$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa File: 4fe59b19-c5ad-3d24-8706-946768c99623.roa (raw, json) Hash identifier: 6IN1rq+sv7cxSxBolijBeqZNKbUjQFE1M/84wJ4WLns= Subject key identifier: EE:1A:A4:68:86:84:AA:7A:05:0F:FC:99:58:62:A2:52:34:60:47:A3 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474DE5FCE49A6881A459FA9300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 209485 IP address blocks: 131.153.117.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e5:fc:e4:9a:68:81:a4:59:fa:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=a211e848-c39a-4f74-ac40-e8b270ba9132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:af:8a:cc:2a:40:21:08:55:5c:48:a1:51: 5c:2a:ad:43:67:0f:4f:ed:b5:32:4d:d8:2f:5a:06: ca:55:4f:f1:1b:a9:83:8d:2e:24:09:51:9b:47:d1: 34:2f:f3:27:ab:94:46:82:7d:38:92:dd:8c:7b:13: 5c:33:2a:de:76:9d:15:9f:fd:d5:c0:fb:4e:5e:00: 74:85:e1:9b:89:53:44:fa:ae:fb:c9:5f:ac:8e:1f: aa:91:2f:df:4e:02:0d:49:d2:78:50:47:6d:d6:ca: b8:01:5e:43:52:27:d7:02:5e:9b:ac:bf:d2:2c:e6: 21:ed:95:94:26:e0:fa:4b:02:7d:94:c2:24:7d:22: 87:c0:8b:02:79:51:f1:d2:6b:40:97:6c:f8:d2:ac: cf:2c:80:21:04:63:a3:e2:79:bd:00:b7:72:2d:74: 0d:96:d2:f2:98:bf:e2:63:cf:23:32:18:bf:84:07: 99:5a:16:63:a9:2a:a4:ce:a0:44:82:04:a2:74:89: 4c:24:c3:4c:cd:d4:29:97:94:b7:65:75:e3:8a:4c: ab:d7:20:2d:22:74:21:7d:48:eb:0d:33:d7:9f:d0: ea:d4:e2:0c:1d:cd:ab:d4:9f:e3:44:08:f6:fc:85: bb:64:de:ae:5f:79:86:e8:e6:85:e9:45:20:6a:9d: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1A:A4:68:86:84:AA:7A:05:0F:FC:99:58:62:A2:52:34:60:47:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c9:d3:ee:dc:9e:28:d4:af:aa:92:d5:5f:4f:7d:4d:52:9a: ac:a4:c8:9e:71:03:9c:91:af:0a:ee:a7:85:3b:fc:e1:36:5a: 35:e7:b7:47:5e:fe:3c:89:ff:fd:fe:6f:8a:33:c5:2c:33:0d: 3f:41:cf:f6:cd:c3:5a:5e:26:9d:90:da:1d:cd:15:a4:be:22: 49:b3:f0:11:33:e2:c7:9e:8c:68:dd:62:11:48:77:5e:f2:9f: 78:8c:10:d9:71:c7:b0:42:93:4f:18:18:03:43:50:9f:29:68: 31:92:70:22:97:c8:b1:c0:ae:a1:9f:13:4e:b4:e8:b7:69:b8: 60:17:f6:0e:ea:b8:cc:f0:b2:77:5c:95:99:72:a1:6d:49:b6: 51:d4:c1:6a:c2:78:a4:e5:47:07:0c:83:94:1f:cc:80:66:c3: 28:fa:9d:1f:0c:35:7b:8a:81:c3:0a:97:87:fc:3d:2f:5e:31: 5f:c9:ac:b6:06:9e:86:0a:4a:b9:14:f3:36:d1:34:15:03:ba: 28:0d:1a:fb:f9:4d:1c:26:4e:65:83:50:72:eb:93:94:ad:9d: 9d:ba:57:c9:3c:fa:25:bf:80:40:20:28:c5:0a:2b:ff:58:e7: 94:0a:dc:86:83:21:cd:8e:90:26:40:7a:e1:1e:44:e0:a5:0d: 90:0f:d6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5fzkmmiBpFn6kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk YTIxMWU4NDgtYzM5YS00Zjc0LWFjNDAtZThiMjcwYmE5MTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuSviswqQCEIVVxIoVFcKq1DZw9P7bUyTdgv WgbKVU/xG6mDjS4kCVGbR9E0L/Mnq5RGgn04kt2MexNcMyredp0Vn/3VwPtOXgB0 heGbiVNE+q77yV+sjh+qkS/fTgINSdJ4UEdt1sq4AV5DUifXAl6brL/SLOYh7ZWU JuD6SwJ9lMIkfSKHwIsCeVHx0mtAl2z40qzPLIAhBGOj4nm9ALdyLXQNltLymL/i Y88jMhi/hAeZWhZjqSqkzqBEggSidIlMJMNMzdQpl5S3ZXXjikyr1yAtInQhfUjr DTPXn9Dq1OIMHc2r1J/jRAj2/IW7ZN6uX3mG6OaF6UUgap2JnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4apGiGhKp6BQ/8mVhiolI0YEejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGZlNTliMTktYzVhZC0z ZDI0LTg3MDYtOTQ2NzY4Yzk5NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnJ0+7cnijUr6qS1V9PfU1SmqykyJ5xA5yRrwrup4U7/OE2WjXnt0de /jyJ//3+b4ozxSwzDT9Bz/bNw1peJp2Q2h3NFaS+Ikmz8BEz4seejGjdYhFId17y n3iMENlxx7BCk08YGANDUJ8paDGScCKXyLHArqGfE0606LdpuGAX9g7quMzwsndc lZlyoW1JtlHUwWrCeKTlRwcMg5QfzIBmwyj6nR8MNXuKgcMKl4f8PS9eMV/JrLYG noYKSrkU8zbRNBUDuigNGvv5TRwmTmWDUHLrk5StnZ26V8k8+iW/gEAgKMUKK/9Y 55QK3IaDIc2OkCZAeuEeROClDZAP1ps= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org