$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa File: 0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa (raw, json) Hash identifier: 1VaUVby3We4Jn77b3dyAPDhWfEV3JgCF15dqoitZqzQ= Subject key identifier: 7D:E0:17:4F:25:8F:4E:AA:CF:07:89:A3:BE:3A:5A:69:2D:BC:77:C4 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F432858479338FE952750202B55722F80 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa Signing time: Thu 17 Oct 2024 20:58:37 +0000 ROA not before: Thu 17 Oct 2024 20:58:37 +0000 ROA not after: Wed 15 Jan 2025 21:58:37 +0000 asID: 2153 IP address blocks: 137.164.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:38:fe:95:27:50:20:2b:55:72:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Oct 17 20:58:37 2024 GMT Not After : Jan 15 21:58:37 2025 GMT Subject: CN=2d7f307f-bc7d-4087-af90-4ed60809833f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:42:cf:30:7f:88:4b:d2:14:aa:0b:10:b3: 1d:22:78:9a:69:86:4d:9d:a5:ae:d2:2c:c4:09:9a: 16:92:a5:9f:73:0a:70:49:c6:9f:f5:7e:b8:a6:a0: 9f:79:c6:43:9f:26:2f:09:4d:bb:96:be:f9:82:d6: ba:60:97:2a:b3:eb:06:ee:ed:e7:54:ed:7f:ca:e0: c6:46:b7:a1:ec:b3:95:b7:12:93:3e:2a:d8:c5:1a: ae:30:bf:12:9e:f3:e6:19:13:00:42:20:ac:24:8f: dc:93:45:b7:a9:b8:5e:28:33:58:b9:59:3a:82:f1: c8:d8:e2:3c:4e:8a:94:59:4c:d1:86:7e:32:ea:0f: c6:eb:43:af:0c:18:df:d9:35:ad:55:ea:e1:1a:69: b2:27:69:e6:9a:18:63:a0:8e:1b:a2:1b:c7:df:bc: b6:69:01:f5:27:69:82:4b:52:a6:1c:ba:61:4a:2c: b9:a4:b6:fb:8d:10:6c:23:81:9f:e0:72:0e:7f:c2: ab:32:4c:a8:69:5e:f5:b0:43:be:09:fa:86:94:58: b4:57:1e:9d:f8:46:41:71:0a:ce:ca:1c:00:39:87: b8:52:89:50:15:3e:d2:92:fb:f4:87:2e:3c:c2:69: b2:6d:8c:54:bf:ac:50:69:9a:3d:cc:ee:80:fe:fe: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E0:17:4F:25:8F:4E:AA:CF:07:89:A3:BE:3A:5A:69:2D:BC:77:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:65:6e:50:33:23:16:9a:d6:8f:40:f8:78:64:98:82:07:45: b5:85:96:20:17:e1:0f:7f:8d:57:44:21:08:9b:dd:ca:5f:5f: be:6e:45:06:0a:2a:fc:19:27:8f:09:be:24:36:ef:80:ce:cc: b8:5d:1f:a0:f1:b4:9a:9c:8b:44:97:35:31:71:7c:56:a1:88: 67:04:11:57:23:a6:e6:ec:7f:df:23:88:a2:75:b9:4d:c3:51: 73:25:09:23:6a:66:1e:2c:ed:e4:de:18:9a:3d:5b:7a:a6:a1: ba:e7:a0:8f:7f:2f:70:38:73:e3:f4:a1:59:96:87:a5:b9:99: 81:b0:9e:96:e2:81:37:27:c2:65:63:83:3f:82:28:4f:ce:ff: eb:a2:60:17:1d:ae:3b:bb:22:02:30:02:de:85:7d:71:30:40: 72:02:cf:23:7f:04:37:d5:c1:a3:58:0b:e1:33:c7:23:df:b4: 6f:f1:c7:bc:10:ac:69:6a:3b:21:bf:78:a0:b8:a6:e5:13:56: 81:40:a2:7b:8c:7d:ad:49:2e:04:a0:76:10:7b:58:0b:1f:84: f5:fc:0d:b1:28:ad:6e:60:56:65:ee:b6:57:d7:48:73:b0:6e: f0:ed:32:89:f8:c9:ae:4d:0e:da:3f:63:d8:9f:5f:98:ba:cc: 7c:2f:48:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTOP6VJ1AgK1VyL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI0MTAxNzIwNTgzN1oXDTI1MDExNTIxNTgzN1owLzEtMCsGA1UEAxMk MmQ3ZjMwN2YtYmM3ZC00MDg3LWFmOTAtNGVkNjA4MDk4MzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLtCzzB/iEvSFKoLELMdIniaaYZNnaWu0izE CZoWkqWfcwpwScaf9X64pqCfecZDnyYvCU27lr75gta6YJcqs+sG7u3nVO1/yuDG Rreh7LOVtxKTPirYxRquML8SnvPmGRMAQiCsJI/ck0W3qbheKDNYuVk6gvHI2OI8 ToqUWUzRhn4y6g/G60OvDBjf2TWtVerhGmmyJ2nmmhhjoI4bohvH37y2aQH1J2mC S1KmHLphSiy5pLb7jRBsI4Gf4HIOf8KrMkyoaV71sEO+CfqGlFi0Vx6d+EZBcQrO yhwAOYe4UolQFT7Skvv0hy48wmmybYxUv6xQaZo9zO6A/v69MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3gF08lj06qzweJo746WmktvHfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMGM5MjQwMjYtMTJkMS0z ZTc5LWEzY2UtZTUxZjcxYTNhZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEllblAzIxaa1o9A+HhkmIIHRbWFliAX4Q9/jVdEIQib3cpfX75uRQYK KvwZJ48JviQ274DOzLhdH6DxtJqci0SXNTFxfFahiGcEEVcjpubsf98jiKJ1uU3D UXMlCSNqZh4s7eTeGJo9W3qmobrnoI9/L3A4c+P0oVmWh6W5mYGwnpbigTcnwmVj gz+CKE/O/+uiYBcdrju7IgIwAt6FfXEwQHICzyN/BDfVwaNYC+EzxyPftG/xx7wQ rGlqOyG/eKC4puUTVoFAonuMfa1JLgSgdhB7WAsfhPX8DbEorW5gVmXutlfXSHOw bvDtMon4ya5NDto/Y9ifX5i6zHwvSCQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:04 2024 by rpki-client on console-ams.rpki-client.org