$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa File: 33cfc89a-77af-32ce-967f-624f38d50607.roa (raw, json) Hash identifier: LgDyeOaHYN3GB2205Ncby9Y9M17z1WPk+9jwRk5ggPI= Subject key identifier: 95:6E:91:A4:0B:D8:F5:2C:3F:A1:EE:22:61:83:18:9A:C0:16:E7:27 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285847362B3AE2507A3A43D3BEDC80 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 399381 IP address blocks: 131.201.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:3a:e2:50:7a:3a:43:d3:be:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=3e52e9ae-f1b0-492c-aed9-665c81d722cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:fd:73:91:95:4b:b5:36:4b:de:e8:63:15: 9c:c2:ee:09:75:bd:3a:ee:ab:71:48:7f:5d:21:c6: a0:2e:63:38:70:56:e0:a2:06:02:26:cb:f3:f3:3b: f3:e4:cf:26:6d:38:c4:75:99:27:d3:ea:84:6f:96: ed:54:ce:4e:28:de:fb:ba:f1:2e:6d:23:df:1c:49: 8f:c6:39:e2:93:0e:9f:c1:76:b0:e9:8a:cb:d5:b9: 62:23:a4:7b:0c:f9:2c:ee:e6:65:bd:9f:2c:04:53: 18:d0:19:39:f8:3a:4f:3c:f3:f7:ca:79:e1:1b:97: 3c:7b:17:fc:8e:94:18:2c:c7:11:c7:34:23:26:9c: 76:29:2f:16:d4:1f:97:63:01:0e:06:55:2a:77:e8: 96:44:1c:94:bb:93:20:be:d7:5c:ea:a3:9f:37:7d: 8f:6f:73:cb:c5:5d:e1:cd:72:38:bb:b2:00:c0:b2: dc:9d:2a:21:80:00:49:33:c6:86:09:94:2b:cf:b4: 7e:85:b8:5f:0e:6a:40:30:1b:25:05:50:44:c5:af: 0d:d6:e1:cf:3d:5b:39:43:a9:ba:49:90:8f:64:a9: 4f:d3:74:b0:73:80:4f:9f:47:22:3b:07:0e:02:45: c6:08:25:04:19:0e:c3:3e:c2:ba:03:34:00:f3:82: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:91:A4:0B:D8:F5:2C:3F:A1:EE:22:61:83:18:9A:C0:16:E7:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:80:0e:e1:9b:19:0a:17:bc:bf:ef:c1:eb:d3:38:d4:77:4f: 71:10:7e:27:c8:0f:fc:88:8b:8b:5a:6a:2e:bd:7f:4a:cd:a7: bb:3b:ec:29:e9:b3:d6:68:bd:95:d3:9e:45:91:39:26:1d:e3: a3:6b:76:c6:19:f9:a2:80:30:cc:50:8d:b9:aa:d4:48:1a:e7: 89:63:ce:5c:30:2c:3b:70:bb:3d:84:ae:f2:22:69:65:44:34: 5b:de:af:fb:e2:0f:e6:f6:f5:50:2d:f3:ca:f8:27:7e:26:90: 34:67:2a:06:94:ed:23:fa:a4:ed:0e:f2:7a:33:d8:ff:a4:1f: ee:6e:42:11:20:0e:3f:db:ee:fe:fd:20:e4:20:f2:62:da:04: 65:80:ca:ca:3a:f2:e9:16:94:e7:9e:5f:6b:88:a4:fa:9d:28: 16:d9:9c:2f:ee:e1:f2:7d:73:c7:44:ee:b2:e7:e7:89:fd:c0: 6e:57:a2:c4:6f:d0:6e:0a:4d:c2:db:91:ab:88:9d:b6:7d:9d: 48:40:fc:45:b7:fc:b7:9a:2e:95:5f:1f:d6:be:d1:8c:88:f1: 51:34:11:0d:2d:c8:fd:07:1a:e3:a3:b2:9b:be:8a:d6:fa:18: fe:7f:3d:ee:6c:62:63:af:c9:5c:ce:82:de:64:9e:4d:8e:f4: ab:65:6d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2KzriUHo6Q9O+3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk M2U1MmU5YWUtZjFiMC00OTJjLWFlZDktNjY1YzgxZDcyMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCP9c5GVS7U2S97oYxWcwu4Jdb067qtxSH9d IcagLmM4cFbgogYCJsvz8zvz5M8mbTjEdZkn0+qEb5btVM5OKN77uvEubSPfHEmP xjnikw6fwXaw6YrL1bliI6R7DPks7uZlvZ8sBFMY0Bk5+DpPPPP3ynnhG5c8exf8 jpQYLMcRxzQjJpx2KS8W1B+XYwEOBlUqd+iWRByUu5Mgvtdc6qOfN32Pb3PLxV3h zXI4u7IAwLLcnSohgABJM8aGCZQrz7R+hbhfDmpAMBslBVBExa8N1uHPPVs5Q6m6 SZCPZKlP03Swc4BPn0ciOwcOAkXGCCUEGQ7DPsK6AzQA84ILiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVukaQL2PUsP6HuImGDGJrAFucnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMzNjZmM4OWEtNzdhZi0z MmNlLTk2N2YtNjI0ZjM4ZDUwNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg8nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOADuGbGQoXvL/vwevTONR3T3EQfifID/yIi4taai69f0rNp7s77Cnp s9ZovZXTnkWROSYd46NrdsYZ+aKAMMxQjbmq1Ega54ljzlwwLDtwuz2ErvIiaWVE NFver/viD+b29VAt88r4J34mkDRnKgaU7SP6pO0O8noz2P+kH+5uQhEgDj/b7v79 IOQg8mLaBGWAyso68ukWlOeeX2uIpPqdKBbZnC/u4fJ9c8dE7rLn54n9wG5XosRv 0G4KTcLbkauInbZ9nUhA/EW3/LeaLpVfH9a+0YyI8VE0EQ0tyP0HGuOjspu+itb6 GP5/Pe5sYmOvyVzOgt5knk2O9KtlbU8= -----END CERTIFICATE-----Generated at Fri Nov 22 21:09:44 2024 by rpki-client on console-fra.rpki-client.org