$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa File: 9b9b9c14-7c59-311c-b7c4-f4928230b433.roa (raw, json) Hash identifier: lviN1NSS3ExgWr/vqlG4bqMKb3kVznaYN511o06sMY0= Subject key identifier: C8:01:2D:34:84:3E:B7:37:0D:DD:D4:43:3F:A3:BE:31:80:5C:F8:8E Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F43285847ED24CA5B7B1E3FE791A9FC80 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 8075 IP address blocks: 167.21.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:ca:5b:7b:1e:3f:e7:91:a9:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=741932fe-3985-48cf-ac53-558f5b5221c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:87:c5:a1:5b:f1:27:63:14:3d:5a:0c:08: 25:d9:3f:af:7e:f5:ea:86:ab:b5:93:67:e7:00:ff: e6:9d:69:93:2e:0e:16:9e:65:78:97:2f:46:f5:1e: e7:aa:fb:cd:23:16:3d:7d:45:a8:c1:77:11:00:46: d6:64:e9:83:98:b5:59:23:9b:b1:bd:3b:c5:2d:01: 4a:90:7b:f8:da:8d:7f:cb:9c:9a:c4:cd:5d:f7:10: d9:1d:59:5a:73:64:62:0e:dc:4d:1a:32:85:20:b6: f1:20:69:ff:09:f5:c1:1f:3c:3f:88:ae:6e:06:f6: 02:c0:e6:f1:da:01:13:14:ef:07:42:12:c6:01:bc: 1e:77:8f:6b:ce:b6:2f:ef:3b:d4:4d:31:71:54:be: b0:b9:e1:98:74:37:e6:b4:f3:17:30:ea:38:85:2d: 84:1d:80:96:a8:37:e3:54:9f:aa:a3:82:10:4e:11: 7f:22:93:ff:70:bd:6a:06:19:5d:27:5b:cb:9a:8e: f9:5f:96:4b:1a:17:02:49:56:df:ae:ed:23:1f:6f: fa:8e:e2:2c:9b:b0:d8:4e:e2:ee:75:87:27:30:15: ac:f6:2b:e8:9a:46:2c:e8:34:27:6c:fa:4b:92:8b: c6:63:01:c0:81:76:fb:e4:a4:9e:37:ad:cc:86:5a: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:2D:34:84:3E:B7:37:0D:DD:D4:43:3F:A3:BE:31:80:5C:F8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f6:6a:42:2f:27:56:62:0a:18:51:34:d0:26:95:13:f9:2d: 12:b6:1a:4f:78:0e:2d:dd:ff:b4:70:98:64:9b:e6:4e:42:27: 8f:b3:cc:f3:41:87:94:99:e4:83:36:cd:e5:b0:f9:b5:18:16: 86:1d:41:41:92:73:b7:04:ef:23:bd:10:84:e4:e3:2f:ae:f0: f5:f0:c6:4b:a6:82:70:c9:22:22:11:53:3e:bb:05:5a:7f:07: de:bc:17:d8:ce:88:42:06:66:4b:45:0b:67:e6:7d:f2:f2:73: 6c:0f:a6:d6:e8:41:84:c7:d5:cb:f1:88:38:78:7e:de:77:6b: 2b:90:4d:11:49:ef:26:58:98:ea:fd:bb:3a:b4:c4:10:a4:c7: cd:f0:55:cc:73:38:22:b5:03:f7:59:33:c0:78:03:75:51:f6: 4c:35:a4:b8:6c:03:26:da:ad:ae:69:dd:49:1d:aa:d8:54:a2: 11:3e:30:85:40:da:05:72:69:40:3a:8b:56:79:84:79:0c:ce: d1:a3:1c:3d:a1:0f:03:f5:88:6a:8c:3a:20:bd:83:e3:85:6b: 42:c8:9f:06:ae:13:9d:f2:3e:64:51:cc:bd:81:af:f2:df:36: 03:42:ca:da:4b:9a:57:7b:74:50:04:bf:b2:0e:d5:d0:9b:37: 09:5c:20:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMpbex4/55Gp/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk NzQxOTMyZmUtMzk4NS00OGNmLWFjNTMtNTU4ZjViNTIyMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjOHxaFb8SdjFD1aDAgl2T+vfvXqhqu1k2fn AP/mnWmTLg4WnmV4ly9G9R7nqvvNIxY9fUWowXcRAEbWZOmDmLVZI5uxvTvFLQFK kHv42o1/y5yaxM1d9xDZHVlac2RiDtxNGjKFILbxIGn/CfXBHzw/iK5uBvYCwObx 2gETFO8HQhLGAbwed49rzrYv7zvUTTFxVL6wueGYdDfmtPMXMOo4hS2EHYCWqDfj VJ+qo4IQThF/IpP/cL1qBhldJ1vLmo75X5ZLGhcCSVbfru0jH2/6juIsm7DYTuLu dYcnMBWs9ivomkYs6DQnbPpLkovGYwHAgXb75KSeN63MhlqE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgBLTSEPrc3Dd3UQz+jvjGAXPiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvOWI5YjljMTQtN2M1OS0z MTFjLWI3YzQtZjQ5MjgyMzBiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb2akIvJ1ZiChhRNNAmlRP5LRK2Gk94Di3d/7RwmGSb5k5CJ4+zzPNB h5SZ5IM2zeWw+bUYFoYdQUGSc7cE7yO9EITk4y+u8PXwxkumgnDJIiIRUz67BVp/ B968F9jOiEIGZktFC2fmffLyc2wPptboQYTH1cvxiDh4ft53ayuQTRFJ7yZYmOr9 uzq0xBCkx83wVcxzOCK1A/dZM8B4A3VR9kw1pLhsAybara5p3UkdqthUohE+MIVA 2gVyaUA6i1Z5hHkMztGjHD2hDwP1iGqMOiC9g+OFa0LInwauE53yPmRRzL2Br/Lf NgNCytpLmld7dFAEv7IO1dCbNwlcICM= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org