$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa File: 3125937d-10bf-347b-bf28-785512b3e771.roa (raw, json) Hash identifier: IAlsQ1vLBKHvUVLmS0/PWpMgBC+/mWLKyDdEIscQeZs= Subject key identifier: 66:9C:1D:5D:EB:8E:F5:B3:EC:D3:6F:DD:8A:AB:D0:2C:D2:07:56:E9 Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Certificate serial: 010D0C9F432858478CB695533F99F66F32297000 Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 17 IP address blocks: 128.10.0.0/16 maxlen: 24 128.46.0.0/16 maxlen: 24 128.210.0.0/16 maxlen: 24 128.211.0.0/16 maxlen: 24 192.5.40.0/24 maxlen: 24 192.5.48.0/24 maxlen: 24 192.5.91.0/24 maxlen: 24 192.5.101.0/24 maxlen: 24 192.5.102.0/24 maxlen: 24 192.12.63.0/24 maxlen: 24 192.31.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:95:53:3f:99:f6:6f:32:29:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=2e458040-0d28-4baf-8f9e-56992f5a9486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:94:4f:72:ee:dd:d4:3b:87:32:df:29:e6:11: ea:f4:f1:1c:9c:0e:6b:61:74:5c:61:fc:3f:7d:e0: f5:d7:f3:ef:b2:a6:81:60:0c:44:f7:86:6b:d2:5d: 22:94:f1:a4:3e:91:cf:aa:f2:50:a2:4c:16:86:72: f3:da:60:7d:ee:63:cd:be:44:b2:50:bb:88:bd:ae: 46:77:ce:af:63:15:3f:37:5e:80:51:ab:d0:4e:42: 40:75:c3:bf:e8:fa:73:65:ec:8c:c3:21:2e:d5:f7: a2:ce:41:93:9f:a1:e7:88:98:17:9e:c4:11:0c:ba: 07:a2:49:9e:98:01:ba:00:6c:eb:32:25:53:60:6b: d4:c7:70:9b:f6:f9:31:96:ce:7a:9f:91:a6:48:84: 90:ed:70:7a:bb:33:31:c9:2f:87:dd:c1:2e:2c:1c: 19:3a:04:ab:f6:c1:52:5f:bf:cd:8c:3a:73:57:68: 90:2d:e3:b4:7a:da:78:bb:b3:16:f8:11:6a:47:88: 97:e6:3d:41:64:fc:e1:0e:f3:2b:9b:8b:c9:b9:31: 0a:52:6c:cd:07:86:1e:8d:52:e9:51:ac:18:41:61: b9:52:bf:9f:81:f9:b9:cb:ea:0f:9c:ac:42:98:62: 58:64:fa:14:82:23:e9:f7:f7:2b:b3:a3:7b:75:1b: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9C:1D:5D:EB:8E:F5:B3:EC:D3:6F:DD:8A:AB:D0:2C:D2:07:56:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/3125937d-10bf-347b-bf28-785512b3e771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl X509v3 Authority Key Identifier: keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer sbgp-ipAddrBlock: critical IPv4: 128.10.0.0/16 128.46.0.0/16 128.210.0.0/15 192.5.40.0/24 192.5.48.0/24 192.5.91.0/24 192.5.101.0-192.5.102.255 192.12.63.0/24 192.31.