$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa File: 4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa (raw, json) Hash identifier: Wm6/ZeZ/kHs/4J0dophF0PIXBDKeR3IjE+GkqO/iXN8= Subject key identifier: 85:92:F6:AE:EF:5A:CC:C9:95:C0:55:01:20:A6:A8:BA:BF:02:99:AC Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285847362B3ACF4F00BA8E3C2B0840 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 399381 IP address blocks: 131.201.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:3a:cf:4f:00:ba:8e:3c:2b:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=40fff28e-f8b3-42c1-a981-9cab315a5e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:a7:b0:80:6c:87:98:41:e6:e8:33:40:1d: 9b:03:42:f1:08:12:f7:33:45:03:81:6d:43:a1:0c: 8e:14:b2:c6:1f:10:9c:38:7a:4c:99:45:e9:83:d8: b5:2b:7b:e5:22:8a:d5:1c:75:48:c2:aa:7b:68:4e: 13:ba:75:97:31:a5:02:6e:0b:b6:8e:60:fd:7b:a9: d4:3b:c7:46:9b:fb:47:7c:63:1b:08:58:64:a6:c5: 2b:08:90:37:a5:b0:b0:dc:21:e9:82:27:4b:4a:9f: 52:9a:59:3b:c0:43:3b:e0:15:16:b9:4e:02:9a:db: aa:87:80:1d:27:5b:7d:da:39:80:1c:90:b7:50:3d: c9:fe:df:8d:a8:a6:00:53:82:a7:63:78:9b:2c:0c: 31:08:ee:c5:8e:f4:cb:bd:8e:31:fa:e1:49:43:73: a5:97:6a:84:49:19:cf:76:8a:61:b3:6d:f9:c4:b0: 32:d8:b4:5c:02:1b:03:72:6b:02:57:66:29:c5:ab: 2e:5f:02:8f:09:1b:b3:37:1a:6d:fb:21:2e:31:8c: 98:23:cf:1b:61:2d:32:b0:e2:71:bf:02:b1:80:b5: fe:a6:b7:0c:9b:8c:57:36:2b:b8:b8:45:67:d5:37: 85:52:24:ac:2d:2e:bb:3c:8f:0f:1d:73:d4:27:56: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:F6:AE:EF:5A:CC:C9:95:C0:55:01:20:A6:A8:BA:BF:02:99:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b9:50:7c:c7:5a:8c:ad:d9:45:c8:ab:42:a0:a6:fc:59:a6: c1:ea:7b:fb:3c:5b:96:96:b9:fc:1a:44:9e:20:a2:60:24:45: b6:1e:97:88:2d:13:fb:60:cb:56:0b:2d:a2:9f:4e:9d:41:23: 81:97:f2:28:80:ce:4d:98:b3:a7:cd:64:d3:fd:96:70:79:1f: 50:28:c8:92:56:92:24:e3:73:14:74:23:12:c3:c3:30:26:f3: 3b:96:34:32:97:3b:c7:53:81:7b:70:45:94:7f:27:65:68:c3: 69:0c:3a:b4:72:57:e2:f4:79:92:e1:03:8a:ed:89:97:ff:8d: 87:15:1b:87:52:6b:a5:34:c9:38:a0:e5:16:55:34:09:cd:ee: 71:47:9c:d6:c0:cd:1e:0c:4f:8e:59:63:a4:a6:cd:db:01:f3: ef:e7:bc:39:c6:b3:7f:38:de:89:7a:bf:5f:72:64:c0:9a:4b: 65:6a:83:c2:93:86:dc:9a:9a:18:f5:a0:3f:ac:51:fa:18:6c: 65:7a:e5:6a:75:8c:7c:4a:42:db:57:56:83:e7:69:78:02:19: be:9c:a7:d4:bc:33:b3:19:d4:59:e5:03:07:22:85:b3:1e:23: 6d:16:56:d0:af:b7:36:a7:90:00:cc:3c:c7:e7:93:5a:b6:06: 86:89:e3:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2KzrPTwC6jjwrCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk NDBmZmYyOGUtZjhiMy00MmMxLWE5ODEtOWNhYjMxNWE1ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YensIBsh5hB5ugzQB2bA0LxCBL3M0UDgW1D oQyOFLLGHxCcOHpMmUXpg9i1K3vlIorVHHVIwqp7aE4TunWXMaUCbgu2jmD9e6nU O8dGm/tHfGMbCFhkpsUrCJA3pbCw3CHpgidLSp9Smlk7wEM74BUWuU4Cmtuqh4Ad J1t92jmAHJC3UD3J/t+NqKYAU4KnY3ibLAwxCO7FjvTLvY4x+uFJQ3Oll2qESRnP dophs235xLAy2LRcAhsDcmsCV2YpxasuXwKPCRuzNxpt+yEuMYyYI88bYS0ysOJx vwKxgLX+prcMm4xXNiu4uEVn1TeFUiSsLS67PI8PHXPUJ1ZiRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWS9q7vWszJlcBVASCmqLq/ApmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNGQ2MWY1ZDEtY2UzZi0z NzNkLWExNzYtMTJlOGNlZDE4NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS5UHzHWoyt2UXIq0KgpvxZpsHqe/s8W5aWufwaRJ4gomAkRbYel4gt E/tgy1YLLaKfTp1BI4GX8iiAzk2Ys6fNZNP9lnB5H1AoyJJWkiTjcxR0IxLDwzAm 8zuWNDKXO8dTgXtwRZR/J2Vow2kMOrRyV+L0eZLhA4rtiZf/jYcVG4dSa6U0yTig 5RZVNAnN7nFHnNbAzR4MT45ZY6SmzdsB8+/nvDnGs3843ol6v19yZMCaS2Vqg8KT htyamhj1oD+sUfoYbGV65Wp1jHxKQttXVoPnaXgCGb6cp9S8M7MZ1FnlAwcihbMe I20WVtCvtzankADMPMfnk1q2BoaJ4wA= -----END CERTIFICATE-----Generated at Fri Nov 22 17:31:27 2024 by rpki-client on console-ams.rpki-client.org