$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa File: 3a49eb68-6216-3abc-822d-65fec49cdd7d.roa (raw, json) Hash identifier: 9rf1RyUQUDGA49DUKKZIRc2btpVSgYqHeMu27PX/8t8= Subject key identifier: 28:E2:48:3E:2D:6F:07:92:DC:74:AC:F7:52:07:6F:21:AD:27:B3:F4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474F4B65BA88C275D38F93DD00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 12189 IP address blocks: 131.153.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:65:ba:88:c2:75:d3:8f:93:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=0b820a77-ca60-4841-8720-2b8e04fb4418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:04:a3:c0:e2:0d:e0:c6:fb:44:09:a3:8f: 4d:c0:5d:54:70:7a:4c:5e:10:a7:6f:33:27:a5:13: 87:ce:06:8b:c2:83:f9:80:60:eb:c8:e0:2e:ed:5b: e0:f7:d3:d1:88:e8:94:b1:2f:70:f8:2e:d1:4e:52: ca:d5:9a:0f:f6:94:b7:34:e7:e1:29:38:c4:cb:68: af:a9:35:65:4f:94:e2:9d:4e:2b:da:f8:00:ab:05: fc:e1:d1:2b:ce:98:be:4b:15:c3:33:85:87:43:90: 8e:d4:ef:02:6a:15:42:8e:64:bc:17:96:f5:e9:23: 3e:91:c5:fd:6f:d4:b9:99:cb:58:fa:f6:b3:12:50: de:44:6d:e8:fc:01:9d:9e:68:b9:f6:f0:89:6c:01: d2:e9:6c:aa:5a:ea:a1:bc:d9:ff:68:97:4a:02:7b: 58:41:37:65:cf:58:2b:73:0b:44:20:e3:c4:42:85: c0:0c:e5:70:e9:88:bc:52:9e:3f:b1:98:23:36:5a: f4:bb:e0:6c:88:37:ea:a1:15:b1:ef:bb:e9:40:2b: 8e:1f:91:16:ec:72:5d:32:be:e8:bd:53:ed:32:a1: 78:b4:e7:22:13:18:fa:ba:ec:5d:a4:d9:21:e7:fa: 78:6f:aa:98:c4:e7:e1:23:2d:cb:be:fb:06:9e:e1: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E2:48:3E:2D:6F:07:92:DC:74:AC:F7:52:07:6F:21:AD:27:B3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:67:b0:11:9c:bd:08:c8:42:72:f4:7e:fe:a3:a2:cf:32: ac:67:78:8b:f3:37:87:64:45:2d:88:77:88:98:2d:0b:5a:70: 6a:b7:67:20:22:6d:b8:22:b5:a6:eb:a7:86:e9:33:12:87:3a: fd:16:0b:26:cb:d8:a4:c0:e3:0b:17:a0:16:06:50:cf:c1:c6: 83:9c:71:42:c0:79:cf:4a:ce:ea:ad:93:b8:1c:0b:70:2b:4a: c7:ca:b9:f5:88:58:8e:f6:f1:67:02:e8:cd:5f:1e:45:b3:c2: 66:3a:a0:98:fe:75:07:86:52:56:03:e5:f0:c1:fa:ee:6c:6b: eb:f7:78:96:ba:e7:dd:7b:6a:85:28:f9:48:7e:e1:bc:0b:0d: 83:37:6b:02:32:09:ce:5f:af:46:51:fb:b4:2f:8d:21:51:93: 14:2d:fc:67:17:50:79:92:09:69:88:a6:0c:25:b5:4e:c8:22: b0:e4:0c:eb:ef:d3:cf:35:7f:7d:a2:33:7d:09:1f:19:07:c5: 0a:21:f8:f4:45:5d:39:b0:d5:f7:a3:b5:15:8c:dc:a4:3d:1d: 68:b7:77:3c:de:00:f0:4b:3c:21:44:0d:6c:87:b0:53:f9:a1: 85:85:b1:f6:63:7b:d8:71:ce:50:72:cc:7a:b1:75:19:f3:94: 9c:04:35:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS2W6iMJ104+T3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MGI4MjBhNzctY2E2MC00ODQxLTg3MjAtMmI4ZTA0ZmI0NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7MEo8DiDeDG+0QJo49NwF1UcHpMXhCnbzMn pROHzgaLwoP5gGDryOAu7Vvg99PRiOiUsS9w+C7RTlLK1ZoP9pS3NOfhKTjEy2iv qTVlT5TinU4r2vgAqwX84dErzpi+SxXDM4WHQ5CO1O8CahVCjmS8F5b16SM+kcX9 b9S5mctY+vazElDeRG3o/AGdnmi59vCJbAHS6WyqWuqhvNn/aJdKAntYQTdlz1gr cwtEIOPEQoXADOVw6Yi8Up4/sZgjNlr0u+BsiDfqoRWx77vpQCuOH5EW7HJdMr7o vVPtMqF4tOciExj6uuxdpNkh5/p4b6qYxOfhIy3LvvsGnuHGLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjiSD4tbweS3HSs91IHbyGtJ7P0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2E0OWViNjgtNjIxNi0z YWJjLTgyMmQtNjVmZWM0OWNkZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+2Z7ARnL0IyEJy9H7+o6LPMqxneIvzN4dkRS2Id4iYLQtacGq3ZyAi bbgitabrp4bpMxKHOv0WCybL2KTA4wsXoBYGUM/BxoOccULAec9Kzuqtk7gcC3Ar SsfKufWIWI728WcC6M1fHkWzwmY6oJj+dQeGUlYD5fDB+u5sa+v3eJa65917aoUo +Uh+4bwLDYM3awIyCc5fr0ZR+7QvjSFRkxQt/GcXUHmSCWmIpgwltU7IIrDkDOvv 0881f32iM30JHxkHxQoh+PRFXTmw1fejtRWM3KQ9HWi3dzzeAPBLPCFEDWyHsFP5 oYWFsfZje9hxzlByzHqxdRnzlJwENVQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org