$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa File: 10f72b7c-8477-34d9-84e6-673dfd0817f0.roa (raw, json) Hash identifier: LQ+MMNk7VTrtoqujMHvCYssTQC3BZIL9eupUiFt3/M4= Subject key identifier: 73:AA:79:BF:BF:3F:F0:7D:B2:CC:0F:FF:FA:FC:23:12:99:09:8D:A0 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584746EB5C3A87A548059FF4A400 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa Signing time: Fri 20 Sep 2024 13:00:42 +0000 ROA not before: Fri 20 Sep 2024 13:00:42 +0000 ROA not after: Thu 19 Dec 2024 14:00:42 +0000 asID: 5744 IP address blocks: 151.207.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:46:eb:5c:3a:87:a5:48:05:9f:f4:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Sep 20 13:00:42 2024 GMT Not After : Dec 19 14:00:42 2024 GMT Subject: CN=b96e3e4d-cccd-43e6-b899-b47dfac5acd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ee:c1:17:d4:e5:0c:89:48:02:1c:c0:0d:51: d7:bb:21:bb:d4:23:7d:0a:ee:06:22:1f:58:30:b7: 83:43:6f:67:6a:49:43:40:fe:2b:d6:ce:e2:d8:60: 0a:64:34:f6:0f:a4:80:40:4b:8e:76:98:6f:4e:58: cc:82:05:20:0a:11:fe:95:df:59:19:62:8e:46:87: a8:31:05:9c:d1:4d:0a:76:23:3e:be:7b:a0:22:10: 58:01:30:be:51:87:30:63:cb:2c:df:a8:3b:2d:06: 91:55:cb:0a:1b:85:46:48:4b:9f:20:ac:79:ec:15: 20:19:ac:63:c5:18:44:45:d0:60:80:82:d4:f6:99: bc:34:61:cd:5c:eb:d0:15:e8:3c:73:2b:32:48:0e: 26:c6:f8:de:99:45:fc:9b:72:7e:c9:8d:1c:ba:d7: 75:2c:d9:bd:d0:62:28:04:20:10:03:04:25:0d:a0: f1:fc:f2:b6:13:d5:0a:24:73:47:0f:34:aa:61:1a: c3:b0:5b:ca:b2:4c:04:3e:9c:b7:d0:0a:e8:c6:9c: 46:34:2c:4d:13:0d:c3:02:b5:fa:82:a4:d7:4b:88: 65:06:83:50:fb:f3:c1:09:68:30:1c:dd:80:37:07: b4:66:07:73:1e:66:28:f7:56:de:bd:23:ae:93:25: b3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:79:BF:BF:3F:F0:7D:B2:CC:0F:FF:FA:FC:23:12:99:09:8D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fd:28:80:74:77:bc:66:6c:75:17:33:c4:eb:28:8a:63:e4: 7f:cc:c4:24:27:cd:e3:7b:0b:fa:bb:e1:19:59:7c:2e:a7:2b: ac:1d:c4:6b:60:16:19:b5:a3:80:23:50:7e:d2:86:f6:52:da: 38:70:bf:93:93:be:bd:f0:17:9d:61:c3:36:89:3d:fb:7b:03: b8:00:8c:c1:4a:44:19:6b:27:53:2c:14:81:b9:02:a7:7d:ed: 38:5f:99:ea:e0:72:de:2d:bb:3c:e2:87:8c:fe:25:5a:24:f4: 12:5d:33:ae:88:0e:8c:bf:9f:e7:ef:af:9c:99:19:42:bb:86: 9e:9c:73:cb:34:23:8a:90:b1:78:ef:35:23:80:2b:dc:6b:aa: 41:81:17:80:99:b6:a9:d8:08:47:60:97:dd:05:57:49:28:e9: 1e:e2:28:c3:39:68:68:3b:8e:68:6a:fe:3d:11:c2:fc:78:a5: 61:31:26:dd:3e:ed:3a:88:df:be:0e:53:57:3d:ec:36:48:d0: 2a:c9:f0:06:1d:2f:8a:be:bb:21:05:30:15:95:29:af:8a:9a: ad:e5:21:92:f0:89:db:58:ca:12:ee:a9:4f:50:42:e8:a4:8f: e3:ff:69:91:c1:14:78:54:56:da:41:54:41:50:3a:cd:76:0b: 87:11:bd:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdG61w6h6VIBZ/0pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI0MDkyMDEzMDA0MloXDTI0MTIxOTE0MDA0MlowLzEtMCsGA1UEAxMk Yjk2ZTNlNGQtY2NjZC00M2U2LWI4OTktYjQ3ZGZhYzVhY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge7BF9TlDIlIAhzADVHXuyG71CN9Cu4GIh9Y MLeDQ29naklDQP4r1s7i2GAKZDT2D6SAQEuOdphvTljMggUgChH+ld9ZGWKORoeo MQWc0U0KdiM+vnugIhBYATC+UYcwY8ss36g7LQaRVcsKG4VGSEufIKx57BUgGaxj xRhERdBggILU9pm8NGHNXOvQFeg8cysySA4mxvjemUX8m3J+yY0cutd1LNm90GIo BCAQAwQlDaDx/PK2E9UKJHNHDzSqYRrDsFvKskwEPpy30AroxpxGNCxNEw3DArX6 gqTXS4hlBoNQ+/PBCWgwHN2ANwe0ZgdzHmYo91bevSOukyWzfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOqeb+/P/B9sswP//r8IxKZCY2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMTBmNzJiN2MtODQ3Ny0z NGQ5LTg0ZTYtNjczZGZkMDgxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL9KIB0d7xmbHUXM8TrKIpj5H/MxCQnzeN7C/q74RlZfC6nK6wdxGtg Fhm1o4AjUH7ShvZS2jhwv5OTvr3wF51hwzaJPft7A7gAjMFKRBlrJ1MsFIG5Aqd9 7Thfmergct4tuzzih4z+JVok9BJdM66IDoy/n+fvr5yZGUK7hp6cc8s0I4qQsXjv NSOAK9xrqkGBF4CZtqnYCEdgl90FV0ko6R7iKMM5aGg7jmhq/j0Rwvx4pWExJt0+ 7TqI374OU1c97DZI0CrJ8AYdL4q+uyEFMBWVKa+Kmq3lIZLwidtYyhLuqU9QQuik j+P/aZHBFHhUVtpBVEFQOs12C4cRve0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:22:08 2024 by rpki-client on console-ams.rpki-client.org