$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa File: db061df5-cce6-33ed-9e57-80dd3d303f28.roa (raw, json) Hash identifier: XvAgXSKdXBSi555lshoeNFSd8qBc1X5pipQvgqdQfs8= Subject key identifier: BC:8F:27:DD:CA:19:F2:C4:63:A0:EC:22:01:CD:EC:AC:A9:09:73:A8 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858477BF6609ACA1D1CE8B0C6D7C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 400672 IP address blocks: 131.153.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:60:9a:ca:1d:1c:e8:b0:c6:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=73d55b42-1e6c-4c6c-b009-20baef8ba88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:7b:5b:c9:50:94:74:c4:e0:20:ef:23:9e: 68:1b:49:99:d3:75:7f:4c:a0:a6:c1:c6:cf:90:1e: 13:a7:c1:99:60:ce:bc:1d:1a:21:db:81:0b:71:93: 57:10:ba:38:c8:d3:7f:0d:4c:ce:52:c2:b7:68:16: 46:93:b4:b3:26:93:a1:79:07:4a:68:d0:98:f2:0d: 87:a1:3d:ff:24:4a:50:ff:3c:96:7c:07:8f:09:03: 27:17:94:cc:97:f0:bb:60:ef:d8:2e:94:6f:25:33: 70:eb:82:76:9f:4c:67:04:6e:78:50:87:7e:7c:44: a2:af:be:50:07:b3:80:22:a2:da:79:df:3b:a6:06: ec:61:25:17:e5:c7:0b:c0:4a:b4:1d:10:f5:01:06: ce:af:b0:6d:7c:11:36:59:72:e9:8b:7c:23:e5:62: 5c:e0:0c:19:60:15:23:2d:e4:ef:f4:1e:e0:10:fa: e3:f2:9f:90:58:ae:59:87:f5:24:00:c6:6f:40:c2: b7:8d:f9:ab:e8:8e:3d:ed:87:5c:95:a7:8e:22:5f: 3f:1f:47:53:0a:5b:31:09:a8:9b:4b:d7:77:42:ca: 7c:06:93:89:fa:15:45:2a:c5:17:c1:40:4f:dd:ed: 95:1b:f9:08:77:f6:cc:3a:11:af:1d:7e:ac:42:54: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8F:27:DD:CA:19:F2:C4:63:A0:EC:22:01:CD:EC:AC:A9:09:73:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5f:db:5b:c0:6f:70:5e:89:58:94:8d:fe:19:da:b1:e4:44: 76:58:38:d8:f2:e1:f4:d2:3f:34:8c:97:7a:7d:7a:de:7b:38: fb:9e:2b:11:49:60:4c:97:d0:c5:62:0a:0e:8b:0d:d1:8c:c6: c1:a2:54:7c:dd:5b:05:99:2b:30:0c:e2:53:a9:c1:cc:fe:1d: 1d:78:b6:af:9e:cd:f2:4c:9e:94:88:b2:32:c7:dc:bb:99:3a: ae:92:18:e6:a9:c5:63:ad:76:82:73:84:50:15:9f:72:94:cc: 06:3e:27:cf:a1:8b:1b:bd:7c:cc:73:d2:b5:10:a6:bc:4b:be: b5:61:fe:82:c8:72:7c:aa:a4:32:99:2c:bd:63:45:b6:9d:45: 49:14:d9:78:59:4f:a1:3e:44:a9:20:70:fb:47:94:7e:b8:92: 1e:20:aa:db:66:14:e1:e3:ad:9b:bf:63:67:82:95:8e:e8:45: 58:ed:11:64:68:86:25:e7:35:75:89:de:22:bd:04:54:e3:81: 35:85:b4:e2:2c:9f:00:1c:80:0f:b5:03:23:d4:0a:5b:c5:e2: fb:1d:6c:b1:c1:97:08:29:38:43:14:57:1f:86:7f:ea:60:b0: 13:dd:76:2f:06:c0:86:a3:7a:b7:ee:93:99:b4:36:94:b3:b9: 3f:5b:dd:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79mCayh0c6LDG18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk NzNkNTViNDItMWU2Yy00YzZjLWIwMDktMjBiYWVmOGJhODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqax7W8lQlHTE4CDvI55oG0mZ03V/TKCmwcbP kB4Tp8GZYM68HRoh24ELcZNXELo4yNN/DUzOUsK3aBZGk7SzJpOheQdKaNCY8g2H oT3/JEpQ/zyWfAePCQMnF5TMl/C7YO/YLpRvJTNw64J2n0xnBG54UId+fESir75Q B7OAIqLaed87pgbsYSUX5ccLwEq0HRD1AQbOr7BtfBE2WXLpi3wj5WJc4AwZYBUj LeTv9B7gEPrj8p+QWK5Zh/UkAMZvQMK3jfmr6I497YdclaeOIl8/H0dTClsxCaib S9d3Qsp8BpOJ+hVFKsUXwUBP3e2VG/kId/bMOhGvHX6sQlSCRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyPJ93KGfLEY6DsIgHN7KypCXOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGIwNjFkZjUtY2NlNi0z M2VkLTllNTctODBkZDNkMzAzZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhf21vAb3BeiViUjf4Z2rHkRHZYONjy4fTSPzSMl3p9et57OPueKxFJ YEyX0MViCg6LDdGMxsGiVHzdWwWZKzAM4lOpwcz+HR14tq+ezfJMnpSIsjLH3LuZ Oq6SGOapxWOtdoJzhFAVn3KUzAY+J8+hixu9fMxz0rUQprxLvrVh/oLIcnyqpDKZ LL1jRbadRUkU2XhZT6E+RKkgcPtHlH64kh4gqttmFOHjrZu/Y2eClY7oRVjtEWRo hiXnNXWJ3iK9BFTjgTWFtOIsnwAcgA+1AyPUClvF4vsdbLHBlwgpOEMUVx+Gf+pg sBPddi8GwIajerfuk5m0NpSzuT9b3Ww= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:43 2024 by rpki-client on console-ams.rpki-client.org