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:df:25:10:f2:b7:ea:3d:50:83:87:f7:23:96:78:ef:24:55: bd:7b:c1:71:6c:5c:5b:b2:fc:c3:42:e9:3e:9b:cc:14:d2:3e: 41:b4:01:4e:38:50:a0:77:d7:40:87:5e:e6:25:84:e9:5c:f9: 4f:b9:b8:48:95:20:51:09:af:23:3e:ae:31:67:b9:02:4b:60: 4a:c0:da:9f:04:01:d6:48:86:3c:ad:88:38:ac:eb:89:d9:7b: 7a:a1:3a:bb:79:25:3a:ee:4e:9a:81:c2:1c:a0:07:54:71:ae: 97:ef:03:b4:79:ce:75:d9:7b:1a:2f:1b:eb:54:23:c2:e2:7e: 61:e5:2a:29:53:e8:6e:ca:27:af:f9:fe:71:e7:3a:81:fa:87: da:0b:c9:69:37:ed:99:0b:43:8d:37:5b:d8:45:fa:d2:b9:8a: f4:65:fb:2e:4c:c1:fb:2f:3b:63:9f:05:fe:e3:52:77:4e:c8: 53:db:56:96:0d:9b:8b:33:d8:d1:a2:78:0d:29:a3:b0:df:53: fd:fd:55:8d:47:ff:72:73:e4:91:d8:9f:81:6d:c4:20:bb:e4: d6:98:f9:05:46:dc:a0:0e:ee:0f:6b:74:ca:8e:60:90:07:fb: 95:f8:f6:8d:33:bb:bf:e4:d9:fb:d7:64:24:f8:ab:62:f9:d9: 01:2f:46:c9 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEeMtpVTP5n2bzIpcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3NDAxZGUtNGIwYS00NTMyLWFjMDgtZGJhOGIwNTg4 YzQ4MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk MmU0NTgwNDAtMGQyOC00YmFmLThmOWUtNTY5OTJmNWE5NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5RPcu7d1DuHMt8p5hHq9PEcnA5rYXRcYfw/ feD11/PvsqaBYAxE94Zr0l0ilPGkPpHPqvJQokwWhnLz2mB97mPNvkSyULuIva5G d86vYxU/N16AUavQTkJAdcO/6PpzZeyMwyEu1feizkGTn6HniJgXnsQRDLoHokme mAG6AGzrMiVTYGvUx3Cb9vkxls56n5GmSISQ7XB6uzMxyS+H3cEuLBwZOgSr9sFS X7/NjDpzV2iQLeO0etp4u7MW+BFqR4iX5j1BZPzhDvMrm4vJuTEKUmzNB4YejVLp UawYQWG5Ur+fgfm5y+oPnKxCmGJYZPoUgiPp9/crs6N7dRsMaQIDAQABo4IDijCC A4YwHQYDVR0OBBYEFGacHV3rjvWz7NNv3Yqr0CzSB1bpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0 MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4YjA1ODhjNDgvMzEyNTkzN2QtMTBiZi0z NDdiLWJmMjgtNzg1NTEyYjNlNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTA3NDAxZGUtNGIwYS00NTMyLWFj MDgtZGJhOGIwNTg4YzQ4L2EwNzQwMWRlLTRiMGEtNDUzMi1hYzA4LWRiYThiMDU4 OGM0OC5jcmwwHwYDVR0jBBgwFoAULvOxC87kwzSIVBcirGl2pVE0A4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMDc0MDFkZS00YjBhLTQ1MzItYWMwOC1kYmE4 YjA1ODhjNDguY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAATA7AwMAgAoDAwCA LgMDAYDSAwQAwAUoAwQAwAUwAwQAwAVbMAwDBADABWUDBADABWYDBADADD8DBADA HwAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAIN8lEPK36j1Qg4f3I5Z47yRVvXvBcWxcW7L8w0LpPpvMFNI+ QbQBTjhQoHfXQIde5iWE6Vz5T7m4SJUgUQmvIz6uMWe5AktgSsDanwQB1kiGPK2I OKzridl7eqE6u3klOu5OmoHCHKAHVHGul+8DtHnOddl7Gi8b61QjwuJ+YeUqKVPo bsonr/n+cec6gfqH2gvJaTftmQtDjTdb2EX60rmK9GX7LkzB+y87Y58F/uNSd07I U9tWlg2bizPY0aJ4DSmjsN9T/f1VjUf/cnPkkdifgW3EILvk1pj5BUbcoA7uD2t0 yo5gkAf7lfj2jTO7v+TZ+9dkJPirYvnZAS9GyQ== -----END CERTIFICATE-----Generated at Mon Nov 25 16:30:47 2024 by rpki-client on console-ams.rpki-client.org