$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa File: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (raw, json) Hash identifier: Pzqcz9QJGYsvcIHKntZplzEGd7dLi3AtcKYRct0t40M= Subject key identifier: 0C:C6:D6:95:8C:66:59:65:3D:36:D4:B9:90:AA:70:9C:B9:66:2E:B8 Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F43285847E094BC970C678BD42521A900 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 400211 IP address blocks: 142.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:bc:97:0c:67:8b:d4:25:21:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=8f7e2514-f360-4633-9773-568b792faf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:e3:1b:e0:80:33:bd:3c:30:35:c8:9d:5f: 12:1c:2e:45:04:8d:a9:07:77:ce:ce:37:be:8e:62: ce:2b:b2:1e:b0:4b:73:5a:80:5a:60:d4:18:29:ea: c5:ca:68:79:e4:dd:ff:98:f0:ab:2a:58:a2:8d:b4: dd:02:ca:ac:dd:d9:72:da:9a:45:25:23:27:9e:e0: a3:c2:13:ad:36:a2:09:e7:ed:96:e8:4b:b5:85:e7: d6:34:8a:5d:ff:61:dc:76:9b:9f:d1:af:69:ce:07: f2:bc:05:ad:45:04:70:1c:98:7c:32:04:79:0b:62: c5:34:00:3d:d0:c1:ef:d5:cb:fa:db:3e:dd:62:e7: fd:cc:e4:ce:81:31:b5:0d:8c:98:4d:b9:66:dd:b7: 8e:fa:f5:fd:36:83:5e:2a:fb:e1:e3:bd:69:6b:b2: 89:4f:c3:bd:b5:c6:8c:f9:37:2a:be:50:99:ec:d9: 8b:aa:82:37:bd:c0:e4:ba:b1:20:d7:65:aa:75:42: 02:ce:87:95:d4:82:79:9d:4a:75:20:e1:97:40:d1: 59:00:76:7b:b7:3e:be:90:15:f1:1e:09:4e:0a:3e: 06:1d:e1:b5:0f:52:55:d3:a5:ce:e9:13:dc:1d:63: a5:69:b2:b3:02:56:32:ae:1f:4f:db:d4:b8:ad:6e: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C6:D6:95:8C:66:59:65:3D:36:D4:B9:90:AA:70:9C:B9:66:2E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:05:fe:eb:64:fc:71:95:33:03:4c:8a:5e:09:28:a4:56:6c: c1:da:ca:10:af:3b:3b:86:3a:3f:89:c9:95:0e:f6:f4:1b:75: 78:98:da:46:40:c6:a9:a7:30:53:a3:6e:31:67:82:54:f8:8b: 14:76:9c:44:b4:0e:ad:ec:a6:3e:ba:38:ab:2a:00:27:ef:d8: d8:b9:72:9b:6b:bb:4a:09:3b:40:00:83:7d:56:1d:d6:c5:7a: 3d:50:5c:5e:39:10:67:44:c4:bb:1a:e2:a7:28:5c:ac:96:45: 71:17:88:64:79:75:2e:a7:ca:dd:af:87:51:92:5b:f7:46:64: 38:61:a9:af:a4:da:0f:fa:2e:a9:24:56:4a:45:98:c9:8c:eb: f2:8c:42:49:8e:6b:35:31:d5:c9:54:fd:9e:b9:91:01:2c:3d: ce:34:14:a6:06:2f:5a:73:1c:4c:ea:5f:da:ba:53:3b:a5:23: c4:52:63:be:d2:f9:79:7a:ba:0e:c3:f8:7f:13:2c:0c:95:a5: 54:0c:a6:d6:da:00:f0:b9:d3:7a:6e:32:30:2f:45:4a:65:4f: f5:6a:f5:d3:fe:74:64:82:74:32:7c:1b:4d:ef:a0:a4:a6:9c: c3:6c:e5:28:69:2c:6b:58:ca:c3:54:d6:56:de:58:0d:b9:d6: 35:b3:2b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglLyXDGeL1CUhqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk OGY3ZTI1MTQtZjM2MC00NjMzLTk3NzMtNTY4Yjc5MmZhZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslTjG+CAM708MDXInV8SHC5FBI2pB3fOzje+ jmLOK7IesEtzWoBaYNQYKerFymh55N3/mPCrKliijbTdAsqs3dly2ppFJSMnnuCj whOtNqIJ5+2W6Eu1hefWNIpd/2Hcdpuf0a9pzgfyvAWtRQRwHJh8MgR5C2LFNAA9 0MHv1cv62z7dYuf9zOTOgTG1DYyYTblm3beO+vX9NoNeKvvh471pa7KJT8O9tcaM +TcqvlCZ7NmLqoI3vcDkurEg12WqdUICzoeV1IJ5nUp1IOGXQNFZAHZ7tz6+kBXx HglOCj4GHeG1D1JV06XO6RPcHWOlabKzAlYyrh9P29S4rW7OgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzG1pWMZlllPTbUuZCqcJy5Zi64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvOGM3ZTI3ZDMtYTM4NS0z ZDI2LTlkYmYtMGE4M2RjNjk1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoF/utk/HGVMwNMil4JKKRWbMHayhCvOzuGOj+JyZUO9vQbdXiY2kZA xqmnMFOjbjFnglT4ixR2nES0Dq3spj66OKsqACfv2Ni5cptru0oJO0AAg31WHdbF ej1QXF45EGdExLsa4qcoXKyWRXEXiGR5dS6nyt2vh1GSW/dGZDhhqa+k2g/6Lqkk VkpFmMmM6/KMQkmOazUx1clU/Z65kQEsPc40FKYGL1pzHEzqX9q6UzulI8RSY77S +Xl6ug7D+H8TLAyVpVQMptbaAPC503puMjAvRUplT/Vq9dP+dGSCdDJ8G03voKSm nMNs5ShpLGtYysNU1lbeWA251jWzKxw= -----END CERTIFICATE-----Generated at Fri Nov 22 21:10:17 2024 by rpki-client on console-fra.rpki-client.org