$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa File: d00dfcb1-8997-3cd3-af05-0800d9a48025.roa (raw, json) Hash identifier: i/IQCYcw9NxFfpunEMGEfzBf6Hg+24E1Cy3dPl+obI4= Subject key identifier: 11:3F:C5:B7:C4:06:7B:2B:EB:CA:0B:1A:8F:76:73:9B:FB:1D:7C:DD Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474DE5F7B7BBC4228DAE117000 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 20454 IP address blocks: 131.153.45.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e5:f7:b7:bb:c4:22:8d:ae:11:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=ec5d189b-4fc8-459a-98ab-09ebfb9f031b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:e7:13:29:32:a0:87:36:02:7d:70:7a:44: e6:61:6a:f7:c8:4e:94:ce:68:5b:6e:28:dd:57:3e: 4c:75:72:77:47:55:00:dc:09:bb:4b:a0:a1:de:0c: a0:a6:de:d0:09:9d:5d:6b:d8:e2:4a:fd:32:69:71: 63:1a:de:44:a3:18:9c:b5:86:b2:dd:4e:0e:b2:cf: 27:46:7a:ed:18:ae:df:20:86:cc:ec:b6:37:31:64: 1c:6d:c4:f4:58:f6:01:2f:79:42:dc:13:ca:74:19: 23:6b:fa:1e:19:f2:5b:d0:be:eb:b5:e2:71:72:83: 48:0f:c0:58:ac:03:5f:6b:b9:49:c4:9e:19:1d:a1: 74:61:ab:0d:89:21:f8:a1:58:68:69:ea:1f:50:01: 49:74:33:5b:0f:ac:ee:19:3d:6f:eb:72:7a:59:21: 11:76:fc:8c:6d:62:e5:19:02:44:cc:58:e6:24:17: 7d:d0:ac:04:38:82:fb:bd:1b:c2:d4:38:db:40:4e: 2f:46:89:82:0a:82:52:f3:64:ef:a8:b8:24:ad:c7: 4d:9b:04:51:6f:43:1a:b8:3c:6b:21:94:ab:6c:e9: 12:70:17:7c:3e:a1:c6:72:12:93:20:02:64:46:39: 08:8b:16:de:9e:cc:1e:7d:97:4e:4b:35:26:c9:82: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3F:C5:B7:C4:06:7B:2B:EB:CA:0B:1A:8F:76:73:9B:FB:1D:7C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d9:e8:f3:c1:64:34:ba:4d:76:fa:70:3f:3e:c1:31:1b:2a: 07:b0:3e:d4:02:fb:b8:22:3e:0c:34:68:f1:7b:e7:f5:43:69: 1b:3a:83:bf:6b:20:d6:0f:c9:6f:92:fd:63:06:5c:72:26:8c: 2e:2c:09:72:a8:9e:d3:99:84:3e:20:8b:06:0f:92:96:74:7d: 05:0c:a3:0b:1d:c3:44:10:56:93:19:dd:55:cb:b4:cc:bd:f4: bd:67:23:3e:cb:cc:cc:70:da:8e:12:00:b0:29:d0:75:9b:f6: 5a:29:4e:d5:95:03:9e:3a:c4:71:0c:95:9a:93:a5:52:8c:dd: 5a:8d:f1:93:27:a2:c5:77:77:52:57:80:ac:7c:8d:1c:e1:cd: 26:d1:52:27:f3:18:af:59:11:a3:59:d1:9c:6d:ef:e0:58:66: 08:ef:6d:d5:19:90:fd:7b:d7:3a:ad:91:4d:58:83:48:cf:6d: 20:c6:47:ec:fb:f1:89:01:0c:51:66:c8:de:34:16:d1:6f:2b: 82:2d:9c:51:b7:9f:2a:c9:6c:35:d7:76:2c:42:84:c1:63:e8: bb:f7:f0:46:4f:c0:93:07:c2:5f:f1:fc:a5:b7:83:22:33:8e: 2e:de:f2:a1:08:36:5b:04:90:46:1b:0d:5c:bd:b1:cf:c5:3e: 99:4d:b8:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5fe3u8Qija4RcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWM1ZDE4OWItNGZjOC00NTlhLTk4YWItMDllYmZiOWYwMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO7nEykyoIc2An1wekTmYWr3yE6Uzmhbbijd Vz5MdXJ3R1UA3Am7S6Ch3gygpt7QCZ1da9jiSv0yaXFjGt5EoxictYay3U4Oss8n RnrtGK7fIIbM7LY3MWQcbcT0WPYBL3lC3BPKdBkja/oeGfJb0L7rteJxcoNID8BY rANfa7lJxJ4ZHaF0YasNiSH4oVhoaeofUAFJdDNbD6zuGT1v63J6WSERdvyMbWLl GQJEzFjmJBd90KwEOIL7vRvC1DjbQE4vRomCCoJS82TvqLgkrcdNmwRRb0MauDxr IZSrbOkScBd8PqHGchKTIAJkRjkIixbenswefZdOSzUmyYKxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE/xbfEBnsr68oLGo92c5v7HXzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDAwZGZjYjEtODk5Ny0z Y2QzLWFmMDUtMDgwMGQ5YTQ4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDZ6PPBZDS6TXb6cD8+wTEbKgewPtQC+7giPgw0aPF75/VDaRs6g79r INYPyW+S/WMGXHImjC4sCXKontOZhD4giwYPkpZ0fQUMowsdw0QQVpMZ3VXLtMy9 9L1nIz7LzMxw2o4SALAp0HWb9lopTtWVA546xHEMlZqTpVKM3VqN8ZMnosV3d1JX gKx8jRzhzSbRUifzGK9ZEaNZ0Zxt7+BYZgjvbdUZkP171zqtkU1Yg0jPbSDGR+z7 8YkBDFFmyN40FtFvK4ItnFG3nyrJbDXXdixChMFj6Lv38EZPwJMHwl/x/KW3gyIz ji7e8qEINlsEkEYbDVy9sc/FPplNuCo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org