$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa File: de97a398-0fe3-3499-a1ee-909d1a9839c0.roa (raw, json) Hash identifier: ZA/HGqXiIaNJPZJxSORI27qYz1ZOOOCKLk5aO8L7zCM= Subject key identifier: 7B:CE:FF:C0:D2:9B:D8:55:C3:8D:25:69:2C:09:51:88:02:B0:9F:0B Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Certificate serial: 010D0C9F432858477BF66827E99CBED5EE3D37C0 Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa Signing time: Wed 09 Oct 2024 13:00:42 +0000 ROA not before: Wed 09 Oct 2024 13:00:42 +0000 ROA not after: Tue 07 Jan 2025 14:00:42 +0000 asID: 16580 IP address blocks: 131.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7b:f6:68:27:e9:9c:be:d5:ee:3d:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Validity Not Before: Oct 9 13:00:42 2024 GMT Not After : Jan 7 14:00:42 2025 GMT Subject: CN=f56b17cb-93ff-45f5-b6c5-ed2664dc6592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:4c:e5:d9:60:df:c6:e4:6d:62:93:05:27: e6:a3:49:00:d0:7c:95:57:87:73:11:e1:4d:b9:ce: fe:a1:0c:80:75:23:b3:63:70:4e:a1:ec:c9:0c:b7: 6f:2b:71:5d:30:5d:18:24:d9:55:b2:73:79:29:a3: d1:3e:47:78:9a:d4:79:42:95:af:4f:a1:82:e6:c1: ee:18:f8:1a:cf:0d:c2:cb:ca:8d:f3:8c:27:f6:1f: de:76:ac:68:f5:ac:97:21:ac:d8:6a:37:9c:95:83: a6:fb:8f:98:75:f7:20:38:f0:77:a3:ec:6b:17:83: 0e:97:0a:87:0c:31:99:49:cf:36:4a:c4:48:b4:d3: b3:d3:d6:c7:df:23:4c:7f:03:1c:11:d6:f7:50:f1: cc:74:b3:f8:d6:d8:a4:cd:b6:ab:57:17:05:f4:f7: 34:7a:36:d8:ec:b7:96:92:bd:2c:58:e0:63:0d:0d: 65:f5:78:bf:6d:73:d0:ac:ee:29:d0:c6:55:9e:6a: 54:f9:a5:98:08:b9:89:ea:74:bb:48:6f:f4:fc:22: 17:e5:84:fa:32:03:e8:b6:e4:a4:06:28:9a:e5:c3: a9:f7:da:1e:fb:8a:85:59:df:36:24:d3:b4:82:61: c0:06:43:91:e9:a3:bd:42:63:90:f8:8a:15:a6:18: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:FF:C0:D2:9B:D8:55:C3:8D:25:69:2C:09:51:88:02:B0:9F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl X509v3 Authority Key Identifier: keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer sbgp-ipAddrBlock: critical IPv4: 131.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:68:35:b8:d1:c4:6e:79:25:46:cb:33:34:df:34:e0:da:d0: b6:bf:a1:ef:5c:a6:bf:e4:d9:13:8e:68:33:08:77:c2:75:54: 8f:31:7e:a6:df:cf:90:fd:26:30:e9:c9:79:96:a4:96:d9:dd: 69:e7:3d:ec:ea:10:37:8e:83:4c:bc:52:58:d5:e2:d3:37:33: fc:2f:99:0c:fc:d4:e7:49:36:29:8a:e5:7d:3d:9b:c9:6d:46: 4c:d5:ff:83:ca:d3:b3:bf:9f:2f:66:f4:3c:16:fa:80:f6:c2: 70:1b:df:29:a2:21:55:71:71:d7:ba:f8:9f:98:15:1f:5c:f2: f7:fc:be:eb:5c:c8:1e:c9:9c:4c:40:d0:88:ab:21:09:e6:e2: fa:23:63:52:a7:48:f6:86:c4:78:c4:70:7e:4e:90:1d:27:de: 4b:0f:35:17:b3:96:ac:d7:1e:af:86:db:68:b8:98:51:5e:49: 7c:20:96:b7:cd:e8:9d:87:23:d8:9d:81:9d:9c:80:59:62:c4: 2e:1b:09:a7:05:65:39:3c:72:c0:70:97:67:35:ff:8c:ec:9d: 74:be:60:6d:10:3a:ba:8d:45:ef:df:41:b5:c6:ec:0e:35:db: 85:95:24:29:70:a9:63:14:9b:65:7a:08:95:f9:ba:0f:a0:bc: 40:6a:80:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd79mgn6Zy+1e49N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz NjVlMB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk ZjU2YjE3Y2ItOTNmZi00NWY1LWI2YzUtZWQyNjY0ZGM2NTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY5M5dlg38bkbWKTBSfmo0kA0HyVV4dzEeFN uc7+oQyAdSOzY3BOoezJDLdvK3FdMF0YJNlVsnN5KaPRPkd4mtR5QpWvT6GC5sHu GPgazw3Cy8qN84wn9h/edqxo9ayXIazYajeclYOm+4+YdfcgOPB3o+xrF4MOlwqH DDGZSc82SsRItNOz09bH3yNMfwMcEdb3UPHMdLP41tikzbarVxcF9Pc0ejbY7LeW kr0sWOBjDQ1l9Xi/bXPQrO4p0MZVnmpU+aWYCLmJ6nS7SG/0/CIX5YT6MgPotuSk Biia5cOp99oe+4qFWd82JNO0gmHABkOR6aO9QmOQ+IoVphiK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvO/8DSm9hVw40laSwJUYgCsJ8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2 NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvZGU5N2EzOTgtMGZlMy0z NDk5LWExZWUtOTA5ZDFhOTgzOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0 ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+gCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxoNbjRxG55JUbLMzTfNODa0La/oe9cpr/k2ROOaDMId8J1VI8xfqbf z5D9JjDpyXmWpJbZ3WnnPezqEDeOg0y8UljV4tM3M/wvmQz81OdJNimK5X09m8lt RkzV/4PK07O/ny9m9DwW+oD2wnAb3ymiIVVxcde6+J+YFR9c8vf8vutcyB7JnExA 0IirIQnm4vojY1KnSPaGxHjEcH5OkB0n3ksPNRezlqzXHq+G22i4mFFeSXwglrfN 6J2HI9idgZ2cgFlixC4bCacFZTk8csBwl2c1/4zsnXS+YG0QOrqNRe/fQbXG7A41 24WVJClwqWMUm2V6CJX5ug+gvEBqgAo= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:08 2024 by rpki-client on console-ams.rpki-client.org