$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa File: fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa (raw, json) Hash identifier: oU/thCdFl1czOqG0m+hwO7WK5f13R3YWkr1qVhCVaZk= Subject key identifier: 87:A4:F1:B7:D3:80:8B:B5:0C:A1:DE:1C:67:82:CE:07:FD:13:74:F4 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F43285847872126C6A8AB425249E5A300 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa Signing time: Sun 13 Oct 2024 13:00:42 +0000 ROA not before: Sun 13 Oct 2024 13:00:42 +0000 ROA not after: Sat 11 Jan 2025 14:00:42 +0000 asID: 31898 IP address blocks: 158.120.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:87:21:26:c6:a8:ab:42:52:49:e5:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 13 13:00:42 2024 GMT Not After : Jan 11 14:00:42 2025 GMT Subject: CN=8e04c460-bd82-4c2f-b4d0-2083adf17566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:b2:57:d9:a1:e7:c4:89:fb:7d:61:9a:12: 17:a6:7b:1b:38:86:0a:e0:aa:cd:ea:c0:e7:32:b2: 0f:ee:2a:f4:59:c6:2e:63:46:0a:f6:e6:5e:8a:6a: 1a:60:a8:4a:82:7e:69:64:3f:1d:25:9d:1a:55:cf: 7c:11:2e:3c:b2:9d:49:0f:58:e2:63:51:02:db:5b: 65:b2:ec:2b:55:31:28:b5:63:95:d3:93:24:93:12: 04:3b:50:66:be:6a:e4:da:cd:ef:c0:0b:a8:d1:19: 1a:6c:aa:c8:2b:97:a2:85:d0:e9:ef:6f:56:64:c8: 87:8c:93:76:02:a7:9d:4a:e9:cf:eb:c6:ec:73:b7: a1:34:9d:f4:fa:07:0b:52:9e:ff:4e:65:a6:6a:a6: bf:9c:40:15:45:fa:7d:f4:30:43:99:73:d3:a1:41: ee:07:ec:53:0d:55:fa:21:f7:d2:f5:dc:69:94:11: e5:09:e6:84:d7:45:4c:86:1b:8f:c1:0d:b0:54:23: b9:d6:80:04:69:1c:c2:a7:20:0a:0e:3f:98:bc:ea: ce:30:1d:f0:9c:ef:08:6c:1c:65:a0:d4:13:3c:7f: 5a:df:6c:d3:16:44:45:26:59:57:5b:32:3d:93:f2: 1d:09:e0:58:32:66:19:e5:66:0e:3e:b6:91:c3:b8: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A4:F1:B7:D3:80:8B:B5:0C:A1:DE:1C:67:82:CE:07:FD:13:74:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:10:1d:e3:68:2f:55:e9:ad:44:b2:10:e7:02:05:c9:28:81: f2:2a:82:12:b4:91:4a:1d:86:9e:37:79:c6:e0:a5:f4:2c:02: 48:8d:81:3a:cb:88:d2:e6:2d:3d:d1:08:43:25:02:ea:18:05: f3:36:6e:de:5b:f8:85:3a:a1:0b:24:96:1c:97:82:0b:d5:3c: 7b:29:19:02:92:81:8c:76:ed:ad:ff:7c:44:ea:63:1a:80:46: 05:de:80:72:ba:06:a2:c6:1e:b1:38:ce:8a:f2:79:00:78:76: 1a:a3:27:77:ca:57:cd:a7:18:dc:81:cf:db:d9:9a:6d:57:0a: 2f:41:4e:4e:89:f7:37:bc:16:8b:d7:4d:df:92:bc:e2:56:5a: b1:22:39:5a:00:c7:e3:54:0d:69:ae:85:93:6e:b4:28:90:c6: b3:6d:61:6f:30:fb:ff:3c:cc:88:55:62:eb:38:3f:e7:f3:03: e1:5d:23:84:9b:1a:3a:f1:29:5c:ff:44:51:a8:73:a5:fb:27: 64:87:10:37:bb:38:0a:60:85:e3:bc:88:54:e6:4e:6d:60:36: 9f:bc:ba:c6:70:55:c3:ef:90:4b:8a:bb:d6:63:34:ae:91:a8: a5:57:2e:64:83:37:44:7c:a6:43:9f:12:99:34:e1:2a:e2:27: 66:3d:30:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeHISbGqKtCUknlowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk OGUwNGM0NjAtYmQ4Mi00YzJmLWI0ZDAtMjA4M2FkZjE3NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTmyV9mh58SJ+31hmhIXpnsbOIYK4KrN6sDn MrIP7ir0WcYuY0YK9uZeimoaYKhKgn5pZD8dJZ0aVc98ES48sp1JD1jiY1EC21tl suwrVTEotWOV05MkkxIEO1Bmvmrk2s3vwAuo0RkabKrIK5eihdDp729WZMiHjJN2 AqedSunP68bsc7ehNJ30+gcLUp7/TmWmaqa/nEAVRfp99DBDmXPToUHuB+xTDVX6 IffS9dxplBHlCeaE10VMhhuPwQ2wVCO51oAEaRzCpyAKDj+YvOrOMB3wnO8IbBxl oNQTPH9a32zTFkRFJllXWzI9k/IdCeBYMmYZ5WYOPraRw7jaeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIek8bfTgIu1DKHeHGeCzgf9E3T0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmFmZDhjYTktYjg0NS0z ODA0LThkNDItMmYxMTdhYTY4ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN0QHeNoL1XprUSyEOcCBckogfIqghK0kUodhp43ecbgpfQsAkiNgTrL iNLmLT3RCEMlAuoYBfM2bt5b+IU6oQsklhyXggvVPHspGQKSgYx27a3/fETqYxqA RgXegHK6BqLGHrE4zoryeQB4dhqjJ3fKV82nGNyBz9vZmm1XCi9BTk6J9ze8FovX Td+SvOJWWrEiOVoAx+NUDWmuhZNutCiQxrNtYW8w+/88zIhVYus4P+fzA+FdI4Sb GjrxKVz/RFGoc6X7J2SHEDe7OApgheO8iFTmTm1gNp+8usZwVcPvkEuKu9ZjNK6R qKVXLmSDN0R8pkOfEpk04SriJ2Y9MIs= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:38 2024 by rpki-client on console-fra.rpki-client.org