$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa File: 6352be7b-1542-39bc-93ee-5ee5f8591782.roa (raw, json) Hash identifier: HfmXlrkilV5KvqcBukf9aSKl1F8qsYc/RjeWlB0dKkE= Subject key identifier: F3:F2:93:F1:D5:65:67:E2:A8:2F:BB:CB:D2:E9:0E:8A:BF:6E:17:B7 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474F4B6E962AC9B4DED0960D00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 60558 IP address blocks: 131.153.158.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:6e:96:2a:c9:b4:de:d0:96:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=d58b3e19-e543-4d9f-a125-97fed2079d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:10:c0:d1:d6:ea:b2:0d:a3:1d:55:b9:cc: ef:f8:95:1f:f0:3e:48:e2:78:54:c2:bd:44:8f:be: 42:da:ae:e3:a2:28:03:7f:ef:46:df:74:f8:45:7b: 21:18:cb:dc:f9:41:80:34:f8:48:8a:4b:d4:dd:db: 81:50:63:5a:f8:ab:0c:f3:f9:dd:d1:91:e7:96:02: bb:c2:fe:3f:47:ae:b9:a2:5e:09:21:62:3b:79:6e: 92:f0:d5:76:a4:09:8c:9b:db:e6:2c:e8:6f:a2:87: bb:c6:0f:4e:e4:8b:e6:ce:f2:2f:1d:39:24:03:dd: 07:2c:6d:07:ca:2f:3e:02:92:2f:a4:e3:26:77:7d: 01:88:1b:22:6a:96:8e:98:24:08:bb:35:1d:d9:69: 7f:80:78:17:aa:20:a9:91:38:ab:6d:aa:ff:28:f4: 07:fb:72:c7:d1:b2:a6:e6:c4:c2:de:ae:d3:72:da: 88:ba:79:0c:de:74:b2:68:bd:d4:83:24:b9:64:fc: 4b:d9:ed:4e:8b:87:a2:bc:e8:84:f6:a9:7d:23:e1: 24:a8:33:cc:94:18:7f:9d:b7:73:2f:5b:46:51:df: d7:3d:e4:43:ea:a3:ec:ac:6b:00:10:e1:0b:45:cb: 44:b1:4e:3f:ef:85:d9:bb:8c:c7:d7:d7:ab:6d:31: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:93:F1:D5:65:67:E2:A8:2F:BB:CB:D2:E9:0E:8A:BF:6E:17:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:89:57:b8:2b:db:55:6d:19:68:97:3f:9d:29:0c:22:d2:a3: 88:e9:0e:79:5b:4f:43:2a:61:a0:94:b8:82:55:4d:30:10:aa: ef:a6:98:2f:0b:9f:9b:54:80:46:5e:97:f9:70:3d:1f:95:dc: 34:c6:9a:09:b7:c3:39:06:27:72:90:30:10:b1:f0:c3:7a:fb: c9:43:91:41:7d:24:14:ea:cb:a8:76:ab:fa:39:60:c3:49:77: 93:41:3f:25:23:02:63:ed:ed:57:fc:7c:df:8a:8c:3d:0b:f6: 63:4b:8b:c1:bb:3a:cf:63:42:f2:88:88:3f:93:e7:1a:ec:73: ac:b7:cc:d7:f8:60:b0:db:3f:fa:9f:e2:f2:0c:35:3d:73:18: 61:6b:49:3b:74:91:ea:45:93:ad:44:e7:87:2a:a3:32:4e:92: 88:7f:4d:8e:49:cc:0b:6c:fa:63:f6:58:af:09:4d:d7:07:86: 85:c7:f0:f7:94:6e:c3:cd:4f:3f:d4:d9:16:80:8c:19:97:30: 9a:c1:7e:c7:c7:38:7c:22:8e:89:70:e8:8b:6a:1f:86:be:1f: 7f:d6:fe:c6:a7:e9:d8:0a:9e:aa:4f:a0:c3:4f:61:02:4a:3b: 2e:8a:f1:9a:66:b2:5b:30:aa:81:5d:a3:8c:c2:f2:48:c2:72: 2e:cf:88:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS26WKsm03tCWDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDU4YjNlMTktZTU0My00ZDlmLWExMjUtOTdmZWQyMDc5ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwAQwNHW6rINox1Vuczv+JUf8D5I4nhUwr1E j75C2q7joigDf+9G33T4RXshGMvc+UGANPhIikvU3duBUGNa+KsM8/nd0ZHnlgK7 wv4/R665ol4JIWI7eW6S8NV2pAmMm9vmLOhvooe7xg9O5IvmzvIvHTkkA90HLG0H yi8+ApIvpOMmd30BiBsiapaOmCQIuzUd2Wl/gHgXqiCpkTirbar/KPQH+3LH0bKm 5sTC3q7TctqIunkM3nSyaL3UgyS5ZPxL2e1Oi4eivOiE9ql9I+EkqDPMlBh/nbdz L1tGUd/XPeRD6qPsrGsAEOELRctEsU4/74XZu4zH19erbTHXNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPyk/HVZWfiqC+7y9LpDoq/bhe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjM1MmJlN2ItMTU0Mi0z OWJjLTkzZWUtNWVlNWY4NTkxNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5meMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuJV7gr21VtGWiXP50pDCLSo4jpDnlbT0MqYaCUuIJVTTAQqu+mmC8L n5tUgEZel/lwPR+V3DTGmgm3wzkGJ3KQMBCx8MN6+8lDkUF9JBTqy6h2q/o5YMNJ d5NBPyUjAmPt7Vf8fN+KjD0L9mNLi8G7Os9jQvKIiD+T5xrsc6y3zNf4YLDbP/qf 4vIMNT1zGGFrSTt0kepFk61E54cqozJOkoh/TY5JzAts+mP2WK8JTdcHhoXH8PeU bsPNTz/U2RaAjBmXMJrBfsfHOHwijolw6ItqH4a+H3/W/san6dgKnqpPoMNPYQJK Oy6K8ZpmslswqoFdo4zC8kjCci7PiBo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org