$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: aR8mA6ki46iXGbbMqVn3jmM/F2mq3EBHXZNJozdhy0M= Subject key identifier: 29:F8:68:58:3F:D6:4F:DD:28:33:73:C3:33:60:49:33:C2:30:FC:C0 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285847E78F5C45055C0056E3EFC028 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:5c:45:05:5c:00:56:e3:ef:c0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=53ec3ae9-31f6-4194-b7dd-139217916d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:39:77:f5:0b:62:d3:e2:05:dc:e6:30:b4: 3b:a4:32:d2:08:9c:df:d5:2b:43:7e:ea:d4:11:ab: 7b:ad:5a:64:fa:1a:1b:68:4e:c1:2c:21:95:a7:29: 49:cf:5e:84:a1:00:6a:a7:fc:1e:35:ae:b1:56:cc: 16:f6:3a:66:73:51:d2:ac:0c:1a:f4:96:9c:27:ee: e4:a2:9d:62:01:60:f5:c0:14:93:9f:26:b0:06:aa: af:16:4b:d7:ae:2f:18:00:95:7b:1b:ba:64:3c:d4: c7:56:e9:ac:6e:29:7c:11:1e:de:b1:5f:63:88:54: dd:7c:a4:0d:ef:5c:a2:8c:8b:eb:31:bf:30:34:76: f3:4b:8e:ec:92:41:85:34:3f:c9:2d:86:9c:f9:fe: b4:a6:b4:27:b0:bc:45:7b:5d:6f:94:50:2d:89:00: 18:78:10:7c:2c:aa:f3:4b:cf:50:43:94:6c:8b:b4: cb:c3:6d:aa:c3:f5:56:6c:24:dc:8b:d1:eb:25:02: 65:7e:a7:f8:d6:85:dd:5a:39:c8:65:fd:07:44:4c: 34:93:c0:66:98:ef:6f:f4:8b:44:87:ef:36:68:a1: be:d2:92:1a:fb:89:ac:9c:20:24:a8:0e:3f:35:e0: 7c:38:ec:46:de:2f:e0:c7:43:cd:a7:b8:00:5f:23: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F8:68:58:3F:D6:4F:DD:28:33:73:C3:33:60:49:33:C2:30:FC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:75:5c:ea:25:ce:b6:11:1d:d6:bf:9a:9c:90:4b:88:cd:56: 0a:e4:af:d0:af:00:55:41:5e:c4:c7:16:0c:33:63:6a:d2:b0: 60:1f:a7:d6:d5:7f:a2:3d:49:31:98:d9:1b:71:89:cc:4d:c2: 0a:86:67:74:39:d0:51:d7:0d:21:5d:c1:93:80:60:40:a1:27: 9b:ae:90:a4:a4:b6:3d:49:32:d9:5a:9a:0a:30:a4:86:9f:9b: 8f:7d:d1:c5:69:92:ef:f6:0c:42:62:7b:e3:ad:75:7e:c1:fe: 4a:f5:7e:93:f7:48:2d:77:33:0e:6d:3a:92:ce:2e:d1:e6:91: 40:2b:e4:67:b5:ef:5b:eb:34:4f:62:c9:4e:8e:06:55:80:f4: 7d:35:2b:40:5a:e8:b9:29:9f:da:02:34:a1:20:c9:0a:b8:48: eb:d7:40:1a:32:2d:1c:d2:8e:79:41:ed:ab:62:58:22:77:57: 3a:db:1d:8a:17:77:3a:46:20:c8:70:f7:fd:14:5f:a5:60:d0: f3:e3:76:28:c0:a2:cc:9f:9e:34:17:86:c5:db:d6:2f:ed:05: ff:4d:e9:dd:ce:dc:46:19:55:e5:69:2a:65:5f:e6:ee:57:3f: e6:98:fa:51:c3:1d:7c:5d:40:6a:83:d4:90:79:1e:2a:79:45: e1:2b:05:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1xFBVwAVuPvwCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk NTNlYzNhZTktMzFmNi00MTk0LWI3ZGQtMTM5MjE3OTE2ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPM5d/ULYtPiBdzmMLQ7pDLSCJzf1StDfurU Eat7rVpk+hobaE7BLCGVpylJz16EoQBqp/weNa6xVswW9jpmc1HSrAwa9JacJ+7k op1iAWD1wBSTnyawBqqvFkvXri8YAJV7G7pkPNTHVumsbil8ER7esV9jiFTdfKQN 71yijIvrMb8wNHbzS47skkGFND/JLYac+f60prQnsLxFe11vlFAtiQAYeBB8LKrz S89QQ5Rsi7TLw22qw/VWbCTci9HrJQJlfqf41oXdWjnIZf0HREw0k8BmmO9v9ItE h+82aKG+0pIa+4msnCAkqA4/NeB8OOxG3i/gx0PNp7gAXyML9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn4aFg/1k/dKDNzwzNgSTPCMPzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd1XOolzrYRHda/mpyQS4jNVgrkr9CvAFVBXsTHFgwzY2rSsGAfp9bV f6I9STGY2RtxicxNwgqGZ3Q50FHXDSFdwZOAYEChJ5uukKSktj1JMtlamgowpIaf m4990cVpku/2DEJie+OtdX7B/kr1fpP3SC13Mw5tOpLOLtHmkUAr5Ge171vrNE9i yU6OBlWA9H01K0Ba6Lkpn9oCNKEgyQq4SOvXQBoyLRzSjnlB7atiWCJ3VzrbHYoX dzpGIMhw9/0UX6Vg0PPjdijAosyfnjQXhsXb1i/tBf9N6d3O3EYZVeVpKmVf5u5X P+aY+lHDHXxdQGqD1JB5Hip5ReErBZ8= -----END CERTIFICATE-----Generated at Sat Nov 23 18:54:06 2024 by rpki-client on console-fra.rpki-client.org