$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json) Hash identifier: L7CHeBpdHubE17QcC8DWSoESdVijIWG3TQVWUWxgphw= Subject key identifier: E3:30:88:FB:2F:1A:E6:D9:10:96:50:BC:35:28:C1:9C:8E:2D:CE:35 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858473FF0A26FD7241E9F65F8C940 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 212238 IP address blocks: 158.115.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:a2:6f:d7:24:1e:9f:65:f8:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=1267e9b2-b69f-45cc-a9c4-0802cef7a079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1c:25:16:d8:8d:ce:6f:e6:60:ef:c2:62:2a: 97:cb:38:c9:da:97:fa:80:6e:fc:0c:d8:9e:69:98: d2:7d:73:23:87:95:1e:ca:33:ba:73:c1:00:ab:53: 33:19:1a:9a:64:b8:85:56:10:71:b9:ab:82:eb:62: a5:58:b8:03:8b:8e:f5:0e:c3:1e:9c:be:02:b5:64: 1d:9f:78:81:3b:f8:23:b1:49:5e:64:dd:3d:41:53: 65:83:13:6d:83:89:10:e5:e2:01:da:5e:1c:b6:9d: b9:d0:5d:68:86:41:c6:68:ac:fa:85:69:a3:9f:be: 17:07:8b:05:4d:71:e6:21:17:5b:3c:c3:4b:ae:7e: 8c:80:9a:51:05:03:39:d1:c8:13:bb:c7:9a:16:fc: d7:65:03:a0:3e:52:6c:ba:12:73:bb:36:43:8d:49: 28:7c:b0:f0:17:78:7a:b0:17:f2:c4:73:48:3d:bf: 70:fd:a7:5f:72:d1:dd:c8:21:a1:55:d1:9d:5d:c7: d3:eb:d3:36:20:8c:9d:ff:69:33:22:24:16:d4:79: bf:3c:05:ba:ba:18:c2:1e:f2:89:52:ec:8f:fc:b3: 74:04:64:fc:25:f3:87:04:6e:56:49:5b:4d:d7:26: 30:4c:92:a7:48:ef:4b:d6:60:fd:88:0c:e7:05:d1: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:30:88:FB:2F:1A:E6:D9:10:96:50:BC:35:28:C1:9C:8E:2D:CE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b6:f8:f9:7d:4b:c0:13:b1:95:f2:9e:7a:47:91:5d:25:ad: 24:0c:dd:2c:61:43:2b:49:1d:b7:95:f3:46:46:b4:85:91:06: 51:e0:c2:bc:6a:63:23:59:03:33:54:9e:77:87:cd:3d:0b:ed: de:44:fd:34:dc:54:53:4b:0a:6e:72:74:45:2c:47:5f:3d:6c: 99:cf:33:6c:c7:1c:87:d6:6c:d4:bc:5b:eb:f5:f2:5b:ec:2e: 5f:93:29:6a:68:44:b2:9a:fa:b1:68:ff:67:df:c6:bf:ce:1d: 66:f6:9d:09:f3:99:86:22:0b:0c:60:2d:d6:aa:d6:27:14:21: 08:a6:91:f9:e2:74:82:19:e6:92:dc:3b:91:58:37:90:fa:f7: 57:f8:3d:2c:55:b6:1d:07:f8:75:c4:a1:b5:a1:5b:03:a8:66: 57:e5:4d:56:ad:a0:19:19:6c:03:56:4d:ea:bc:6b:fa:04:4f: 92:50:33:9d:1d:63:c3:2e:15:33:74:93:05:74:d5:1c:0a:76: 5d:d2:93:57:0d:ff:30:8f:e4:45:45:35:21:cd:9d:80:58:f3: d4:55:ec:8f:bc:17:0e:4d:15:d6:47:35:50:d0:8d:25:4f:cd: 45:23:29:84:71:68:5d:44:1e:8a:ef:f6:4b:46:1e:0d:0a:36: 00:9a:96:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8KJv1yQen2X4yUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk MTI2N2U5YjItYjY5Zi00NWNjLWE5YzQtMDgwMmNlZjdhMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBwlFtiNzm/mYO/CYiqXyzjJ2pf6gG78DNie aZjSfXMjh5UeyjO6c8EAq1MzGRqaZLiFVhBxuauC62KlWLgDi471DsMenL4CtWQd n3iBO/gjsUleZN09QVNlgxNtg4kQ5eIB2l4ctp250F1ohkHGaKz6hWmjn74XB4sF TXHmIRdbPMNLrn6MgJpRBQM50cgTu8eaFvzXZQOgPlJsuhJzuzZDjUkofLDwF3h6 sBfyxHNIPb9w/adfctHdyCGhVdGdXcfT69M2IIyd/2kzIiQW1Hm/PAW6uhjCHvKJ UuyP/LN0BGT8JfOHBG5WSVtN1yYwTJKnSO9L1mD9iAznBdFS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMwiPsvGubZEJZQvDUowZyOLc41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU3MjA3YWEtMzNiYS0z NTE3LWJhOTItZGJlYWU3NTZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq2+Pl9S8ATsZXynnpHkV0lrSQM3SxhQytJHbeV80ZGtIWRBlHgwrxq YyNZAzNUnneHzT0L7d5E/TTcVFNLCm5ydEUsR189bJnPM2zHHIfWbNS8W+v18lvs Ll+TKWpoRLKa+rFo/2ffxr/OHWb2nQnzmYYiCwxgLdaq1icUIQimkfnidIIZ5pLc O5FYN5D691f4PSxVth0H+HXEobWhWwOoZlflTVatoBkZbANWTeq8a/oET5JQM50d Y8MuFTN0kwV01RwKdl3Sk1cN/zCP5EVFNSHNnYBY89RV7I+8Fw5NFdZHNVDQjSVP zUUjKYRxaF1EHorv9ktGHg0KNgCaluc= -----END CERTIFICATE-----Generated at Sun Nov 24 21:00:46 2024 by rpki-client on console-fra.rpki-client.org