$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa File: 065f485a-2efe-31d5-8788-a9a1e337735d.roa (raw, json) Hash identifier: tCV0fK/rYoLRLmLzPxQpD6KoU1D8mwnHjkn9OTHXm3U= Subject key identifier: AA:59:0D:00:FA:13:5D:A1:37:39:BE:E5:3A:A5:D7:CF:A5:7F:FB:96 Certificate issuer: /CN=ff45396e-5aed-48af-b337-95d4dc567afb Certificate serial: 010D0C9F43285847C8D9E014DEE1180583C92980 Authority key identifier: 6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 6377 IP address blocks: 158.165.0.0/16 maxlen: 16 192.135.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e0:14:de:e1:18:05:83:c9:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff45396e-5aed-48af-b337-95d4dc567afb Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=c21ce656-23fa-47a5-8e58-78700e0ae805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:34:e0:65:d1:e7:83:3d:ad:b7:24:69:c2: f4:a5:d4:e8:02:a0:ad:8e:25:64:b2:c6:23:bf:1d: 08:e7:ee:b9:00:bd:74:72:0b:81:95:2c:61:8d:dd: 22:fd:88:8b:84:de:a2:95:ed:88:65:ae:f1:2d:bd: a0:6f:da:ce:74:de:ef:6a:df:1f:8e:05:01:55:b7: 94:05:fc:e3:49:9b:f7:a3:de:b0:f4:61:b5:cc:c8: 09:f7:f2:bf:bd:e7:5b:46:18:ca:9d:7d:07:34:b1: 64:02:45:bf:69:40:94:63:61:35:98:c1:48:f5:8d: d6:a9:83:99:a9:38:4e:ed:8a:7a:3b:44:a7:42:c1: b2:7b:d0:23:dc:64:a4:f0:94:04:15:4d:22:f1:96: 9b:93:cf:72:7f:24:1a:f8:5c:69:42:85:6a:e5:54: 94:1b:33:e1:41:12:bc:5e:31:ff:a5:bc:87:69:8f: 95:25:cb:6e:03:ff:32:28:bf:43:30:22:a7:b1:02: 80:5e:51:91:22:d7:bb:25:5c:f2:6f:e4:87:c0:85: 43:5e:e3:21:9f:35:60:63:56:fe:97:6e:38:73:59: 0d:8d:db:b0:e2:a1:73:94:b8:ee:bd:cc:18:5e:4d: 2e:ca:9b:cf:98:26:fe:77:06:87:53:45:47:53:8c: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:59:0D:00:FA:13:5D:A1:37:39:BE:E5:3A:A5:D7:CF:A5:7F:FB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl X509v3 Authority Key Identifier: keyid:6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer sbgp-ipAddrBlock: critical IPv4: 158.165.0.0/16 192.135.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e5:43:ac:69:3b:fa:9f:79:28:1b:68:f8:91:db:b2:8f:b8: 4f:d0:ff:a0:9a:8b:bb:18:99:a0:51:f5:43:63:39:7d:bd:a7: 23:d1:bf:42:b2:a9:87:69:76:f7:5e:8c:20:84:8a:2d:2a:b8: 43:da:6a:df:7f:fa:7f:9e:90:6b:31:86:fd:01:4a:31:b5:6c: 53:c4:4b:32:0f:16:db:b9:3d:b8:b3:38:f0:18:f8:09:ad:50: 79:83:fc:02:47:24:77:c0:1e:60:ed:79:d6:8e:19:18:87:ba: 08:c5:1f:f1:0d:a0:84:10:19:32:7d:43:bd:e7:f0:13:4c:4a: 31:a5:90:d9:84:b4:a1:d3:d6:68:db:d0:d5:97:51:4d:5c:c3: cc:8b:d4:cd:44:3b:c0:cb:6e:42:dc:b5:9b:f7:f1:e9:98:d1: 6d:45:45:ef:9a:e3:2e:1f:9e:ce:1b:68:23:4c:b3:ee:db:5f: cc:ec:f1:d6:7b:3d:91:b3:f9:01:b7:cd:4d:ff:26:7e:af:ee: ad:de:26:9a:4d:66:f2:9a:bf:b2:26:46:06:1f:2a:7d:23:ec: c4:7a:b9:60:a7:c7:2f:d4:3b:e0:f4:ce:cc:ea:01:69:0e:6c: 79:4b:00:62:5b:3f:a2:0e:1f:2d:1d:26:26:4b:46:10:99:78: 90:bc:0d:bb -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEfI2eAU3uEYBYPJKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY0NTM5NmUtNWFlZC00OGFmLWIzMzctOTVkNGRjNTY3 YWZiMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk YzIxY2U2NTYtMjNmYS00N2E1LThlNTgtNzg3MDBlMGFlODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttk04GXR54M9rbckacL0pdToAqCtjiVkssYj vx0I5+65AL10cguBlSxhjd0i/YiLhN6ile2IZa7xLb2gb9rOdN7vat8fjgUBVbeU BfzjSZv3o96w9GG1zMgJ9/K/vedbRhjKnX0HNLFkAkW/aUCUY2E1mMFI9Y3WqYOZ qThO7Yp6O0SnQsGye9Aj3GSk8JQEFU0i8Zabk89yfyQa+FxpQoVq5VSUGzPhQRK8 XjH/pbyHaY+VJctuA/8yKL9DMCKnsQKAXlGRIte7JVzyb+SHwIVDXuMhnzVgY1b+ l244c1kNjduw4qFzlLjuvcwYXk0uypvPmCb+dwaHU0VHU4yznQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKpZDQD6E12hNzm+5Tql18+lf/uWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1 Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0ZGM1NjdhZmIvMDY1ZjQ4NWEtMmVmZS0z MWQ1LTg3ODgtYTlhMWUzMzc3MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmY0NTM5NmUtNWFlZC00OGFmLWIz MzctOTVkNGRjNTY3YWZiL2ZmNDUzOTZlLTVhZWQtNDhhZi1iMzM3LTk1ZDRkYzU2 N2FmYi5jcmwwHwYDVR0jBBgwFoAUbdoY/gxSm/xACX4/13WI5aH9XLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0 ZGM1NjdhZmIuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAnqUDBADA h7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEACOVDrGk7+p95KBto+JHbso+4T9D/oJqLuxiZoFH1Q2M5fb2n I9G/QrKph2l2916MIISKLSq4Q9pq33/6f56QazGG/QFKMbVsU8RLMg8W27k9uLM4 8Bj4Ca1QeYP8Akckd8AeYO151o4ZGIe6CMUf8Q2ghBAZMn1DvefwE0xKMaWQ2YS0 odPWaNvQ1ZdRTVzDzIvUzUQ7wMtuQty1m/fx6ZjRbUVF75rjLh+ezhtoI0yz7ttf zOzx1ns9kbP5AbfNTf8mfq/urd4mmk1m8pq/siZGBh8qfSPsxHq5YKfHL9Q74PTO zOoBaQ5seUsAYls/og4fLR0mJktGEJl4kLwNuw== -----END CERTIFICATE-----Generated at Sat Nov 23 18:54:19 2024 by rpki-client on console-fra.rpki-client.org