$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53823be3-92ba-37ce-b3d4-0fd5e0876e06.roa File: 53823be3-92ba-37ce-b3d4-0fd5e0876e06.roa (raw, json) Hash identifier: HE72P0kBo6oUmcBB3HF3mUvQPbNr16DKHdQzqbdJ0O4= Subject key identifier: 1E:57:A5:3D:72:1C:1D:6E:EC:75:F1:A5:59:45:69:76:98:29:D2:D0 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474DE5F934CB7AACE773102C60 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53823be3-92ba-37ce-b3d4-0fd5e0876e06.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 19437 IP address blocks: 131.153.100.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e5:f9:34:cb:7a:ac:e7:73:10:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=9070cb8e-e450-4ca5-a25b-9c09c1ad3ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:56:15:82:93:3c:5d:1f:6e:09:7d:83:be: 26:a4:b8:28:b6:6f:1f:4f:a2:d0:e9:61:2a:e3:1f: 31:72:7e:38:36:86:9b:5b:d1:80:56:ce:0e:ed:eb: 50:28:bf:c3:18:2f:e9:cb:37:bd:2d:6a:2b:c1:c2: ff:d1:ae:68:ad:4a:d7:66:7e:83:37:dc:56:50:2d: 7d:77:55:a8:3c:e9:ed:1f:f4:ba:59:23:4a:89:5f: 47:6c:63:1a:5a:39:51:03:dc:81:cb:f1:f9:31:4d: 45:fc:1d:dd:86:c7:4d:0e:54:6a:44:4a:49:ff:5d: 60:c2:54:2a:60:36:29:a7:3a:3b:dc:8d:8f:a9:06: 77:96:a3:01:97:c0:fb:a9:cc:55:5d:ad:46:a0:11: f2:02:a8:dd:ff:60:01:1b:5a:d3:a1:ec:f7:f5:47: 68:9e:9d:51:f9:e7:fd:f7:a0:08:37:64:d2:4e:b6: 42:25:ac:26:38:04:d2:44:1f:fd:5e:a8:35:9b:8f: e5:05:62:d4:4c:a6:1b:35:bf:58:07:f2:b6:cf:34: fa:40:36:18:de:68:b3:d6:a0:eb:e9:7b:28:2a:73: bf:e1:96:6d:5a:30:9a:27:c7:83:b5:99:d6:d5:e2: 4f:7b:d1:ec:ce:ee:6c:82:94:d2:ee:bb:57:84:c9: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:57:A5:3D:72:1C:1D:6E:EC:75:F1:A5:59:45:69:76:98:29:D2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53823be3-92ba-37ce-b3d4-0fd5e0876e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7f:6d:26:f6:65:71:0b:9e:6d:3b:56:bb:26:2d:ca:a0:62: f5:3b:30:ee:38:41:b6:05:09:90:b2:b2:c8:ff:27:86:63:68: f4:0e:5d:f2:4f:9a:2f:6b:ef:2c:ba:86:51:31:27:70:c7:75: da:c1:d7:b6:66:a3:f5:e1:a6:9f:1b:16:fd:fa:50:e9:d7:50: 52:66:71:74:13:83:e1:6a:cb:e4:39:eb:c7:e4:4d:33:0f:8a: 78:21:b8:dc:95:67:41:37:68:6f:7b:84:72:73:db:79:63:1d: 8e:6a:05:b0:76:bd:37:4e:5b:f3:0d:9d:59:f4:d9:6f:84:21: bf:b4:87:93:11:1d:bc:79:d9:6a:23:7d:31:16:62:7f:c4:10: 36:2d:b6:15:96:b9:93:20:96:41:bc:f7:d4:cb:41:c6:22:05: 61:26:7d:f0:13:24:bf:c4:ad:f6:fb:83:8f:5b:6d:09:f1:e2: 69:7b:cb:c6:1d:d2:e9:e3:90:6e:0e:96:b8:c2:bd:23:2c:79: f5:2e:ec:0a:74:5c:20:2b:49:f7:43:c1:a8:e0:78:1a:74:55: f1:53:9b:f1:db:5e:96:53:76:65:66:99:53:24:2b:9c:83:52: 06:42:c5:d3:fa:96:6a:87:da:90:6c:75:08:c2:49:7e:16:15: f9:1b:4b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5fk0y3qs53MQLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk OTA3MGNiOGUtZTQ1MC00Y2E1LWEyNWItOWMwOWMxYWQzZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiahWFYKTPF0fbgl9g74mpLgotm8fT6LQ6WEq 4x8xcn44NoabW9GAVs4O7etQKL/DGC/pyze9LWorwcL/0a5orUrXZn6DN9xWUC19 d1WoPOntH/S6WSNKiV9HbGMaWjlRA9yBy/H5MU1F/B3dhsdNDlRqREpJ/11gwlQq YDYppzo73I2PqQZ3lqMBl8D7qcxVXa1GoBHyAqjd/2ABG1rToez39Udonp1R+ef9 96AIN2TSTrZCJawmOATSRB/9Xqg1m4/lBWLUTKYbNb9YB/K2zzT6QDYY3miz1qDr 6XsoKnO/4ZZtWjCaJ8eDtZnW1eJPe9Hszu5sgpTS7rtXhMnJawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5XpT1yHB1u7HXxpVlFaXaYKdLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTM4MjNiZTMtOTJiYS0z N2NlLWIzZDQtMGZkNWUwODc2ZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF/bSb2ZXELnm07VrsmLcqgYvU7MO44QbYFCZCyssj/J4ZjaPQOXfJP mi9r7yy6hlExJ3DHddrB17Zmo/Xhpp8bFv36UOnXUFJmcXQTg+Fqy+Q568fkTTMP inghuNyVZ0E3aG97hHJz23ljHY5qBbB2vTdOW/MNnVn02W+EIb+0h5MRHbx52Woj fTEWYn/EEDYtthWWuZMglkG899TLQcYiBWEmffATJL/Erfb7g49bbQnx4ml7y8Yd 0unjkG4OlrjCvSMsefUu7Ap0XCArSfdDwajgeBp0VfFTm/HbXpZTdmVmmVMkK5yD UgZCxdP6lmqH2pBsdQjCSX4WFfkbS/k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org