$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa File: 194a2536-f5c7-30fa-a3f2-891677b761c0.roa (raw, json) Hash identifier: gqvdD88/FE4hOYx+TqvLuRyOn01LOBazDf7swVJZ/vA= Subject key identifier: 77:7F:B4:D4:F4:1C:05:3D:DA:19:7E:93:FD:B7:43:B3:43:2E:11:EB Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F432858477CA863B64177CDE0EC0542AA Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa Signing time: Wed 09 Oct 2024 18:59:28 +0000 ROA not before: Wed 09 Oct 2024 18:59:28 +0000 ROA not after: Tue 07 Jan 2025 19:59:28 +0000 asID: 401015 IP address blocks: 140.221.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7c:a8:63:b6:41:77:cd:e0:ec:05:42:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Oct 9 18:59:28 2024 GMT Not After : Jan 7 19:59:28 2025 GMT Subject: CN=c771ba9c-a67b-4282-9a96-08e7e5a0de88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:1d:72:59:3c:39:f6:d5:60:17:3f:cf:bc: 4b:43:bd:1c:e6:d4:d1:a6:4c:7a:2a:38:2b:04:0b: f0:3e:f0:aa:0f:f7:16:d2:cf:1b:2e:7d:28:7f:52: e4:5e:82:de:e6:7d:5f:fd:a3:3f:27:e4:2d:00:f9: dc:d9:7e:97:cc:3d:45:a1:30:80:27:1a:1d:f7:8e: c4:08:47:9a:4b:f8:cc:f6:9f:66:f6:f2:4a:bb:6c: 9f:04:8a:39:21:b4:23:ad:93:e0:d1:48:fd:73:98: 8c:73:8b:a8:3a:28:62:65:1e:91:80:84:a9:f2:e3: 08:59:d2:d7:0a:18:40:4c:dd:09:b6:57:45:a2:34: 97:92:97:5e:93:40:d3:5a:b1:ee:8d:c6:4e:0e:02: c6:c2:c7:1a:bf:26:4a:df:99:c9:ad:b2:47:1c:45: 0c:38:78:f4:b6:3f:92:ef:d7:a8:f3:fc:d6:db:6f: e8:b0:e7:fd:bd:05:9d:6d:03:95:a8:05:4e:5c:17: 73:a3:11:31:8a:21:f4:49:72:94:fa:24:ef:8d:5b: 7d:c6:43:a7:8d:38:b5:e4:50:66:c4:9e:ba:a7:52: e7:22:fe:ae:51:26:94:37:77:fe:a4:f6:19:8e:a7: b1:10:ca:19:cf:6c:42:78:16:d5:2d:ed:ce:77:a1: aa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7F:B4:D4:F4:1C:05:3D:DA:19:7E:93:FD:B7:43:B3:43:2E:11:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 140.221.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:75:fa:4a:3f:de:69:d8:52:db:27:a4:60:52:c1:4e:de:8f: b1:44:d6:8f:ea:9d:a1:30:5d:72:65:e2:36:31:cd:d7:fd:b3: 85:39:6d:b3:19:d4:02:96:2d:b5:e5:43:0e:3e:ef:6d:ba:22: 3a:7e:3e:21:ea:7d:42:2b:4d:0f:6b:03:aa:c8:ba:05:2e:6e: a2:05:26:1a:c7:92:ae:df:96:cb:0f:ac:81:ce:a0:62:29:18: ae:f4:aa:83:ee:b8:5d:76:b6:cb:73:5a:7c:eb:08:de:55:49: ce:3c:c8:c8:9f:11:8d:42:d2:c1:0d:5c:1a:69:0f:60:e7:a0: 44:37:2a:44:18:e0:97:1c:2e:6c:bd:2b:4c:db:9b:82:7f:61: db:b4:3f:91:2b:25:0f:29:e8:3e:02:f5:3c:17:e9:95:fe:d4: cd:49:5b:f3:43:88:3e:3d:4c:0d:be:b5:2c:78:76:e6:bb:e6: 3f:d2:a3:3e:7c:f9:2f:74:a9:27:34:7a:25:cd:bf:39:18:24: b5:43:6d:02:78:cf:ef:45:e4:89:80:b5:fb:93:47:30:48:6d: 8f:ae:61:f8:e4:95:13:5e:7e:61:c3:b2:76:dd:f7:4a:e4:71: 20:7b:18:5c:9a:c4:eb:c0:81:ce:c3:32:97:5b:e4:36:d1:c3: 79:6d:2c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd8qGO2QXfN4OwFQqowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI0MTAwOTE4NTkyOFoXDTI1MDEwNzE5NTkyOFowLzEtMCsGA1UEAxMk Yzc3MWJhOWMtYTY3Yi00MjgyLTlhOTYtMDhlN2U1YTBkZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlMdclk8OfbVYBc/z7xLQ70c5tTRpkx6Kjgr BAvwPvCqD/cW0s8bLn0of1LkXoLe5n1f/aM/J+QtAPnc2X6XzD1FoTCAJxod947E CEeaS/jM9p9m9vJKu2yfBIo5IbQjrZPg0Uj9c5iMc4uoOihiZR6RgISp8uMIWdLX ChhATN0JtldFojSXkpdek0DTWrHujcZODgLGwscavyZK35nJrbJHHEUMOHj0tj+S 79eo8/zW22/osOf9vQWdbQOVqAVOXBdzoxExiiH0SXKU+iTvjVt9xkOnjTi15FBm xJ66p1LnIv6uUSaUN3f+pPYZjqexEMoZz2xCeBbVLe3Od6Gq6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd/tNT0HAU92hl+k/23Q7NDLhHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvMTk0YTI1MzYtZjVjNy0z MGZhLWEzZjItODkxNjc3Yjc2MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV1+ko/3mnYUtsnpGBSwU7ej7FE1o/qnaEwXXJl4jYxzdf9s4U5bbMZ 1AKWLbXlQw4+7226Ijp+PiHqfUIrTQ9rA6rIugUubqIFJhrHkq7flssPrIHOoGIp GK70qoPuuF12tstzWnzrCN5VSc48yMifEY1C0sENXBppD2DnoEQ3KkQY4JccLmy9 K0zbm4J/Ydu0P5ErJQ8p6D4C9TwX6ZX+1M1JW/NDiD49TA2+tSx4dua75j/Soz58 +S90qSc0eiXNvzkYJLVDbQJ4z+9F5ImAtfuTRzBIbY+uYfjklRNefmHDsnbd90rk cSB7GFyaxOvAgc7DMpdb5DbRw3ltLEU= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:09 2024 by rpki-client on console-ams.rpki-client.org