$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/6241454b-e755-3d24-ad03-d265d7e3e201.roa File: 6241454b-e755-3d24-ad03-d265d7e3e201.roa (raw, json) Hash identifier: GO00QCm12Yl0jZlgPkvWz5O8fQ+7Nge+mrcwCcbpSfc= Subject key identifier: A4:F0:34:0A:FB:FE:30:5A:8F:E9:2F:69:6A:3B:70:43:06:E5:7D:04 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F43285847B3CC164DC95885BDB3835100 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/6241454b-e755-3d24-ad03-d265d7e3e201.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 12119 IP address blocks: 140.177.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:16:4d:c9:58:85:bd:b3:83:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=b20d9cec-1ddc-4f27-9118-6f79c1156c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:71:6b:37:9a:a8:34:41:ac:eb:2f:fe:09: 9c:4b:e3:f5:85:44:7e:a8:d9:f2:7d:f9:cd:64:49: 38:40:63:a0:31:e7:86:cc:f8:ba:5c:d6:74:f9:0c: dc:f4:ed:dc:5b:e6:e5:22:76:dd:94:56:79:66:ad: fc:63:b0:69:f5:34:1c:04:6a:4f:f6:87:7e:14:60: 2d:32:6c:16:cc:c3:0f:7b:92:9e:78:a3:30:69:da: d5:16:ac:1b:3d:8f:cc:82:4a:80:3c:8a:c0:6c:68: 94:70:94:b0:3c:e0:03:06:39:a8:c9:97:cd:44:87: c3:d6:ad:e5:54:60:08:d5:10:8a:97:69:56:c3:91: 12:49:36:48:02:6c:27:02:fc:b3:fd:10:34:2d:a8: 06:52:d7:ac:8e:bd:12:dd:33:d2:6f:85:9d:f8:b6: 55:ba:3d:c3:d4:8f:7b:be:00:f2:ee:f3:a2:51:3e: 57:cf:98:97:f9:84:93:96:96:c6:65:09:25:40:28: 20:1c:b0:ae:34:13:aa:b7:58:f1:3c:68:c3:97:1a: 57:21:c4:69:76:a2:5a:23:3c:69:83:ec:75:1a:95: fa:c4:cd:c4:69:10:71:88:b0:4f:d5:ba:f4:8d:e0: 28:24:7a:a0:16:73:75:a8:b1:29:89:b3:a0:34:80: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:34:0A:FB:FE:30:5A:8F:E9:2F:69:6A:3B:70:43:06:E5:7D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/6241454b-e755-3d24-ad03-d265d7e3e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 140.177.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:83:3c:a8:9d:a2:70:2c:6a:14:59:a6:1e:8f:ef:54:92:ff: 72:7b:be:e0:cd:26:16:68:6b:6f:3f:f5:55:b9:46:61:4b:e8: 69:e5:96:4b:9c:b5:5f:b4:22:a3:f9:b4:57:c6:89:52:25:ae: ca:a3:48:26:80:19:e9:84:55:74:6f:a4:11:a6:27:cd:43:15: 91:ab:3d:9a:1e:91:7b:03:f9:21:b5:2c:6d:fd:45:78:87:59: 78:9a:1c:a8:e0:25:df:b3:a3:22:f0:6d:49:0b:bb:eb:67:c0: 3c:15:64:51:8c:a5:6f:a0:04:e2:63:e6:ff:e0:40:a5:19:48: a4:7f:97:70:98:22:6f:c1:de:74:8b:8a:74:19:75:82:f3:8f: e3:07:6a:2c:80:f6:00:15:58:c5:62:c6:a9:62:bf:a3:c9:59: bb:55:0c:6f:ca:9b:09:78:a4:ae:37:07:d7:be:23:9d:a2:41: 0a:d1:03:92:cd:2b:a1:e5:7d:a8:bb:49:ca:1c:e7:45:c9:7e: ec:47:14:b2:ce:78:58:80:66:b1:ee:7f:84:57:92:44:ba:d3: 42:b1:cb:b2:d9:d7:61:0a:de:98:3c:c6:47:78:61:83:10:ad: 39:9a:b5:e7:3d:95:4b:71:60:75:d9:df:6f:71:ae:7a:a2:ca: 8c:4b:e4:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBZNyViFvbODUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk YjIwZDljZWMtMWRkYy00ZjI3LTkxMTgtNmY3OWMxMTU2YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlZxazeaqDRBrOsv/gmcS+P1hUR+qNnyffnN ZEk4QGOgMeeGzPi6XNZ0+Qzc9O3cW+blInbdlFZ5Zq38Y7Bp9TQcBGpP9od+FGAt MmwWzMMPe5KeeKMwadrVFqwbPY/MgkqAPIrAbGiUcJSwPOADBjmoyZfNRIfD1q3l VGAI1RCKl2lWw5ESSTZIAmwnAvyz/RA0LagGUtesjr0S3TPSb4Wd+LZVuj3D1I97 vgDy7vOiUT5Xz5iX+YSTlpbGZQklQCggHLCuNBOqt1jxPGjDlxpXIcRpdqJaIzxp g+x1GpX6xM3EaRBxiLBP1br0jeAoJHqgFnN1qLEpibOgNIATZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTwNAr7/jBaj+kvaWo7cEMG5X0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNjI0MTQ1NGItZTc1NS0z ZDI0LWFkMDMtZDI2NWQ3ZTNlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjLFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCDPKidonAsahRZph6P71SS/3J7vuDNJhZoa28/9VW5RmFL6Gnllkuc tV+0IqP5tFfGiVIlrsqjSCaAGemEVXRvpBGmJ81DFZGrPZoekXsD+SG1LG39RXiH WXiaHKjgJd+zoyLwbUkLu+tnwDwVZFGMpW+gBOJj5v/gQKUZSKR/l3CYIm/B3nSL inQZdYLzj+MHaiyA9gAVWMVixqliv6PJWbtVDG/Kmwl4pK43B9e+I52iQQrRA5LN K6Hlfai7Scoc50XJfuxHFLLOeFiAZrHuf4RXkkS600Kxy7LZ12EK3pg8xkd4YYMQ rTmatec9lUtxYHXZ329xrnqiyoxL5NY= -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:33 2024 by rpki-client on console-fra.rpki-client.org