$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa File: d3c65396-5041-30f8-854e-d076751f12be.roa (raw, json) Hash identifier: 2vroTgBpLaDiAqg9mJSsCwjC2LNUjA/UxYUr6aNB9OE= Subject key identifier: 3F:44:D2:08:4C:7F:89:3D:EB:5B:FD:40:0E:37:17:4C:D4:99:3C:BA Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Certificate serial: 010D0C9F432858470550C7C8F57C2A7191DC4080 Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa Signing time: Wed 28 Aug 2024 01:00:31 +0000 ROA not before: Wed 28 Aug 2024 01:00:31 +0000 ROA not after: Tue 26 Nov 2024 02:00:31 +0000 asID: 15169 IP address blocks: 207.126.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Sep 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:05:50:c7:c8:f5:7c:2a:71:91:dc:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Validity Not Before: Aug 28 01:00:31 2024 GMT Not After : Nov 26 02:00:31 2024 GMT Subject: CN=fd842b21-de19-4165-9c37-6aa5d4e0147d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:33:39:b3:7b:e5:fd:85:73:a7:95:0e:4d: 92:6e:9b:20:25:c3:74:ec:cd:6e:a0:e7:6e:d6:b1: 15:a6:68:a2:b6:9d:64:54:66:fd:6d:62:61:b2:8f: 1c:bb:41:87:df:08:31:39:0b:9e:c2:57:bd:41:8f: 9b:52:70:a4:fa:f9:07:40:79:8b:06:24:ac:4c:e3: 3d:27:62:f5:cd:c0:73:39:4d:25:cc:9b:20:2a:d1: 36:01:82:ca:09:93:1b:21:13:f7:1a:39:c6:03:32: 87:33:ac:b4:a3:9e:31:7a:b4:de:f9:0f:ef:b6:62: 94:8c:39:a7:dd:c6:d2:0e:9d:1b:9b:2f:2f:26:56: de:4e:ae:47:47:13:2e:6f:45:f0:ce:7b:f7:d4:40: 44:12:9f:5e:c1:48:5e:49:1e:6c:71:13:ed:48:21: 51:43:b3:3c:26:f2:93:2e:93:f6:58:2c:71:ab:7a: d1:d3:d1:ed:57:8e:89:64:2f:39:9c:89:ad:9c:a7: 17:b4:3c:14:cb:60:35:5a:6a:5f:68:2d:4a:05:21: 58:6a:74:7a:dc:26:ca:b7:56:4b:9b:ee:58:11:2c: 8e:22:4a:aa:98:3d:54:25:3a:8a:21:d6:06:1e:b8: 8e:84:28:b9:71:0e:01:1a:f3:d3:b3:72:3f:3e:5d: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:44:D2:08:4C:7F:89:3D:EB:5B:FD:40:0E:37:17:4C:D4:99:3C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl X509v3 Authority Key Identifier: keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer sbgp-ipAddrBlock: critical IPv4: 207.126.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:25:59:92:c1:7d:94:8a:56:ba:2f:53:90:05:e8:2a:14:5a: 4d:1d:a0:18:20:58:01:a6:b2:9c:90:ab:75:1e:f5:c9:d4:b3: a3:73:ad:e6:17:4c:49:27:8f:48:a0:1d:d9:55:9a:47:00:99: 31:3d:79:ec:e7:ee:94:23:6d:ff:6f:6f:20:b0:08:11:05:77: b4:d4:74:8f:10:62:79:9e:69:dd:54:37:c3:2c:0e:46:bb:3f: 41:e1:b0:f2:31:ce:a9:b8:ce:4a:ea:0d:39:3f:e0:19:0d:d6: 80:d3:ac:25:b2:80:b1:eb:9d:a3:17:26:d6:cd:b7:cb:30:e1: 02:81:9f:d1:1c:64:b8:8b:af:cd:cc:70:6c:99:9c:6a:20:de: 0f:03:d9:95:0d:8d:d6:fa:19:4f:3d:69:fb:47:da:15:78:cf: 3e:10:92:af:58:ee:b1:e7:19:cc:23:15:82:fa:cc:a6:0b:8b: 16:30:c6:46:10:e6:2e:5f:fa:1c:eb:6b:69:70:e5:4c:9d:35: e2:5a:a5:45:86:2b:bc:38:59:07:d0:e2:94:b6:d6:ac:b9:41: 78:95:d5:9d:88:24:d2:ae:f4:d2:37:12:53:bb:9b:66:f5:0a: b4:6b:df:46:11:12:d8:71:d2:2e:78:4b:8d:10:eb:37:17:2a: fb:b3:75:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUMfI9XwqcZHcQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm ZjYxMB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ4NDJiMjEtZGUxOS00MTY1LTljMzctNmFhNWQ0ZTAxNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEzObN75f2Fc6eVDk2SbpsgJcN07M1uoOdu 1rEVpmiitp1kVGb9bWJhso8cu0GH3wgxOQuewle9QY+bUnCk+vkHQHmLBiSsTOM9 J2L1zcBzOU0lzJsgKtE2AYLKCZMbIRP3GjnGAzKHM6y0o54xerTe+Q/vtmKUjDmn 3cbSDp0bmy8vJlbeTq5HRxMub0Xwznv31EBEEp9ewUheSR5scRPtSCFRQ7M8JvKT LpP2WCxxq3rR09HtV46JZC85nImtnKcXtDwUy2A1WmpfaC1KBSFYanR63CbKt1ZL m+5YESyOIkqqmD1UJTqKIdYGHriOhCi5cQ4BGvPTs3I/Pl1lVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9E0ghMf4k961v9QA43F0zUmTy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3 YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZDNjNjUzOTYtNTA0MS0z MGY4LTg1NGUtZDA3Njc1MWYxMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0lWZLBfZSKVrovU5AF6CoUWk0doBggWAGmspyQq3Ue9cnUs6NzreYX TEknj0igHdlVmkcAmTE9eezn7pQjbf9vbyCwCBEFd7TUdI8QYnmead1UN8MsDka7 P0HhsPIxzqm4zkrqDTk/4BkN1oDTrCWygLHrnaMXJtbNt8sw4QKBn9EcZLiLr83M cGyZnGog3g8D2ZUNjdb6GU89aftH2hV4zz4Qkq9Y7rHnGcwjFYL6zKYLixYwxkYQ 5i5f+hzra2lw5UydNeJapUWGK7w4WQfQ4pS21qy5QXiV1Z2IJNKu9NI3ElO7m2b1 CrRr30YREthx0i54S40Q6zcXKvuzdRc= -----END CERTIFICATE-----Generated at Sat Sep 7 15:33:07 2024 by rpki-client on console-fra.rpki-client.org