$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa File: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (raw, json) Hash identifier: vNb08+ApLNO8nqKX76OKjZBIABQneKgG1NspvNXSeHE= Subject key identifier: 07:20:40:7B:C2:CD:9D:D0:C3:0B:43:23:75:42:44:E4:F7:6C:0F:21 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584762D64E7ED85D0F8F2D3555C0 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa Signing time: Mon 30 Sep 2024 13:00:42 +0000 ROA not before: Mon 30 Sep 2024 13:00:42 +0000 ROA not after: Sun 29 Dec 2024 14:00:42 +0000 asID: 19905 IP address blocks: 155.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:62:d6:4e:7e:d8:5d:0f:8f:2d:35:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Sep 30 13:00:42 2024 GMT Not After : Dec 29 14:00:42 2024 GMT Subject: CN=8c4e0e50-9bb6-4668-93ab-b5309d730bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:9f:b8:34:a7:1d:fd:2d:57:43:16:58:c8: e2:ab:96:81:a7:25:a4:94:9f:d1:8b:0d:8f:ed:f9: df:0c:c1:de:b1:af:55:29:be:f2:3c:55:64:47:59: 76:69:9f:34:6a:eb:30:26:a2:34:90:a1:ea:91:de: dc:b3:b6:e2:b6:94:79:c3:f7:27:5b:46:6c:24:52: b2:96:22:9d:70:83:dc:da:ef:17:de:bb:6f:98:b3: ec:c1:94:5f:0c:91:a1:06:96:b9:99:20:4a:08:da: 13:ef:0a:a2:1b:50:28:46:5b:5c:67:f6:fc:2e:a8: de:aa:cd:5d:51:eb:70:12:5f:85:68:b0:17:d3:a0: b0:69:f8:d5:3d:59:9b:73:ba:72:ee:49:84:8d:c8: 81:16:79:44:7f:cf:04:e5:79:4a:61:65:22:a4:55: 69:c8:b8:bb:01:45:70:4a:3a:51:6f:86:41:f8:b3: ad:de:64:e8:9a:4b:90:f7:a0:51:7b:c8:cc:cd:2d: b5:71:dd:4b:33:9e:86:55:b7:47:99:80:ec:5d:95: 7a:79:97:db:d7:6a:20:72:e5:d0:23:a6:1d:26:f6: 6b:44:c6:77:6f:65:0b:57:ef:a2:3b:f9:d7:41:d3: b5:f4:1b:6a:64:3b:8f:bf:60:b1:20:55:a1:fc:61: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:40:7B:C2:CD:9D:D0:C3:0B:43:23:75:42:44:E4:F7:6C:0F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 155.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ef:7d:05:28:ec:17:18:19:d2:50:20:9f:27:f4:3e:a6:8f: 4c:52:38:35:e6:45:cb:56:46:78:19:c4:e2:2a:39:8f:dc:17: a2:af:ee:a8:a0:e5:f8:83:6c:3c:1c:ce:87:d8:34:fe:b2:c3: f5:af:ee:45:b5:7d:8e:ac:f2:44:dd:30:07:23:3f:df:c2:f4: 24:1e:9c:e5:69:33:42:5a:19:9d:b9:d6:c5:ca:5a:f2:56:59: ae:53:4d:4e:1a:7a:69:ba:6f:3a:4f:99:c9:22:d7:c8:4a:09: 93:f4:e0:61:c3:0e:e2:4a:9b:6d:f6:c1:f9:81:52:9e:29:84: 0e:d9:dc:08:79:e2:9b:4a:77:28:df:1e:ee:95:74:f2:d0:ee: 39:c9:b1:b3:80:66:51:75:83:b7:28:b9:9f:25:fc:fe:8b:99: d4:e8:73:8f:59:f7:8c:e4:3a:ce:b0:82:5a:4f:59:92:c1:18: 25:87:52:9c:72:df:e3:e0:07:a6:de:00:a9:6f:d5:f5:72:71: 9a:8f:94:4f:b4:74:a2:44:30:f3:d6:2a:82:e6:f5:78:c5:53: 40:c8:27:65:42:37:8c:60:c5:ae:69:b7:dd:2a:4c:a9:15:3c: 8d:90:47:ca:88:bb:af:75:9e:f7:fd:5d:cf:82:56:9b:31:95: 88:98:7e:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1k5+2F0Pjy01VcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk OGM0ZTBlNTAtOWJiNi00NjY4LTkzYWItYjUzMDlkNzMwYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn+fuDSnHf0tV0MWWMjiq5aBpyWklJ/Riw2P 7fnfDMHesa9VKb7yPFVkR1l2aZ80auswJqI0kKHqkd7cs7bitpR5w/cnW0ZsJFKy liKdcIPc2u8X3rtvmLPswZRfDJGhBpa5mSBKCNoT7wqiG1AoRltcZ/b8Lqjeqs1d UetwEl+FaLAX06CwafjVPVmbc7py7kmEjciBFnlEf88E5XlKYWUipFVpyLi7AUVw SjpRb4ZB+LOt3mTomkuQ96BRe8jMzS21cd1LM56GVbdHmYDsXZV6eZfb12ogcuXQ I6YdJvZrRMZ3b2ULV++iO/nXQdO19BtqZDuPv2CxIFWh/GEhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcgQHvCzZ3QwwtDI3VCROT3bA8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNDIwMTdiOWMtN2VhNy0z ZjlhLTg2ODYtMDRkMDE5MDBmZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjvfQUo7BcYGdJQIJ8n9D6mj0xSODXmRctWRngZxOIqOY/cF6Kv7qig 5fiDbDwczofYNP6yw/Wv7kW1fY6s8kTdMAcjP9/C9CQenOVpM0JaGZ251sXKWvJW Wa5TTU4aemm6bzpPmcki18hKCZP04GHDDuJKm232wfmBUp4phA7Z3Ah54ptKdyjf Hu6VdPLQ7jnJsbOAZlF1g7couZ8l/P6LmdToc49Z94zkOs6wglpPWZLBGCWHUpxy 3+PgB6beAKlv1fVycZqPlE+0dKJEMPPWKoLm9XjFU0DIJ2VCN4xgxa5pt90qTKkV PI2QR8qIu691nvf9Xc+CVpsxlYiYfhs= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:44 2024 by rpki-client on console-fra.rpki-client.org