$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: /edDV0SgUfyermHzVEMq7WaW8rkNupbOVqSQfXkkbTE= Subject key identifier: 7A:7E:9B:4A:B3:16:E9:66:9A:41:EF:3C:5C:1A:BB:50:45:73:86:FB Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F432858471D0B181EBD68810CCCB08F00 Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Thu 05 Sep 2024 13:00:41 +0000 ROA not before: Thu 05 Sep 2024 13:00:41 +0000 ROA not after: Wed 04 Dec 2024 14:00:41 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.12.208.0/24 maxlen: 24 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 204.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1d:0b:18:1e:bd:68:81:0c:cc:b0:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: Sep 5 13:00:41 2024 GMT Not After : Dec 4 14:00:41 2024 GMT Subject: CN=76446fce-d4a9-491d-bece-254911916039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:5d:02:35:49:17:4c:cf:95:ba:b4:41:b1: 25:2a:0e:3f:0b:c6:95:86:c6:92:88:9e:88:0e:99: 39:97:02:69:a9:3f:ca:14:ad:bd:16:ce:b1:58:b0: 30:6b:30:b4:7d:42:1e:ee:39:6f:a5:5d:27:60:95: d9:e7:03:c4:9c:62:6c:19:8e:10:4c:b5:8c:e4:2e: 23:aa:a0:76:09:0c:64:33:5c:cf:6a:f0:0a:d6:4b: f9:cd:62:10:e7:61:f2:43:99:b9:2c:4e:e3:2b:1d: ed:b8:ea:88:fc:70:4c:3c:e7:9e:c5:d9:ef:07:7e: dd:f2:b3:38:ea:97:d5:28:10:b1:85:2f:d0:e0:b3: a4:e4:06:60:db:0d:3a:6b:d2:e8:2c:fd:ed:dd:3b: e0:8b:dc:3e:4b:73:50:0d:3f:ee:6c:f3:00:94:f4: b3:04:44:f5:f2:2c:69:1f:94:32:d3:64:e9:e5:e2: 01:4a:ae:fb:a1:f3:a8:7b:65:02:92:3f:a2:02:17: 9b:6d:cc:51:5c:e5:33:c2:94:ac:c4:33:ff:5e:3f: 35:87:51:36:49:a6:6d:b7:b9:40:b8:3f:48:7c:16: fe:8f:1b:fe:a6:67:90:51:83:1a:3d:fe:43:e9:2a: 90:2d:d5:ea:50:b2:ae:45:05:eb:93:2d:c9:ff:d5: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7E:9B:4A:B3:16:E9:66:9A:41:EF:3C:5C:1A:BB:50:45:73:86:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3e:87:8f:19:3a:ac:76:ea:d9:1a:54:b7:e1:0f:93:63:9c: 58:61:8f:cb:20:cf:36:b9:28:6a:54:c1:8c:17:b5:c0:b3:51: 6d:91:99:55:d1:9f:44:d5:21:9d:06:9e:35:48:df:6a:ea:a5: e6:2e:74:35:5d:6e:ed:74:f2:9f:a4:ce:2c:45:05:94:52:ca: d5:76:61:83:b1:f8:b5:30:b7:3f:57:ce:17:e0:ac:8f:d8:10: 04:df:c3:80:b3:bc:ca:6e:f0:a5:1b:0c:2c:e3:5b:36:aa:76: c0:79:71:86:fc:bd:57:21:27:5a:77:5a:c4:09:aa:5a:89:55: 1d:44:a3:83:a6:7b:98:05:8a:be:3f:45:af:6e:29:dc:9e:76: 27:91:b5:94:97:89:25:af:0d:97:12:d6:6f:d7:3e:67:41:3f: 94:26:35:ad:68:45:46:2f:41:71:b9:3b:c6:e7:51:2d:b5:f1: f5:d2:18:c4:7a:e6:10:7b:72:56:ed:8a:a4:f4:79:10:f4:d0: d7:86:15:f2:e1:dd:e0:f5:f1:fe:6f:55:97:5e:66:07:e6:74: 31:b8:cf:92:15:f0:1c:b9:9b:68:c7:dd:e0:47:01:5d:11:de: 00:03:d9:33:47:bc:23:16:ec:da:0e:b6:5b:cc:e4:48:25:3d: 06:5e:88:01 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWEcdCxgevWiBDMywjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI0MDkwNTEzMDA0MVoXDTI0MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NzY0NDZmY2UtZDRhOS00OTFkLWJlY2UtMjU0OTExOTE2MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWFdAjVJF0zPlbq0QbElKg4/C8aVhsaSiJ6I Dpk5lwJpqT/KFK29Fs6xWLAwazC0fUIe7jlvpV0nYJXZ5wPEnGJsGY4QTLWM5C4j qqB2CQxkM1zPavAK1kv5zWIQ52HyQ5m5LE7jKx3tuOqI/HBMPOeexdnvB37d8rM4 6pfVKBCxhS/Q4LOk5AZg2w06a9LoLP3t3Tvgi9w+S3NQDT/ubPMAlPSzBET18ixp H5Qy02Tp5eIBSq77ofOoe2UCkj+iAhebbcxRXOUzwpSsxDP/Xj81h1E2SaZtt7lA uD9IfBb+jxv+pmeQUYMaPf5D6SqQLdXqULKuRQXrky3J/9WrRQIDAQABo4IDgDCC A3wwHQYDVR0OBBYEFHp+m0qzFulmmkHvPFwau1BFc4b7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxAwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADADNADBADANEYDBADAQV8DAwDMeTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAoPoePGTqsdurZGlS34Q+TY5xYYY/LIM82uShqVMGMF7XAs1FtkZlV0Z9E1SGd Bp41SN9q6qXmLnQ1XW7tdPKfpM4sRQWUUsrVdmGDsfi1MLc/V84X4KyP2BAE38OA s7zKbvClGwws41s2qnbAeXGG/L1XISdad1rECapaiVUdRKODpnuYBYq+P0Wvbinc nnYnkbWUl4klrw2XEtZv1z5nQT+UJjWtaEVGL0FxuTvG51EttfH10hjEeuYQe3JW 7Yqk9HkQ9NDXhhXy4d3g9fH+b1WXXmYH5nQxuM+SFfAcuZtox93gRwFdEd4AA9kz R7wjFuzaDrZbzORIJT0GXogB -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org