$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa File: 2e020565-2650-3731-84b4-b30e83f1cb6a.roa (raw, json) Hash identifier: qGp23B9/zZaBAa5qAFVXNuY6tOR0i0nk+Rmc0U9DCiI= Subject key identifier: 95:FB:AB:E5:E8:32:B8:0C:BE:CD:4B:26:C3:F8:5B:98:66:EE:A7:E5 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F432858474585FB3EB935EB5105602B00 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa Signing time: Fri 20 Sep 2024 01:00:31 +0000 ROA not before: Fri 20 Sep 2024 01:00:31 +0000 ROA not after: Thu 19 Dec 2024 02:00:31 +0000 asID: 32145 IP address blocks: 131.109.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:85:fb:3e:b9:35:eb:51:05:60:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Sep 20 01:00:31 2024 GMT Not After : Dec 19 02:00:31 2024 GMT Subject: CN=8bc77884-b9ae-4ac3-a0b4-0e9d37f6cbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:a7:27:fd:4b:b4:c8:fe:72:87:a5:2f:98: 4d:bb:48:b5:19:75:87:1c:71:00:e7:48:fc:59:40: 6b:9b:35:b3:b6:e4:66:76:38:4b:84:50:f7:38:8e: 0d:c6:cc:15:e5:70:1d:b1:02:f2:54:21:d4:8c:e5: 3c:a6:37:a4:19:bb:21:d0:38:60:6d:fb:1a:f6:a0: 9d:12:0d:25:0e:e6:9f:96:28:9a:ab:c5:64:44:ef: 84:e5:e9:9b:3f:c3:72:48:4e:df:1f:7b:32:28:12: 5f:d2:29:ce:0d:2c:0e:bc:4b:c7:b5:dc:55:0e:3a: 60:cf:04:32:9e:8d:47:1b:d4:05:ad:b6:9f:b3:fd: ed:37:55:fa:63:f1:b0:cc:b9:f4:b2:c3:7d:df:65: b8:9e:20:bc:20:a6:5a:61:1d:18:df:ce:e6:64:29: 04:75:d3:37:7d:49:d6:1e:65:60:f2:89:79:5b:38: 78:77:6b:9e:17:67:22:d3:ef:bb:17:d5:a4:1f:38: 57:b2:35:6e:53:79:b3:87:b7:76:69:6c:eb:50:6e: c8:c2:7d:75:b9:92:29:0c:45:87:f4:94:aa:32:30: 8a:25:ab:a3:7b:7a:11:67:08:61:2c:b7:34:d3:a7: 6f:4c:41:dc:c7:0c:d6:17:fe:e9:c7:9a:6f:98:2a: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:AB:E5:E8:32:B8:0C:BE:CD:4B:26:C3:F8:5B:98:66:EE:A7:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:49:8b:9b:55:d3:6f:0e:e7:0e:fb:0d:34:c8:40:6f:de:f9: 34:c5:da:5c:3a:36:76:d9:53:ad:85:aa:a9:c7:66:20:a2:24: c3:a8:44:8e:aa:8e:09:da:e4:6f:1a:08:0d:27:5d:2f:71:97: c2:6f:fb:83:56:3a:51:3f:0d:19:0d:d5:0d:b8:5a:08:7d:bd: 69:d2:6e:2a:80:6f:19:80:ac:f6:13:51:7e:4b:97:63:5e:e5: 6e:ad:c1:4a:9e:04:ce:c0:ac:55:71:1e:d8:3d:20:0c:45:ed: 15:28:37:8e:66:72:2c:59:28:79:38:9e:ec:dd:95:ff:5f:c1: e3:95:3d:69:96:aa:c6:e8:b2:fb:93:81:86:5d:d6:8a:85:90: 83:9d:c3:90:98:29:dc:3c:b0:ad:0e:90:74:d5:34:a2:e9:21: 1e:84:05:83:72:1d:62:e5:8e:a6:18:5a:b4:2d:97:de:fc:5f: f4:88:23:d2:e2:40:9a:a8:e4:87:6f:a7:6a:10:4a:ed:ff:9c: f3:ea:ae:05:dc:7f:ec:50:e6:4f:66:5d:7a:63:28:10:fa:47: 5c:29:69:ab:0a:3c:84:22:6f:4d:14:6c:c4:9d:3d:67:58:f3: 83:3c:b8:44:1d:95:64:04:d0:b9:2f:90:de:b5:ee:6b:7a:44: 9e:57:08:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhfs+uTXrUQVgKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk OGJjNzc4ODQtYjlhZS00YWMzLWEwYjQtMGU5ZDM3ZjZjYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fWnJ/1LtMj+coelL5hNu0i1GXWHHHEA50j8 WUBrmzWztuRmdjhLhFD3OI4NxswV5XAdsQLyVCHUjOU8pjekGbsh0Dhgbfsa9qCd Eg0lDuafliiaq8VkRO+E5embP8NySE7fH3syKBJf0inODSwOvEvHtdxVDjpgzwQy no1HG9QFrbafs/3tN1X6Y/GwzLn0ssN932W4niC8IKZaYR0Y387mZCkEddM3fUnW HmVg8ol5Wzh4d2ueF2ci0++7F9WkHzhXsjVuU3mzh7d2aWzrUG7Iwn11uZIpDEWH 9JSqMjCKJauje3oRZwhhLLc006dvTEHcxwzWF/7px5pvmCrXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX7q+XoMrgMvs1LJsP4W5hm7qflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmUwMjA1NjUtMjY1MC0z NzMxLTg0YjQtYjMwZTgzZjFjYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg22AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpJi5tV028O5w77DTTIQG/e+TTF2lw6NnbZU62FqqnHZiCiJMOoRI6q jgna5G8aCA0nXS9xl8Jv+4NWOlE/DRkN1Q24Wgh9vWnSbiqAbxmArPYTUX5Ll2Ne 5W6twUqeBM7ArFVxHtg9IAxF7RUoN45mcixZKHk4nuzdlf9fweOVPWmWqsbosvuT gYZd1oqFkIOdw5CYKdw8sK0OkHTVNKLpIR6EBYNyHWLljqYYWrQtl978X/SII9Li QJqo5Idvp2oQSu3/nPPqrgXcf+xQ5k9mXXpjKBD6R1wpaasKPIQib00UbMSdPWdY 84M8uEQdlWQE0LkvkN617mt6RJ5XCLc= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:48 2024 by rpki-client on console-ams.rpki-client.org