$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf26fa2f-f310-3489-acc9-77d2e4850e94.roa File: cf26fa2f-f310-3489-acc9-77d2e4850e94.roa (raw, json) Hash identifier: vxAmi47Sd01OVa/oQbXMobRvwVDrNFZihKjmMz5bZew= Subject key identifier: CC:2B:2D:37:30:21:A9:A0:F6:15:54:2A:90:A3:01:6B:74:5A:F1:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D76CAA634B4811720AE8A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf26fa2f-f310-3489-acc9-77d2e4850e94.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 701 IP address blocks: 141.153.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ca:a6:34:b4:81:17:20:ae:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=67adcdf3-8b7e-46d9-899d-f8d7dab5a831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:94:08:15:7c:35:96:fa:bf:e4:af:42:35: e3:b0:32:e9:2a:1c:84:7a:b6:b1:ad:bb:ad:b5:e0: 6c:33:f2:e6:82:41:36:27:8c:a0:c5:a7:4e:fa:1e: 87:c1:43:4b:34:77:88:f2:47:27:c8:02:24:d7:63: 4a:c6:4f:6a:0e:0f:56:d1:c0:d9:69:c7:69:f3:c0: 62:59:a9:07:84:c5:b8:67:c8:5e:18:7c:2c:45:30: 3c:9b:a4:9a:6b:da:83:ab:03:35:49:5f:30:d8:49: 9b:f6:eb:a6:fc:9b:ae:1e:6a:fd:9a:e9:97:47:1f: 93:60:13:fc:ed:be:21:7c:c0:27:ae:e9:5e:19:72: 82:3c:9b:d3:49:aa:f0:9d:a0:83:02:ea:a6:4f:45: 35:9e:c1:f7:af:0b:dd:ee:f3:bc:a2:eb:a6:7f:44: 98:62:54:46:f2:59:df:15:55:80:76:81:94:66:af: 72:1c:2a:4d:ae:94:b6:df:c8:09:26:6b:b9:33:da: 5f:01:39:e8:33:e0:b9:db:8d:12:ba:60:a9:31:fb: 65:0d:b7:31:9d:be:19:2c:dd:9d:fc:87:66:59:11: 7f:65:f0:7d:af:5f:e5:da:bb:04:92:29:33:2b:78: d7:ed:7a:dd:2f:9c:de:31:5f:14:51:08:27:55:f6: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:2D:37:30:21:A9:A0:F6:15:54:2A:90:A3:01:6B:74:5A:F1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf26fa2f-f310-3489-acc9-77d2e4850e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.153.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:6a:fa:48:64:89:1b:65:59:01:1f:67:4d:be:1d:31:71:d5: 3a:80:2a:25:74:95:8b:73:40:c1:bb:a7:17:27:0e:88:ca:38: 80:0e:50:cb:5b:1d:e3:9d:91:d3:20:db:8d:eb:46:51:64:f4: fa:34:ae:41:ea:45:7e:0b:24:b5:55:dc:0b:a2:a4:06:9e:5e: f9:11:30:9b:94:5c:7c:d2:05:35:31:34:fe:40:44:88:fb:a7: 49:f1:90:92:bf:d9:0f:27:c7:5a:69:b3:3e:9e:48:2a:7b:83: 37:dd:f6:9d:51:d1:17:cb:ad:12:59:1c:1d:a2:c0:93:3a:e4: fa:eb:75:b3:58:96:79:ea:12:c7:66:7a:96:ab:4b:53:bf:11: 71:37:7e:82:69:27:31:ee:5a:2a:41:b8:1a:68:9b:ab:c9:e9: 17:47:5f:a1:78:08:db:21:3b:a2:48:6e:c9:a9:1d:15:0a:64: 8d:b1:6e:d5:e3:0e:b4:bf:e2:27:3d:ad:ec:7b:aa:a5:a9:63: 71:ad:76:61:c9:90:b0:dc:1e:bb:70:b8:e7:70:38:fa:bd:b0: 5a:4a:d7:8c:43:d3:f0:97:8b:e5:89:e3:55:c9:ef:ad:03:a8: be:d7:14:79:7e:42:a9:a2:f0:44:34:2c:b4:ad:1f:3c:4b:8a: b5:08:c3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddsqmNLSBFyCuigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk NjdhZGNkZjMtOGI3ZS00NmQ5LTg5OWQtZjhkN2RhYjVhODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknqUCBV8NZb6v+SvQjXjsDLpKhyEeraxrbut teBsM/LmgkE2J4ygxadO+h6HwUNLNHeI8kcnyAIk12NKxk9qDg9W0cDZacdp88Bi WakHhMW4Z8heGHwsRTA8m6Saa9qDqwM1SV8w2Emb9uum/JuuHmr9mumXRx+TYBP8 7b4hfMAnruleGXKCPJvTSarwnaCDAuqmT0U1nsH3rwvd7vO8ouumf0SYYlRG8lnf FVWAdoGUZq9yHCpNrpS238gJJmu5M9pfATnoM+C5240SumCpMftlDbcxnb4ZLN2d /IdmWRF/ZfB9r1/l2rsEkikzK3jX7XrdL5zeMV8UUQgnVfZPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwrLTcwIamg9hVUKpCjAWt0WvH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2YyNmZhMmYtZjMxMC0z NDg5LWFjYzktNzdkMmU0ODUwZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZn9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBq+khkiRtlWQEfZ02+HTFx1TqAKiV0lYtzQMG7pxcnDojKOIAOUMtb HeOdkdMg243rRlFk9Po0rkHqRX4LJLVV3AuipAaeXvkRMJuUXHzSBTUxNP5ARIj7 p0nxkJK/2Q8nx1ppsz6eSCp7gzfd9p1R0RfLrRJZHB2iwJM65PrrdbNYlnnqEsdm eparS1O/EXE3foJpJzHuWipBuBpom6vJ6RdHX6F4CNshO6JIbsmpHRUKZI2xbtXj DrS/4ic9rex7qqWpY3GtdmHJkLDcHrtwuOdwOPq9sFpK14xD0/CXi+WJ41XJ760D qL7XFHl+Qqmi8EQ0LLStHzxLirUIw9A= -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:55 2024 by rpki-client on console-fra.rpki-client.org