$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa File: 595fb046-9295-368f-8ffc-2a8deebe67e8.roa (raw, json) Hash identifier: rSL2yLOjlajHwM8d6nh5ti30w0hS+yHEPohtyE4m4vg= Subject key identifier: FE:DF:C3:41:49:84:CA:29:F7:6E:EE:6C:EB:B2:48:8C:AD:94:3B:68 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474DE5FA10ED02941E31F09300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 12189 IP address blocks: 131.153.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e5:fa:10:ed:02:94:1e:31:f0:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=d2afc055-bfbb-4320-845b-4c39925f4dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:12:07:a4:29:87:f0:8e:46:9d:bb:d0:76:57: f7:df:59:b8:fb:96:80:d8:01:7b:da:ce:1c:70:6b: 62:0d:41:85:72:c4:f5:f4:7a:b5:9c:c9:ab:bf:33: e8:a4:0b:73:b5:42:bd:53:70:39:f1:54:0e:80:44: d6:6f:ec:09:f1:43:1b:0f:b6:17:32:f3:c8:96:96: d8:b2:33:9b:b9:f0:01:31:55:9b:11:14:93:b5:8b: 52:58:ae:e6:82:f5:e0:f7:63:53:80:db:0e:a7:b4: 57:9a:3d:04:3d:0b:ca:9c:f7:1b:ac:3e:98:8a:92: 0f:40:03:ef:ba:6f:1d:37:c0:54:0e:5f:66:f7:88: 16:35:d5:33:2d:a0:c2:da:79:c7:3b:20:b5:24:aa: 86:b5:c6:56:1f:fa:28:e5:27:08:cb:c5:da:06:c0: ae:63:e1:68:9f:99:61:ae:3b:a5:2a:93:5c:f8:46: 8b:5c:69:ed:08:60:23:a0:d9:a7:83:bb:4f:7a:8b: 28:df:ac:1b:4d:68:ac:da:d8:9c:3b:8e:34:c7:53: ed:d9:ff:e8:07:0d:f7:3a:62:57:5b:93:b8:09:b9: fc:f8:d7:cc:73:d8:33:50:29:be:d9:83:ff:77:97: bb:3c:7f:c6:06:e3:5f:c7:47:4e:b2:f2:57:54:74: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DF:C3:41:49:84:CA:29:F7:6E:EE:6C:EB:B2:48:8C:AD:94:3B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:27:d3:e9:36:e7:fa:c9:70:67:04:8c:7d:d6:c6:23:fb:8c: 55:8e:b8:57:78:02:03:5d:03:75:b1:59:f5:eb:30:06:da:3b: 03:30:d8:32:e1:c8:d9:b1:cf:65:f5:db:da:7b:a0:eb:7d:38: 74:e5:68:71:93:5d:4d:06:06:6b:9f:eb:ce:81:ce:4c:2a:ed: 07:d7:2d:48:8f:36:04:1d:5d:c4:9c:83:fe:34:6a:5e:5e:6a: 94:1f:54:44:60:08:e4:63:19:18:62:e6:8e:c0:56:a2:1f:47: b0:22:27:ad:5d:31:d3:b7:d0:3b:bf:8e:0d:89:1d:09:91:06: 4b:a0:fc:8f:a6:ec:e9:41:d0:a4:e2:6b:90:68:3b:55:8a:c0: 5a:39:0d:44:02:ff:75:27:e1:fb:cd:66:ff:29:07:d9:35:41: 1a:57:4a:53:66:07:6e:8c:76:4c:be:ad:1c:97:a2:5b:bd:38: 5c:d8:c5:0d:f8:1d:81:0a:f0:20:f8:c6:f5:b9:3b:bf:8c:fc: 02:a4:9b:66:f7:59:1f:c7:2a:c8:90:bd:1e:1c:bc:5d:b2:54: 15:7c:e5:b6:ff:3c:45:bc:6b:12:04:69:44:ac:22:fa:00:70: d5:0c:df:39:94:3a:4a:8a:dc:6f:44:3f:d2:0a:61:bb:4f:a9: 71:30:95:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5foQ7QKUHjHwkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDJhZmMwNTUtYmZiYi00MzIwLTg0NWItNGMzOTkyNWY0ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxIHpCmH8I5GnbvQdlf331m4+5aA2AF72s4c cGtiDUGFcsT19Hq1nMmrvzPopAtztUK9U3A58VQOgETWb+wJ8UMbD7YXMvPIlpbY sjObufABMVWbERSTtYtSWK7mgvXg92NTgNsOp7RXmj0EPQvKnPcbrD6YipIPQAPv um8dN8BUDl9m94gWNdUzLaDC2nnHOyC1JKqGtcZWH/oo5ScIy8XaBsCuY+Fon5lh rjulKpNc+EaLXGntCGAjoNmng7tPeoso36wbTWis2ticO440x1Pt2f/oBw33OmJX W5O4Cbn8+NfMc9gzUCm+2YP/d5e7PH/GBuNfx0dOsvJXVHQfxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7fw0FJhMop927ubOuySIytlDtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTk1ZmIwNDYtOTI5NS0z NjhmLThmZmMtMmE4ZGVlYmU2N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIn0+k25/rJcGcEjH3WxiP7jFWOuFd4AgNdA3WxWfXrMAbaOwMw2DLh yNmxz2X129p7oOt9OHTlaHGTXU0GBmuf686Bzkwq7QfXLUiPNgQdXcScg/40al5e apQfVERgCORjGRhi5o7AVqIfR7AiJ61dMdO30Du/jg2JHQmRBkug/I+m7OlB0KTi a5BoO1WKwFo5DUQC/3Un4fvNZv8pB9k1QRpXSlNmB26Mdky+rRyXolu9OFzYxQ34 HYEK8CD4xvW5O7+M/AKkm2b3WR/HKsiQvR4cvF2yVBV85bb/PEW8axIEaUSsIvoA cNUM3zmUOkqK3G9EP9IKYbtPqXEwlVM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org