$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa File: db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa (raw, json) Hash identifier: QzY4OXX7oICg2LsLVgvqM1sfOVRcTvde7RXu5RWfpbY= Subject key identifier: 15:7F:ED:6C:56:17:2A:15:30:9D:BC:3F:7E:FE:35:F5:63:76:72:49 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584722A0CAA3AC2DF5C5E8E6E3C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa Signing time: Sat 07 Sep 2024 13:00:41 +0000 ROA not before: Sat 07 Sep 2024 13:00:41 +0000 ROA not after: Fri 06 Dec 2024 14:00:41 +0000 asID: 20115 IP address blocks: 131.150.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:22:a0:ca:a3:ac:2d:f5:c5:e8:e6:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 7 13:00:41 2024 GMT Not After : Dec 6 14:00:41 2024 GMT Subject: CN=02203b3c-66b3-4ffd-b38b-b37928d16fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:3e:10:6b:36:3d:e7:d3:5c:f7:3e:aa:9c: d0:25:70:02:6a:26:72:93:53:fb:c3:d4:85:b3:7f: 44:95:16:7d:55:6d:d8:90:7f:26:a8:17:6b:7e:76: fa:86:5f:a5:26:3d:a5:3c:a2:49:34:70:da:ca:2b: 71:d8:d7:11:5d:f1:b7:a9:63:33:d7:5f:33:21:eb: 7b:30:bf:72:e7:48:02:9f:10:9f:f9:b7:fe:19:f7: 41:e0:62:4a:de:e7:39:68:30:29:6b:d4:84:21:a4: ca:67:94:7c:57:8a:3b:77:ef:ab:11:dc:54:19:1f: db:46:ef:c6:bb:d5:fb:f6:64:c7:c3:68:61:c6:2b: ca:02:a1:83:84:a9:16:4e:54:c5:34:7c:ab:5c:29: 92:9e:d6:94:25:3d:cd:48:e3:89:c7:6d:df:a4:f8: 0b:3b:00:f0:8c:cc:ce:4e:4a:08:10:59:e3:0a:dd: 99:6e:f4:c8:4c:82:a9:d6:1a:7e:c7:70:cd:f9:af: 74:86:85:5a:cf:19:4b:90:ba:58:eb:79:aa:f0:2a: 9d:3c:d5:4e:d2:9e:a7:62:cd:a9:1a:60:76:b9:81: 21:3b:ee:64:a9:c9:a6:ea:ba:a5:d8:1a:8b:d4:ba: ad:89:22:aa:b5:c5:cd:9f:df:94:c8:e3:09:fa:78: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7F:ED:6C:56:17:2A:15:30:9D:BC:3F:7E:FE:35:F5:63:76:72:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 131.150.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6f:65:d8:b5:0f:5d:59:a6:33:4b:8e:cc:44:3c:1f:4e:b3: 81:d1:f7:8b:82:2e:fe:3a:0b:46:9a:54:04:e0:ba:f0:fa:c7: 1a:78:cb:67:1b:c2:88:f4:a0:b3:8e:3a:9b:5a:e7:30:bc:da: 77:04:7d:9b:a7:50:4d:20:1e:97:41:8c:03:73:f8:78:25:e1: ba:94:27:8a:ec:4d:ae:54:cb:00:07:ea:62:a9:34:41:8f:50: da:bb:1d:8f:c6:e1:e8:33:c1:e8:f5:62:e2:15:cd:6b:82:a8: 1b:df:f0:32:4a:a6:16:62:4f:a6:98:8e:b0:87:6b:fb:cf:d7: 16:92:f2:2c:60:3a:47:7d:ab:ab:a0:69:dc:6b:dc:35:a2:c8: cd:e8:e0:da:a1:08:9d:f0:55:4d:1d:1a:63:bb:82:3e:01:ca: 51:99:e5:ba:7a:5b:a5:eb:14:ba:9d:a7:79:4c:5c:7e:70:98: ad:df:77:7c:69:37:e3:13:c2:42:8c:56:c3:ca:a9:86:08:6f: 14:08:aa:4a:d3:59:e7:65:2c:2e:65:7c:67:27:50:5b:cd:a9: 75:67:21:42:88:fc:99:7c:5a:13:e9:cb:2b:40:aa:d6:4c:5a: d4:1f:c4:42:4d:0e:7b:9f:88:56:31:95:63:64:30:50:02:89: e0:52:a7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioMqjrC31xejm48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MDIyMDNiM2MtNjZiMy00ZmZkLWIzOGItYjM3OTI4ZDE2ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXE+EGs2PefTXPc+qpzQJXACaiZyk1P7w9SF s39ElRZ9VW3YkH8mqBdrfnb6hl+lJj2lPKJJNHDayitx2NcRXfG3qWMz118zIet7 ML9y50gCnxCf+bf+GfdB4GJK3uc5aDApa9SEIaTKZ5R8V4o7d++rEdxUGR/bRu/G u9X79mTHw2hhxivKAqGDhKkWTlTFNHyrXCmSntaUJT3NSOOJx23fpPgLOwDwjMzO TkoIEFnjCt2ZbvTITIKp1hp+x3DN+a90hoVazxlLkLpY63mq8CqdPNVO0p6nYs2p GmB2uYEhO+5kqcmm6rql2BqL1LqtiSKqtcXNn9+UyOMJ+njhawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV/7WxWFyoVMJ28P37+NfVjdnJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGIzZmQ3ODktZjYzYS0z YTUwLTlhNzktMGI0Y2I2M2E3NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlvZdi1D11ZpjNLjsxEPB9Os4HR94uCLv46C0aaVATguvD6xxp4y2cb woj0oLOOOpta5zC82ncEfZunUE0gHpdBjANz+Hgl4bqUJ4rsTa5UywAH6mKpNEGP UNq7HY/G4egzwej1YuIVzWuCqBvf8DJKphZiT6aYjrCHa/vP1xaS8ixgOkd9q6ug adxr3DWiyM3o4NqhCJ3wVU0dGmO7gj4BylGZ5bp6W6XrFLqdp3lMXH5wmK3fd3xp N+MTwkKMVsPKqYYIbxQIqkrTWedlLC5lfGcnUFvNqXVnIUKI/Jl8WhPpyytAqtZM WtQfxEJNDnufiFYxlWNkMFACieBSp2k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:02 2024 by rpki-client on console-ams.rpki-client.org