b:dd:55:88:48:cd:de:7e:8b:f8:92: 95:39:79:d3:1a:36:1e:ee:30:da:9c:fc:01:10:6e: ad:80:02:8c:6a:ec:e7:9d:b1:cc:2b:16:2a:31:32: a3:d2:0a:bc:55:7b:4d:6a:ea:e4:ce:5c:d2:c2:2e: 0a:c5:b6:23:00:c7:14:54:ba:27:03:30:2d:11:5f: 85:49:a4:ab:8e:b2:1d:7a:51:48:55:39:80:fb:14: 51:82:0b:17:23:33:eb:9a:98:dd:f6:41:e8:c0:8b: 90:35:70:ad:ed:6a:d1:cb:59:20:86:21:81:2d:04: ca:47:5f:9c:32:8d:15:a5:30:2e:4e:7f:61:ed:6c: 58:44:a5:36:3c:94:cf:48:54:34:4c:05:36:84:cf: 28:50:f4:3c:34:36:7f:d6:c3:9a:35:a2:fc:0e:bb: 28:7a:88:e6:e7:85:a4:7b:a5:bb:00:21:a1:ef:16: 6c:1f:80:b9:b7:72:ab:cf:54:c4:2f:b1:28:67:c6: b2:e6:63:b6:3b:b7:d5:f3:81:66:6a:ea:bd:db:13: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:38:E1:98:C2:5F:CD:F1:0B:2C:99:63:31:8F:B1:20:0E:3D:0A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 204.194.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:87:3d:14:6f:30:09:32:79:e7:b0:9a:57:8d:0d:99:4a:a3: b1:ab:ad:0a:95:c3:44:2b:f0:59:c9:c8:89:44:b1:8b:f5:25: 38:72:72:30:2b:8f:66:ea:d3:9b:f7:e8:06:8f:1d:0f:ac:47: 8a:a5:fd:86:d2:88:16:a2:f5:47:d7:6d:43:ed:04:08:74:85: e0:cf:b8:af:3f:4c:f7:a5:91:81:ab:03:f3:de:14:30:f5:be: 57:36:7f:9d:a6:a2:0d:3f:bc:bc:e5:c7:a3:fa:f1:3a:55:5a: 90:51:10:1b:14:65:2e:73:90:0b:ba:2b:94:94:14:41:57:a5: 06:44:59:b1:b5:8e:00:c7:16:1b:64:69:b5:9d:40:d4:4d:a8: 49:c6:8f:91:45:61:d5:19:5d:90:1d:18:a1:fd:a6:08:b2:e3: d9:66:04:e0:df:91:ff:06:ee:7a:ba:36:4e:f2:fe:01:a5:8f: 6d:29:80:a4:cc:d3:df:af:8b:02:25:94:13:b3:35:fc:e0:d8: eb:8a:80:3b:fb:d2:fc:a1:13:df:d3:02:ab:e4:d4:4c:d6:08: 8e:53:33:98:3c:3d:03:a7:ab:98:ba:eb:ac:2a:3e:10:8e:57: 94:3d:73:6d:04:bc:40:75:b7:18:b5:64:0c:75:01:ea:87:0f: 15:ac:15:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfY2JTSZAd/6NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk OGM1ZDcyMTctZDRhYS00MzEyLWIxMmQtNTUyNDNhYWNkOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w2jdoqvdEK0UxCwCB8Gzxl2ZUpRllqbMr1z MnIZSapT8vrXCmFVpRj5ncz4OwumS91ViEjN3n6L+JKVOXnTGjYe7jDanPwBEG6t gAKMauznnbHMKxYqMTKj0gq8VXtNaurkzlzSwi4KxbYjAMcUVLonAzAtEV+FSaSr jrIdelFIVTmA+xRRggsXIzPrmpjd9kHowIuQNXCt7WrRy1kghiGBLQTKR1+cMo0V pTAuTn9h7WxYRKU2PJTPSFQ0TAU2hM8oUPQ8NDZ/1sOaNaL8Drsoeojm54Wke6W7 ACGh7xZsH4C5t3Krz1TEL7EoZ8ay5mO2O7fV84Fmauq92xOr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH444ZjCX83xCyyZYzGPsSAOPQryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZDE0ZDk5ZjYtODFmNi0z MDc3LTk2MDQtYjk5NjA4MGI0NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzMKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKHPRRvMAkyeeewmleNDZlKo7GrrQqVw0Qr8FnJyIlEsYv1JThycjAr j2bq05v36AaPHQ+sR4ql/YbSiBai9UfXbUPtBAh0heDPuK8/TPelkYGrA/PeFDD1 vlc2f52mog0/vLzlx6P68TpVWpBREBsUZS5zkAu6K5SUFEFXpQZEWbG1jgDHFhtk abWdQNRNqEnGj5FFYdUZXZAdGKH9pgiy49lmBODfkf8G7nq6Nk7y/gGlj20pgKTM 09+viwIllBOzNfzg2OuKgDv70vyhE9/TAqvk1EzWCI5TM5g8PQOnq5i666wqPhCO V5Q9c20EvEB1txi1ZAx1AeqHDxWsFas= -----END CERTIFICATE-----Generated at Mon Nov 25 07:16:42 2024 by rpki-client on console-fra.rpki-client.org