$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa File: ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa (raw, json) Hash identifier: hhhMD4h+JRUvK65RSfkaWzebDCPW3dUxQS8bM9KVSdA= Subject key identifier: B2:59:52:52:9F:14:2C:EA:E0:08:6F:97:6C:03:2D:2C:EA:28:6B:42 Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Certificate serial: 010D0C9F43285847B3CC148E00ACCFFF642C5440 Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 394413 IP address blocks: 159.28.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:14:8e:00:ac:cf:ff:64:2c:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=c0596f5b-e5d8-432d-8b54-220fd0fc1722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:e2:8b:be:45:07:c8:4a:c8:44:41:cd:44: f3:15:12:7b:bd:66:91:62:f1:74:b2:d6:9a:42:3d: e0:7b:2d:d8:53:7a:d3:66:84:9c:ce:1e:60:a6:cd: e6:02:c1:b8:e4:6b:b1:e5:c7:1a:2f:db:da:64:74: 5a:76:7e:bd:8a:c7:fd:32:a4:3e:1e:11:98:44:2c: 19:fa:58:56:77:e9:b4:87:ec:d2:30:1a:f5:57:22: ba:2e:0e:54:c4:47:b8:9b:40:63:b5:1c:cc:d4:41: ee:e5:16:75:30:ab:fc:a2:39:06:ac:38:48:e9:a3: a5:e8:0e:92:df:cb:bb:40:06:9e:a2:c4:90:a4:91: 00:09:c4:e3:ad:81:ff:5d:65:19:8f:c9:4a:d9:21: 48:6c:5b:c1:f9:55:74:20:ab:81:8a:55:37:10:0d: 26:de:d5:0f:69:f5:38:db:28:78:fa:69:c4:e6:1c: 6f:90:c9:ec:6a:d6:af:2c:51:54:9b:5d:48:c0:9d: ce:6c:1d:3f:4f:de:5d:aa:fe:c3:8e:0e:71:a2:92: cb:43:f4:56:30:1a:7d:db:5e:6f:d0:e5:f6:17:b9: 72:61:95:5f:9a:3d:d6:3b:af:44:9e:a3:01:81:18: 03:3b:fa:50:b2:96:09:4b:64:23:47:1c:91:1c:45: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:52:52:9F:14:2C:EA:E0:08:6F:97:6C:03:2D:2C:EA:28:6B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl X509v3 Authority Key Identifier: keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer sbgp-ipAddrBlock: critical IPv4: 159.28.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:67:26:eb:47:ae:9d:bf:12:b6:44:59:eb:c3:4d:e0:10:5d: 6e:43:ea:23:05:7a:72:dd:5d:d2:32:7f:73:19:2d:a9:3f:cb: a3:c6:82:ab:c1:2f:b6:fa:8a:75:d0:a3:d7:6d:a9:29:94:30: cc:be:e0:41:0a:09:43:c8:91:f2:41:df:54:ec:84:c6:c5:70: 8f:b0:2b:a2:fb:9e:37:34:0c:e2:c1:bc:41:c0:69:4f:52:b4: 49:05:f3:91:c7:d8:7f:64:70:94:cc:fb:81:b7:19:64:2b:2e: 67:c9:dc:95:39:c2:35:ab:65:23:5d:05:3c:df:57:60:73:55: 2e:a7:fb:be:7a:76:59:03:8f:6f:0a:2a:b1:13:c9:c7:bb:58: f1:ef:16:80:12:d5:bd:50:21:86:0a:fa:4f:29:66:3c:b3:8c: f5:68:72:13:98:fd:d9:67:5b:ff:32:a2:55:85:83:e7:ba:ee: 35:4a:54:26:23:bf:22:5e:23:aa:4d:5b:07:ec:50:8a:eb:b9: 0d:eb:22:74:f1:d9:7e:7a:50:16:37:d2:d4:a0:46:c2:e5:28: 21:23:11:0e:9c:52:66:47:7a:b7:dd:46:c0:99:b4:a6:00:f0: 69:23:c3:be:7d:ae:55:71:ff:2e:84:d3:52:45:b7:f6:a2:4d: 36:0f:70:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBSOAKzP/2QsVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjMmE2ZTYtOTY4MS00OTMwLTlkODUtMTY3ZWE3ZjYx MWMyMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk YzA1OTZmNWItZTVkOC00MzJkLThiNTQtMjIwZmQwZmMxNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Dii75FB8hKyERBzUTzFRJ7vWaRYvF0staa Qj3gey3YU3rTZoSczh5gps3mAsG45Gux5ccaL9vaZHRadn69isf9MqQ+HhGYRCwZ +lhWd+m0h+zSMBr1VyK6Lg5UxEe4m0BjtRzM1EHu5RZ1MKv8ojkGrDhI6aOl6A6S 38u7QAaeosSQpJEACcTjrYH/XWUZj8lK2SFIbFvB+VV0IKuBilU3EA0m3tUPafU4 2yh4+mnE5hxvkMnsatavLFFUm11IwJ3ObB0/T95dqv7Djg5xopLLQ/RWMBp9215v 0OX2F7lyYZVfmj3WO69EnqMBgRgDO/pQspYJS2QjRxyRHEXkLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJZUlKfFCzq4Ahvl2wDLSzqKGtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80N2My YTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdlYTdmNjExYzIvZWY0MjFkZjktMzRiOC0z YjVlLWE3ZDItYWMxMzQyMzcxN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDdjMmE2ZTYtOTY4MS00OTMwLTlk ODUtMTY3ZWE3ZjYxMWMyLzQ3YzJhNmU2LTk2ODEtNDkzMC05ZDg1LTE2N2VhN2Y2 MTFjMi5jcmwwHwYDVR0jBBgwFoAUCbIebpIwvGaEJvAMx9vFkVqq6SgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80N2MyYTZlNi05NjgxLTQ5MzAtOWQ4NS0xNjdl YTdmNjExYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFnJutHrp2/ErZEWevDTeAQXW5D6iMFenLdXdIyf3MZLak/y6PGgqvB L7b6inXQo9dtqSmUMMy+4EEKCUPIkfJB31TshMbFcI+wK6L7njc0DOLBvEHAaU9S tEkF85HH2H9kcJTM+4G3GWQrLmfJ3JU5wjWrZSNdBTzfV2BzVS6n+756dlkDj28K KrETyce7WPHvFoAS1b1QIYYK+k8pZjyzjPVochOY/dlnW/8yolWFg+e67jVKVCYj vyJeI6pNWwfsUIrruQ3rInTx2X56UBY30tSgRsLlKCEjEQ6cUmZHerfdRsCZtKYA 8Gkjw759rlVx/y6E01JFt/aiTTYPcJw= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org