$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa File: 7970207c-cff5-3b13-b007-d6300f998d3d.roa (raw, json) Hash identifier: R3yU7ToAjLYiYpM4rmiZQ586XDiyChMm9AIIUePjrXg= Subject key identifier: 9B:D4:D5:60:26:76:8B:79:D4:A2:DC:F3:0B:C0:54:4B:78:50:A0:15 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584774FBAC7793834FDCBCD88880 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 54994 IP address blocks: 138.113.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:ac:77:93:83:4f:dc:bc:d8:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=b8a754ff-f558-4fee-b6cc-43dadf9f246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:37:43:71:a7:d1:b5:06:c2:44:a1:af:9c: ed:fc:29:e7:59:dc:70:73:4e:da:f6:14:aa:8a:ff: 8c:f7:09:9a:d9:43:0e:0c:ce:93:3b:26:14:9b:4a: ac:61:34:29:5a:c9:3d:51:7e:1b:5e:a9:08:01:22: b1:5d:a3:7b:b1:40:8b:f4:9c:eb:53:71:31:fe:0c: 56:00:c0:41:52:81:e4:dd:33:2d:6a:9b:3b:04:af: 56:01:c3:57:09:dc:1a:47:68:a9:7b:47:e6:69:c1: 3b:db:18:dc:64:c9:50:93:97:28:01:21:66:2a:d3: 7b:02:e4:44:8e:ca:93:27:6d:b8:bd:22:7f:c6:4c: a3:10:22:f4:8c:5c:32:25:0e:0b:66:79:a7:46:49: 24:59:57:ef:10:d7:5e:73:1b:3b:35:e1:60:4b:e9: 1a:c3:b5:b4:79:96:91:98:2d:03:e4:35:61:cb:99: ef:d2:69:93:a5:fa:24:98:ae:62:34:f0:e5:6a:f5: 0c:bc:fd:38:ed:fb:4f:e1:fc:35:b1:1c:8e:ab:49: ca:90:15:47:80:da:54:94:a7:0e:77:6f:30:8d:80: b3:ee:8e:6c:cb:08:01:cf:4e:2c:23:26:91:01:fc: 47:b7:ed:5e:02:cb:40:c1:a4:c5:36:f0:91:bb:61: 60:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D4:D5:60:26:76:8B:79:D4:A2:DC:F3:0B:C0:54:4B:78:50:A0:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7970207c-cff5-3b13-b007-d6300f998d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fb:ec:66:79:d9:63:31:06:3e:09:8c:38:95:ba:e6:f6:54: a0:00:87:14:7a:ce:15:88:8a:e9:79:2a:5d:89:6d:42:4a:34: 3e:3f:e7:1a:0c:51:b1:6b:a1:19:c1:28:98:60:c7:1d:2e:c9: 55:bd:f3:f1:3f:f3:68:69:ea:60:2e:6a:cc:12:84:9c:cb:1e: 05:d6:44:f2:94:5c:b7:71:0f:65:cf:64:7c:6f:56:70:14:cb: 32:c0:fc:e0:61:e5:85:c9:21:96:f5:01:df:d3:05:f4:d2:9d: 6c:4e:8c:ca:a0:63:bf:66:57:fd:8e:6d:c3:f0:1c:6f:f7:d8: 3d:3a:b9:3d:58:bb:13:b6:c9:ad:f2:44:8b:bd:d9:6a:33:cb: d2:81:f2:90:fe:27:d0:a7:65:a5:75:41:fe:5c:60:a4:11:ae: 16:e9:72:4e:0c:66:5d:28:ba:f3:78:da:d9:03:0b:eb:70:a3: dc:bb:e3:b3:77:81:07:49:c8:69:cc:98:e5:d4:73:57:63:af: a3:36:75:ee:e5:dc:1a:77:9b:68:ac:d4:dc:f1:7a:50:fb:f2: 34:51:3a:44:0b:59:66:47:32:42:34:ab:c8:6b:32:ce:e7:b5: 0e:4f:2b:a7:0b:2f:25:cf:51:af:b0:11:cf:8b:ff:e1:8e:7c: 44:60:f6:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6x3k4NP3LzYiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk YjhhNzU0ZmYtZjU1OC00ZmVlLWI2Y2MtNDNkYWRmOWYyNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7k3Q3Gn0bUGwkShr5zt/CnnWdxwc07a9hSq iv+M9wma2UMODM6TOyYUm0qsYTQpWsk9UX4bXqkIASKxXaN7sUCL9JzrU3Ex/gxW AMBBUoHk3TMtaps7BK9WAcNXCdwaR2ipe0fmacE72xjcZMlQk5coASFmKtN7AuRE jsqTJ224vSJ/xkyjECL0jFwyJQ4LZnmnRkkkWVfvENdecxs7NeFgS+kaw7W0eZaR mC0D5DVhy5nv0mmTpfokmK5iNPDlavUMvP047ftP4fw1sRyOq0nKkBVHgNpUlKcO d28wjYCz7o5sywgBz04sIyaRAfxHt+1eAstAwaTFNvCRu2FgcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvU1WAmdot51KLc8wvAVEt4UKAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzk3MDIwN2MtY2ZmNS0z YjEzLWIwMDctZDYzMDBmOTk4ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj77GZ52WMxBj4JjDiVuub2VKAAhxR6zhWIiul5Kl2JbUJKND4/5xoM UbFroRnBKJhgxx0uyVW98/E/82hp6mAuaswShJzLHgXWRPKUXLdxD2XPZHxvVnAU yzLA/OBh5YXJIZb1Ad/TBfTSnWxOjMqgY79mV/2ObcPwHG/32D06uT1YuxO2ya3y RIu92Wozy9KB8pD+J9CnZaV1Qf5cYKQRrhbpck4MZl0ouvN42tkDC+two9y747N3 gQdJyGnMmOXUc1djr6M2de7l3Bp3m2is1NzxelD78jRROkQLWWZHMkI0q8hrMs7n tQ5PK6cLLyXPUa+wEc+L/+GOfERg9q4= -----END CERTIFICATE-----Generated at Mon Nov 25 18:05:01 2024 by rpki-client on console-fra.rpki-client.org