$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa File: 52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa (raw, json) Hash identifier: C+Wgi1TP7E8eaV+oBDewdUDQl0NIy+mBm9O7Lp9z914= Subject key identifier: 2B:11:24:7A:D5:83:C7:85:23:41:E0:60:3C:1B:9F:E9:7B:2B:19:C6 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F432858479D76C17944D1C377AF002C00 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 393249 IP address blocks: 128.189.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:c1:79:44:d1:c3:77:af:00:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=10a50fa9-bc16-4d32-bf67-752781693ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:44:b6:3c:8f:a6:c0:e5:02:87:38:9f:cd: 54:77:1e:02:b2:e1:7f:1c:de:7c:16:af:3b:ba:c2: b7:cb:2c:2d:25:13:96:69:60:43:eb:eb:ac:9e:1a: 2f:5f:aa:f3:cf:b8:a2:31:72:36:62:51:0c:81:18: a4:5d:5d:1f:ba:a7:a2:79:ad:11:d3:79:de:4d:b2: 04:d0:b9:ef:02:ab:9c:a4:2d:a8:f4:fc:1c:5a:12: 41:82:96:59:f3:9d:f3:13:5c:a2:b3:ff:7b:2a:cc: 32:38:ea:64:a7:0f:fb:35:df:0c:8b:54:92:54:2a: db:cb:89:f6:ce:29:87:5c:0a:d8:0a:c3:00:1a:e4: 6e:f1:01:8d:43:82:6c:9d:fc:d5:b2:da:86:ef:2b: c9:95:86:22:e3:fe:55:5a:8d:db:91:b7:3c:9b:af: d1:bc:94:25:55:0e:9b:ad:e9:fa:ac:98:a7:72:a3: 94:c9:4a:05:02:af:0b:85:bd:9d:90:71:e9:a0:16: 71:fc:4a:cd:80:3d:84:3d:c9:b2:c5:21:d1:60:98: be:4c:44:13:67:8e:63:ba:c0:24:49:da:91:df:b9: d2:38:11:63:86:bb:5e:d6:6e:3e:a1:8b:c7:bf:32: 86:f1:f3:97:47:cc:5f:91:8b:42:88:c4:af:ff:a9: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:11:24:7A:D5:83:C7:85:23:41:E0:60:3C:1B:9F:E9:7B:2B:19:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5f:47:e6:de:10:9d:54:ff:bf:12:08:45:19:9e:a8:3b:8d: 10:9f:f5:bc:b1:48:55:5d:63:18:0a:6a:3d:04:3e:fc:5b:17: 07:81:58:69:4a:8a:8c:5e:e8:87:2c:54:8d:7a:f6:a3:13:11: 80:2c:66:41:7d:fa:36:79:ae:10:5a:53:a3:6b:f5:fc:8c:9d: c4:0e:53:5d:b1:40:bf:f4:d8:93:8e:f2:28:2b:5b:0b:3a:fa: 64:b5:db:26:91:26:70:df:e0:ce:00:c1:08:d4:e9:46:42:5d: 55:97:b1:08:2c:c1:28:00:67:a2:9a:91:49:b0:64:29:a1:22: 9e:c5:b7:d9:41:30:36:c7:9e:70:d4:ae:42:74:75:57:17:bb: ff:2b:63:19:c4:34:af:80:d1:fb:35:44:21:50:78:35:e0:87: 07:b5:67:cf:1f:15:1a:3d:66:96:9d:9e:36:d2:73:f6:47:f5: 01:a3:47:9f:e8:81:36:86:71:0c:18:e7:f5:a2:a9:4c:09:ec: eb:54:55:33:a0:08:4d:42:36:83:4a:bf:b4:6f:3a:56:6f:bd: 57:7a:b8:fa:5b:d6:07:b2:eb:fa:53:ea:5c:e2:ae:f6:37:d6: e7:9b:4f:d3:e2:09:61:1f:ed:29:6e:63:78:e9:bb:5f:89:36: d0:e2:94:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsF5RNHDd68ALAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MTBhNTBmYTktYmMxNi00ZDMyLWJmNjctNzUyNzgxNjkzZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOpEtjyPpsDlAoc4n81Udx4CsuF/HN58Fq87 usK3yywtJROWaWBD6+usnhovX6rzz7iiMXI2YlEMgRikXV0fuqeiea0R03neTbIE 0LnvAqucpC2o9PwcWhJBgpZZ853zE1yis/97KswyOOpkpw/7Nd8Mi1SSVCrby4n2 zimHXArYCsMAGuRu8QGNQ4JsnfzVstqG7yvJlYYi4/5VWo3bkbc8m6/RvJQlVQ6b ren6rJincqOUyUoFAq8Lhb2dkHHpoBZx/ErNgD2EPcmyxSHRYJi+TEQTZ45jusAk SdqR37nSOBFjhrte1m4+oYvHvzKG8fOXR8xfkYtCiMSv/6mDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsRJHrVg8eFI0HgYDwbn+l7KxnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTJmNGI0ZTAtMzEyMi0z ZmUwLThmMTctNGVmYjJkMmFjZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgL0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxfR+beEJ1U/78SCEUZnqg7jRCf9byxSFVdYxgKaj0EPvxbFweBWGlK ioxe6IcsVI169qMTEYAsZkF9+jZ5rhBaU6Nr9fyMncQOU12xQL/02JOO8igrWws6 +mS12yaRJnDf4M4AwQjU6UZCXVWXsQgswSgAZ6KakUmwZCmhIp7Ft9lBMDbHnnDU rkJ0dVcXu/8rYxnENK+A0fs1RCFQeDXghwe1Z88fFRo9ZpadnjbSc/ZH9QGjR5/o gTaGcQwY5/WiqUwJ7OtUVTOgCE1CNoNKv7RvOlZvvVd6uPpb1gey6/pT6lzirvY3 1uebT9PiCWEf7SluY3jpu1+JNtDilME= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org