$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa File: 8a8acdda-9292-36a3-b876-4a2667d678bc.roa (raw, json) Hash identifier: 52UHD2XryHEN1FUgjnKUcAHiqDx9oT4xseLwTp24BP8= Subject key identifier: C3:20:25:43:5C:C3:40:04:F4:18:9D:80:5E:4C:54:47:FD:CF:E4:A5 Certificate issuer: /CN=0db67e40-561b-4114-ad6b-0716593573be Certificate serial: 010D0C9F43285847BEF6CCF8610A61572760F900 Authority key identifier: 35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 54702 IP address blocks: 128.254.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:cc:f8:61:0a:61:57:27:60:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67e40-561b-4114-ad6b-0716593573be Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=ae4c78b1-0ed9-46e5-bca5-8f71d85d49b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:b1:a8:81:ec:e8:37:40:4e:eb:6c:f3:03: 46:9c:58:9b:1f:50:89:5a:af:b0:45:08:fc:f0:50: 9f:20:f5:57:b0:45:a1:50:03:a8:6e:b2:34:47:2b: a6:3f:14:fc:07:dd:e2:3e:74:a4:78:3e:c1:7a:a6: 82:2f:00:7b:2a:35:b0:56:ee:35:c6:18:2c:d9:d4: 1e:b6:f5:5d:b6:f5:6a:a5:c3:72:8c:9a:f9:65:88: fd:d4:94:29:c7:d5:0b:72:06:19:2d:3d:a1:e0:96: 57:dc:32:de:fb:ff:32:5e:1b:46:6b:68:33:c9:fc: d7:c1:a9:a1:71:28:95:cf:d7:0e:85:3e:7a:79:55: bc:e0:8b:6d:14:e0:50:6d:87:9c:af:c3:2b:a4:9b: 89:02:cb:e0:48:4a:8c:5d:27:bf:a3:aa:ae:49:33: b1:8b:1a:cd:72:e2:eb:88:91:ba:37:bf:32:8b:ea: 8a:ef:b3:e2:1c:b2:21:31:d5:6e:fd:b2:13:8e:1d: e7:1b:e1:96:00:30:45:54:91:27:88:36:ad:79:f7: a5:2e:8a:2e:c3:60:cb:f3:d0:23:e4:8d:05:dc:d5: 14:86:9c:2e:ef:d5:ab:06:2e:d3:86:6f:b4:2a:89: 95:ef:a4:07:6a:cb:7b:88:99:d7:45:93:97:29:76: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:20:25:43:5C:C3:40:04:F4:18:9D:80:5E:4C:54:47:FD:CF:E4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/8a8acdda-9292-36a3-b876-4a2667d678bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.crl X509v3 Authority Key Identifier: keyid:35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer sbgp-ipAddrBlock: critical IPv4: 128.254.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:ac:cf:8a:5a:52:a7:c9:1f:fb:e6:cd:2f:e8:26:62:3f:73: 68:a1:61:51:e5:08:bf:16:d4:66:cc:01:b4:f4:87:54:ad:87: 95:85:ed:f1:32:b6:90:25:51:59:d3:b8:cd:08:5b:54:23:7e: 8e:03:40:d8:32:67:2a:cf:b4:fb:e3:2a:ce:f7:e7:12:39:f5: 6b:d2:9f:cf:3e:8a:a4:e7:44:a2:ea:42:ff:eb:46:bf:2f:ee: 27:a4:b8:6c:e1:a6:48:af:53:48:ae:a5:45:ef:24:ca:53:13: ee:2f:e2:72:d5:9d:4b:e1:2e:dc:ae:6b:31:75:8e:37:d3:a3: 60:20:99:dd:e8:dc:88:93:79:af:da:23:63:65:19:1b:f8:e4: 1a:d7:f1:14:e9:15:cb:53:dd:ac:d9:9a:4c:bf:5f:81:b3:49: 42:89:78:2a:26:05:22:d4:fc:b3:fd:74:8a:88:8f:51:7b:8d: 7a:7c:58:9d:4f:46:a2:f1:c3:c1:cc:9a:af:fa:9f:84:0a:1d: ae:a5:68:41:4e:ad:06:01:b9:f9:44:46:fd:de:2a:5c:d0:db: e9:ac:1b:46:d7:49:a3:22:63:66:c8:73:a8:0b:de:3f:d7:23: b6:67:31:e0:f2:f5:7f:a4:7c:d3:2f:d6:c4:72:a2:96:33:6f: 97:8d:ff:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9sz4YQphVydg+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiNjdlNDAtNTYxYi00MTE0LWFkNmItMDcxNjU5MzU3 M2JlMB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk YWU0Yzc4YjEtMGVkOS00NmU1LWJjYTUtOGY3MWQ4NWQ0OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxexqIHs6DdATuts8wNGnFibH1CJWq+wRQj8 8FCfIPVXsEWhUAOobrI0RyumPxT8B93iPnSkeD7BeqaCLwB7KjWwVu41xhgs2dQe tvVdtvVqpcNyjJr5ZYj91JQpx9ULcgYZLT2h4JZX3DLe+/8yXhtGa2gzyfzXwamh cSiVz9cOhT56eVW84IttFOBQbYecr8MrpJuJAsvgSEqMXSe/o6quSTOxixrNcuLr iJG6N78yi+qK77PiHLIhMdVu/bITjh3nG+GWADBFVJEniDatefelLoouw2DL89Aj 5I0F3NUUhpwu79WrBi7Thm+0KomV76QHast7iJnXRZOXKXak7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMgJUNcw0AE9BidgF5MVEf9z+SlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2 N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2NTkzNTczYmUvOGE4YWNkZGEtOTI5Mi0z NmEzLWI4NzYtNGEyNjY3ZDY3OGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGRiNjdlNDAtNTYxYi00MTE0LWFk NmItMDcxNjU5MzU3M2JlLzBkYjY3ZTQwLTU2MWItNDExNC1hZDZiLTA3MTY1OTM1 NzNiZS5jcmwwHwYDVR0jBBgwFoAUNWXKcOKldVx5Po7/8RyeLWOoR9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZGI2N2U0MC01NjFiLTQxMTQtYWQ2Yi0wNzE2 NTkzNTczYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOWsz4paUqfJH/vmzS/oJmI/c2ihYVHlCL8W1GbMAbT0h1Sth5WF7fEy tpAlUVnTuM0IW1Qjfo4DQNgyZyrPtPvjKs735xI59WvSn88+iqTnRKLqQv/rRr8v 7iekuGzhpkivU0iupUXvJMpTE+4v4nLVnUvhLtyuazF1jjfTo2Agmd3o3IiTea/a I2NlGRv45BrX8RTpFctT3azZmky/X4GzSUKJeComBSLU/LP9dIqIj1F7jXp8WJ1P RqLxw8HMmq/6n4QKHa6laEFOrQYBuflERv3eKlzQ2+msG0bXSaMiY2bIc6gL3j/X I7ZnMeDy9X+kfNMv1sRyopYzb5eN/1Y= -----END CERTIFICATE-----Generated at Mon Nov 25 20:18:35 2024 by rpki-client on console-fra.rpki-client.org