$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa File: 1b31f61a-098e-37a7-8531-9a5ab36e5749.roa (raw, json) Hash identifier: dGXu0LgEtZs3l2GfqQPYGEf1SUcWsUbHwXnFtKoZKWw= Subject key identifier: 2E:A0:31:54:3C:D5:37:6C:E1:34:14:1B:4B:B1:1E:EA:4D:FD:0D:95 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F43285847F584F170A663E31779A85200 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa Signing time: Fri 22 Nov 2024 02:00:40 +0000 ROA not before: Fri 22 Nov 2024 02:00:40 +0000 ROA not after: Thu 20 Feb 2025 02:00:40 +0000 asID: 204928 IP address blocks: 128.254.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:84:f1:70:a6:63:e3:17:79:a8:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Nov 22 02:00:40 2024 GMT Not After : Feb 20 02:00:40 2025 GMT Subject: CN=c326a9eb-dca7-4518-80df-6a7465779d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:c8:8a:fa:25:c9:ab:1d:26:b3:13:e7:93: a0:3f:a2:3f:36:7c:f9:2c:ac:a7:17:e7:0f:1a:62: 4f:6e:51:d0:59:37:60:dd:00:1b:b1:8a:58:5c:8d: f7:37:67:e3:1f:d8:2d:8d:0c:39:7d:6a:ea:2b:d5: fe:12:31:e3:67:3a:73:56:d3:f4:5e:4a:1a:06:7d: 63:c4:77:38:54:5e:4a:0d:d7:a3:20:6a:d9:4d:78: b3:e0:2e:7a:ea:76:7b:ad:9d:8f:03:6d:f9:22:f4: 43:f8:44:b2:c7:0b:a3:1a:25:a3:1d:ea:70:06:dc: 82:16:17:aa:ad:05:89:af:34:c2:9a:36:01:9c:26: 0e:0e:62:f5:64:4c:d2:b0:66:c8:33:f1:71:73:02: 21:25:72:d6:49:fa:04:44:6b:3b:20:ae:1e:46:73: d3:e2:6f:8e:4f:1b:49:2a:5d:9f:bc:50:3b:16:e0: 38:fb:13:c8:9d:3d:a8:47:2c:28:f9:a3:6d:a8:05: af:23:64:82:3b:b8:83:37:91:55:e4:e5:4d:05:33: a7:6e:d1:d9:7f:05:45:04:41:03:49:28:de:33:f7: 95:15:bd:d6:33:3e:30:a1:f1:66:86:d0:60:64:28: 07:8e:d5:fd:76:62:95:6f:3c:2e:e4:4d:83:83:89: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:31:54:3C:D5:37:6C:E1:34:14:1B:4B:B1:1E:EA:4D:FD:0D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/1b31f61a-098e-37a7-8531-9a5ab36e5749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:c1:a7:eb:32:0d:84:df:22:1d:8f:c1:83:9f:5a:a3:60:f9: b9:5f:8a:92:3a:3b:5c:aa:2f:8d:d9:8e:d4:ae:5c:66:ac:b9: ed:67:30:d4:e3:b7:60:79:d1:ca:49:1c:6a:03:df:4f:4d:3b: e2:b4:fa:6c:ed:f1:6a:32:f1:b3:18:9e:41:dd:f9:bf:6b:88: da:b0:47:fd:76:3b:57:54:26:4d:48:aa:a1:e6:ba:cc:c6:54: ae:37:8c:a1:54:a1:de:e3:91:28:d0:d8:0d:07:35:c9:a6:9f: 30:4c:df:a9:29:0e:73:22:46:14:dd:af:7c:27:92:41:77:b2: 99:03:7b:56:57:83:e3:ba:2b:50:cd:b2:29:dd:4d:0a:89:a6: e3:20:0f:8d:c9:78:64:e8:64:d3:ab:30:39:43:2f:e7:83:72: 6d:b6:6d:a3:d8:34:ba:e7:aa:b6:00:a0:46:13:f8:32:57:da: f0:82:21:f6:45:70:49:a5:51:56:66:56:e5:d7:37:a6:79:ed: 94:e1:42:37:6e:55:52:7a:ec:fe:79:b4:8e:0a:96:4d:bc:93: 38:8c:da:0f:ce:30:be:ca:b1:a8:98:01:4b:62:fd:43:6d:02: 27:48:0a:85:10:89:b1:c1:22:00:8e:95:4f:40:10:cd:77:f9: 16:98:be:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hPFwpmPjF3moUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk YzMyNmE5ZWItZGNhNy00NTE4LTgwZGYtNmE3NDY1Nzc5ZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBnIivolyasdJrMT55OgP6I/Nnz5LKynF+cP GmJPblHQWTdg3QAbsYpYXI33N2fjH9gtjQw5fWrqK9X+EjHjZzpzVtP0XkoaBn1j xHc4VF5KDdejIGrZTXiz4C566nZ7rZ2PA235IvRD+ESyxwujGiWjHepwBtyCFheq rQWJrzTCmjYBnCYODmL1ZEzSsGbIM/FxcwIhJXLWSfoERGs7IK4eRnPT4m+OTxtJ Kl2fvFA7FuA4+xPInT2oRywo+aNtqAWvI2SCO7iDN5FV5OVNBTOnbtHZfwVFBEED SSjeM/eVFb3WMz4wofFmhtBgZCgHjtX9dmKVbzwu5E2Dg4k3OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6gMVQ81Tds4TQUG0uxHupN/Q2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMWIzMWY2MWEtMDk4ZS0z N2E3LTg1MzEtOWE1YWIzNmU1NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN/Bp+syDYTfIh2PwYOfWqNg+blfipI6O1yqL43ZjtSuXGasue1nMNTj t2B50cpJHGoD309NO+K0+mzt8Woy8bMYnkHd+b9riNqwR/12O1dUJk1IqqHmuszG VK43jKFUod7jkSjQ2A0HNcmmnzBM36kpDnMiRhTdr3wnkkF3spkDe1ZXg+O6K1DN sindTQqJpuMgD43JeGToZNOrMDlDL+eDcm22baPYNLrnqrYAoEYT+DJX2vCCIfZF cEmlUVZmVuXXN6Z57ZThQjduVVJ67P55tI4Klk28kziM2g/OML7KsaiYAUti/UNt AidICoUQibHBIgCOlU9AEM13+RaYvkc= -----END CERTIFICATE-----Generated at Wed Nov 27 07:44:32 2024 by rpki-client on console-ams.rpki-client.org