$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa File: 11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa (raw, json) Hash identifier: kwepG2xpiHlnNiP/2WPely+cYaeRMw3hBl8JXo/O9dY= Subject key identifier: 4F:3E:D5:7A:EE:10:FF:00:F8:14:58:59:0F:C7:DD:05:85:AE:34:96 Certificate issuer: /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Certificate serial: 010D0C9F43285847643B724A215A9C717DEB8680 Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 10967 IP address blocks: 165.130.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:72:4a:21:5a:9c:71:7d:eb:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=aeeba51a-6554-4bd4-b2e7-a17912867184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:a6:5d:e7:50:01:b1:5d:6e:0d:dc:31:3b: d8:f7:25:77:36:62:59:32:3d:3e:b7:f6:4f:b7:01: d9:26:29:09:aa:58:98:a6:f0:20:d9:9f:aa:09:39: 31:59:33:d5:26:52:fb:6c:b6:15:b8:13:06:1b:19: 4c:b5:57:8b:07:40:f3:e5:4f:20:3d:05:28:9d:d5: a2:c6:ff:27:52:14:31:be:8d:54:97:96:66:2f:29: 29:c4:ad:78:34:79:39:4d:10:0d:55:fd:69:ab:b8: 80:e6:06:63:6b:77:c0:a3:e7:9d:8a:09:ca:7f:e8: 90:3b:01:c7:c8:67:c2:a2:8e:64:27:64:76:19:dd: 8b:33:79:27:c3:35:06:5e:ce:17:66:19:02:b5:02: 7e:38:bf:d3:c2:f4:c9:b6:e7:55:f9:43:57:ff:d5: 1a:bc:85:5f:27:00:c3:7f:f2:e2:e2:6a:34:87:df: e7:a3:51:7a:50:3c:d3:7a:e7:d7:17:c5:64:81:2a: ba:97:4f:bc:ac:fe:a0:e4:9f:05:47:15:35:fe:53: 4b:12:22:a5:34:93:d6:9e:a1:cb:0b:34:9a:8c:52: 11:f2:e1:8a:c6:a0:c2:16:ba:03:7e:58:d0:8d:f5: 90:74:8a:ad:95:c8:d7:c0:8c:3f:e3:d0:63:94:d9: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3E:D5:7A:EE:10:FF:00:F8:14:58:59:0F:C7:DD:05:85:AE:34:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl X509v3 Authority Key Identifier: keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer sbgp-ipAddrBlock: critical IPv4: 165.130.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c3:94:7a:71:bc:41:d8:ca:c9:69:38:bc:88:eb:2a:a7:e0: e7:78:bf:ad:21:ef:62:a4:7c:3d:0c:d1:6a:1f:fa:fd:cd:00: 6a:c6:40:6a:c3:22:11:4c:3e:eb:9d:41:7b:c3:2c:7b:18:ba: cc:c1:06:fc:e9:4c:3c:16:fc:64:79:dc:83:8c:2c:0c:93:f6: a4:f1:8e:c0:7e:63:50:0c:22:75:a4:8c:9c:a0:cc:c5:eb:18: ad:67:9e:9d:81:88:cd:01:5c:19:4b:25:f3:eb:d1:b4:5e:d4: 2b:9b:da:6c:c3:95:05:8e:11:2c:aa:67:64:37:bf:3c:2f:50: 94:5c:99:cc:d5:83:2e:43:8f:0f:b2:ac:3a:ed:02:fc:16:22: c4:a3:83:0f:49:e8:0c:f9:8f:6b:e7:09:4e:78:bb:bd:70:77: ef:97:ef:cd:ff:3b:a8:ad:2b:72:65:95:b8:c6:43:78:8c:8d: 9b:9d:43:72:7b:4e:77:60:9e:b6:63:ae:df:65:9f:6c:eb:33: 0a:2c:16:f3:06:59:28:8a:0b:b2:21:c1:2c:08:a4:32:48:78: c6:64:ab:54:b6:9d:14:79:06:66:1c:87:c7:28:f5:29:ec:a4: ba:41:c9:7a:50:d6:9d:2c:e2:f8:93:7e:b1:6d:0c:aa:82:d8: 1b:89:eb:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO3JKIVqccX3rhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0 NmMzMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk YWVlYmE1MWEtNjU1NC00YmQ0LWIyZTctYTE3OTEyODY3MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqemXedQAbFdbg3cMTvY9yV3NmJZMj0+t/ZP twHZJikJqliYpvAg2Z+qCTkxWTPVJlL7bLYVuBMGGxlMtVeLB0Dz5U8gPQUondWi xv8nUhQxvo1Ul5ZmLykpxK14NHk5TRANVf1pq7iA5gZja3fAo+edignKf+iQOwHH yGfCoo5kJ2R2Gd2LM3knwzUGXs4XZhkCtQJ+OL/TwvTJtudV+UNX/9UavIVfJwDD f/Li4mo0h9/no1F6UDzTeufXF8VkgSq6l0+8rP6g5J8FRxU1/lNLEiKlNJPWnqHL CzSajFIR8uGKxqDCFroDfljQjfWQdIqtlcjXwIw/49BjlNlAwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8+1XruEP8A+BRYWQ/H3QWFrjSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4 MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvMTFlYTI5ZDMtNzkzMC0z ZmFjLTgzZDItYThmMGM5ZmJhMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk5ODFjMWYtNWI5MC00YWM0LWJk M2EtMTdjNTQ1MjE0NmMzL2M5OTgxYzFmLTViOTAtNGFjNC1iZDNhLTE3YzU0NTIx NDZjMy5jcmwwHwYDVR0jBBgwFoAUud4nFso2NAm9Cwz2faUhvHaAqNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1 NDUyMTQ2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpYJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHDlHpxvEHYyslpOLyI6yqn4Od4v60h72KkfD0M0Wof+v3NAGrGQGrD IhFMPuudQXvDLHsYuszBBvzpTDwW/GR53IOMLAyT9qTxjsB+Y1AMInWkjJygzMXr GK1nnp2BiM0BXBlLJfPr0bRe1Cub2mzDlQWOESyqZ2Q3vzwvUJRcmczVgy5Djw+y rDrtAvwWIsSjgw9J6Az5j2vnCU54u71wd++X783/O6itK3JllbjGQ3iMjZudQ3J7 TndgnrZjrt9ln2zrMwosFvMGWSiKC7IhwSwIpDJIeMZkq1S2nRR5BmYch8co9Sns pLpByXpQ1p0s4viTfrFtDKqC2BuJ65g= -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org