$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json) Hash identifier: sdqUhAPp/Z29fQNDyYEfBS20mx0gmUAU6iA/4B6lPB8= Subject key identifier: BC:C3:FB:B4:82:D1:F8:24:B2:1D:5B:AF:69:4E:F4:17:62:90:A0:D3 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858472F3080BB7925B8C9B9C06C40 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 13325 IP address blocks: 204.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:80:bb:79:25:b8:c9:b9:c0:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=e343293f-88a9-4d8b-9ff2-bd1b5c6d8886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:bc:f0:fb:79:43:96:62:44:60:76:59:20: aa:fe:b7:ac:1f:fd:78:28:26:f2:6d:91:2c:3c:17: 1b:d8:2d:18:0b:8f:f3:bc:6b:8e:10:37:a8:6d:09: b7:dc:69:f5:d6:75:a4:c9:12:fc:fd:17:da:ff:a1: e6:73:6e:54:95:89:b3:11:18:f0:af:29:cd:43:eb: a4:4b:02:8f:13:47:31:6e:a4:cc:46:c8:73:81:60: fe:2d:38:49:d8:95:89:6a:db:cc:cf:90:52:c0:3b: 93:af:5f:01:7a:02:98:be:19:90:8b:0d:3f:27:71: f4:b9:87:f3:77:c5:ef:c1:42:ad:a6:54:40:dc:f5: 97:69:d2:52:f4:ff:e6:96:51:2d:81:04:94:b8:87: 05:38:b3:9d:31:e9:23:12:23:55:2d:3b:ea:0f:38: 8a:e0:ad:df:aa:c5:39:77:c4:03:f2:e6:3e:ea:59: 27:8e:ef:82:86:0b:13:2a:e2:89:50:a5:ca:eb:c3: 66:12:52:22:54:d0:79:69:fa:90:f2:2f:00:16:ea: 2b:46:01:8f:da:a4:8d:fa:71:2c:b9:c5:51:2d:c7: db:e3:48:8a:34:94:8e:7f:95:eb:a8:54:97:b6:2d: b3:45:b2:ef:b0:54:9b:ae:cf:a0:cf:ca:8d:a1:cf: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C3:FB:B4:82:D1:F8:24:B2:1D:5B:AF:69:4E:F4:17:62:90:A0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d1:dd:68:72:b1:b2:6e:cc:94:2e:bf:02:3d:24:2f:f0:74: 94:7b:e8:2a:1a:36:16:83:0b:d8:9c:a0:19:4a:fc:1b:13:b6: 35:23:2c:2b:b3:48:79:b4:67:65:74:97:8d:39:c0:25:8e:43: 8e:67:a1:92:1a:9f:9c:d2:aa:a9:e5:be:47:3e:09:35:7b:cd: 0e:71:73:5a:8d:42:a2:4d:01:11:1a:44:c6:e4:be:31:75:c9: e9:19:03:be:7e:ce:8d:0d:66:b5:3e:44:30:26:fa:dd:81:ea: 70:58:3d:cb:46:0f:66:d3:f3:b0:ed:60:f3:4b:93:89:58:12: 9d:ad:61:0b:ae:e6:53:71:39:98:ac:80:61:db:57:22:3f:58: 1c:e5:6b:b3:e5:aa:4c:34:5b:e1:fd:52:dc:bf:02:ce:b6:f7: ee:69:d3:a7:ad:a7:24:cb:78:7b:99:10:b2:59:5b:b5:20:84: 98:0d:ef:a6:55:c1:9b:c0:5d:7a:7d:85:83:74:2b:f0:c9:80: 5d:3e:39:20:5b:c8:39:49:4e:5b:48:dd:95:c0:f1:bc:3e:20: 92:5b:1c:35:a3:92:ac:86:1e:98:9b:9a:95:0f:f0:38:d1:99: f5:64:f8:de:5a:bd:b1:53:37:51:2e:f7:2c:85:93:8e:d2:4e: cb:4f:c7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIC7eSW4ybnAbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTM0MzI5M2YtODhhOS00ZDhiLTlmZjItYmQxYjVjNmQ4ODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZi88Pt5Q5ZiRGB2WSCq/resH/14KCbybZEs PBcb2C0YC4/zvGuOEDeobQm33Gn11nWkyRL8/Rfa/6Hmc25UlYmzERjwrynNQ+uk SwKPE0cxbqTMRshzgWD+LThJ2JWJatvMz5BSwDuTr18BegKYvhmQiw0/J3H0uYfz d8XvwUKtplRA3PWXadJS9P/mllEtgQSUuIcFOLOdMekjEiNVLTvqDziK4K3fqsU5 d8QD8uY+6lknju+ChgsTKuKJUKXK68NmElIiVNB5afqQ8i8AFuorRgGP2qSN+nEs ucVRLcfb40iKNJSOf5XrqFSXti2zRbLvsFSbrs+gz8qNoc+H4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzD+7SC0fgksh1br2lO9BdikKDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvN2ZlOTYyNjgtYjc4Ny0z NTI5LTlmNzgtM2UzZDBjZWQxNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvR3WhysbJuzJQuvwI9JC/wdJR76CoaNhaDC9icoBlK/BsTtjUjLCuz SHm0Z2V0l405wCWOQ45noZIan5zSqqnlvkc+CTV7zQ5xc1qNQqJNAREaRMbkvjF1 yekZA75+zo0NZrU+RDAm+t2B6nBYPctGD2bT87DtYPNLk4lYEp2tYQuu5lNxOZis gGHbVyI/WBzla7Plqkw0W+H9Uty/As629+5p06etpyTLeHuZELJZW7UghJgN76ZV wZvAXXp9hYN0K/DJgF0+OSBbyDlJTltI3ZXA8bw+IJJbHDWjkqyGHpibmpUP8DjR mfVk+N5avbFTN1Eu9yyFk47STstPx6k= -----END CERTIFICATE-----Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org