$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa File: 37e379c2-123b-325c-ac07-0f1c59aac703.roa (raw, json) Hash identifier: QTfwygapkDkKlOFBwZGTPR4qQQ9EY538MPVjLw2JA44= Subject key identifier: 12:B1:63:4C:4E:ED:80:12:6C:30:C9:52:E3:CE:7C:06:74:88:E9:56 Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F43285847D6CF41A0941125C424877C40 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 16509 IP address blocks: 162.216.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:41:a0:94:11:25:c4:24:87:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=3fde3be3-6508-471c-adba-6a1c3ffaea44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:20:74:af:1b:69:49:30:7c:c5:90:c2:cf: de:64:6f:86:e6:9c:bf:8a:ef:65:99:e9:a8:21:54: e8:0b:36:40:22:c1:e1:ee:a7:be:2b:09:c0:ae:6a: 0c:26:98:5b:83:c5:de:a8:73:33:a7:e1:48:12:ef: d3:0e:4e:f7:40:97:6e:0c:8f:cf:e0:fc:01:de:2f: 5f:2f:29:7b:d9:2b:99:60:34:cc:0a:18:3f:a0:de: 48:83:6b:cc:a7:36:ef:3e:a5:f8:13:95:b6:b5:24: 83:5e:9b:5c:c1:f3:3c:90:53:fa:67:ff:bc:6a:33: 57:52:d7:86:c3:86:4d:b8:96:6c:73:10:07:32:ac: f8:9a:a2:8b:e1:b6:d7:ff:82:81:b8:cb:ca:25:0d: 9b:c3:56:28:fc:0e:ee:86:48:37:4a:10:22:e0:46: fa:77:cf:5e:78:20:f4:c8:36:78:89:b6:8b:3a:82: 97:4b:85:b9:1a:18:b6:45:f2:de:a8:7c:97:4c:1a: 38:fb:c0:f8:ad:04:4d:cf:18:a5:b7:3a:52:fd:22: c4:ba:ea:2e:fe:63:d4:b6:15:83:13:e6:b6:17:4d: ef:bf:45:7e:a7:29:2a:0f:d2:14:fc:f4:89:d1:fb: 5f:c2:3d:7b:47:d1:7b:44:85:32:da:8e:31:b0:b0: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:63:4C:4E:ED:80:12:6C:30:C9:52:E3:CE:7C:06:74:88:E9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/37e379c2-123b-325c-ac07-0f1c59aac703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:94:d9:79:43:9f:49:29:8a:a2:a9:a9:5e:c2:1c:69:60:2b: 6f:f2:f8:63:56:fa:07:d2:21:44:96:fd:e8:29:c8:d6:fa:ac: a9:74:fd:24:73:63:ae:01:dd:70:fe:eb:70:de:e1:de:0c:b6: 6e:a8:43:ae:53:8f:8c:2b:f8:fd:da:f9:ad:7d:63:08:76:0a: 19:1f:1e:39:ef:7b:aa:12:84:00:22:5a:5b:1e:f4:aa:a1:30: e0:83:e6:3d:2c:dc:43:65:43:41:69:a6:b8:85:42:1b:e3:e7: 3e:71:02:1b:a2:12:9b:f2:05:20:82:2a:8e:2a:90:8c:4a:95: f7:cc:ca:e6:fb:1d:31:52:2f:c4:18:b1:af:bc:f5:8f:7c:e0: e3:c9:8c:3a:07:c3:8e:de:73:48:56:eb:e5:6a:de:4d:1e:1e: d8:7f:87:4a:00:33:86:82:6b:57:45:05:e4:ee:70:26:4d:b0: 98:e0:4c:77:e6:d7:60:c9:41:be:1a:70:42:27:2c:26:68:d2: 6d:0d:2f:9a:80:75:bd:c7:71:3b:64:41:1f:0d:ea:d3:4b:f4: c7:e3:84:c6:a0:ac:cb:2c:d6:27:0a:b6:ec:18:cf:93:f8:eb: d7:c8:89:45:9a:5d:2f:7a:84:83:86:29:30:ae:66:64:ea:eb: 8a:b1:cb:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0GglBElxCSHfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk M2ZkZTNiZTMtNjUwOC00NzFjLWFkYmEtNmExYzNmZmFlYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbsgdK8baUkwfMWQws/eZG+G5py/iu9lmemo IVToCzZAIsHh7qe+KwnArmoMJphbg8XeqHMzp+FIEu/TDk73QJduDI/P4PwB3i9f Lyl72SuZYDTMChg/oN5Ig2vMpzbvPqX4E5W2tSSDXptcwfM8kFP6Z/+8ajNXUteG w4ZNuJZscxAHMqz4mqKL4bbX/4KBuMvKJQ2bw1Yo/A7uhkg3ShAi4Eb6d89eeCD0 yDZ4ibaLOoKXS4W5Ghi2RfLeqHyXTBo4+8D4rQRNzxiltzpS/SLEuuou/mPUthWD E+a2F03vv0V+pykqD9IU/PSJ0ftfwj17R9F7RIUy2o4xsLDdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKxY0xO7YASbDDJUuPOfAZ0iOlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvMzdlMzc5YzItMTIzYi0z MjVjLWFjMDctMGYxYzU5YWFjNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeU2XlDn0kpiqKpqV7CHGlgK2/y+GNW+gfSIUSW/egpyNb6rKl0/SRz Y64B3XD+63De4d4Mtm6oQ65Tj4wr+P3a+a19Ywh2ChkfHjnve6oShAAiWlse9Kqh MOCD5j0s3ENlQ0FppriFQhvj5z5xAhuiEpvyBSCCKo4qkIxKlffMyub7HTFSL8QY sa+89Y984OPJjDoHw47ec0hW6+Vq3k0eHth/h0oAM4aCa1dFBeTucCZNsJjgTHfm 12DJQb4acEInLCZo0m0NL5qAdb3HcTtkQR8N6tNL9MfjhMagrMss1icKtuwYz5P4 69fIiUWaXS96hIOGKTCuZmTq64qxy+M= -----END CERTIFICATE-----Generated at Sun Nov 24 19:48:31 2024 by rpki-client on console-fra.rpki-client.org