$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa File: 412dc3c0-2791-366f-afa1-291c038135b9.roa (raw, json) Hash identifier: 87Zl8ge7KdO8+3s8VM1lF/n2PQU0SK3DYt9xH+qR9S4= Subject key identifier: 06:C8:45:21:65:9C:B0:65:74:5F:B9:5F:11:83:4D:90:72:26:6F:CA Certificate issuer: /CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde Certificate serial: 010D0C9F43285847A5D6A3A7053DB5F250B9E000 Authority key identifier: 81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 396982 IP address blocks: 156.77.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a3:a7:05:3d:b5:f2:50:b9:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=a28a31fc-960b-461b-867d-3915d7ec2c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:9f:8d:97:a0:c8:e3:a8:84:80:7a:59:23: 9f:17:fc:8d:26:76:33:1e:48:64:b0:a1:49:e5:14: fd:3b:7c:a6:4f:5b:44:23:1d:76:6a:5a:ed:10:a5: 15:8a:a1:d3:4c:f5:bd:29:86:32:b2:40:49:dd:2c: fd:77:02:c2:91:a6:5a:c9:08:6d:71:f9:92:47:46: f2:f2:b2:dd:5f:76:bc:eb:81:b7:47:09:f1:a8:03: 59:6f:1b:13:9b:bc:1b:a5:07:39:59:ba:bf:72:b4: d2:46:65:13:a9:e9:e0:3c:05:38:da:81:16:42:18: 09:9b:3a:b1:d4:05:b1:98:89:1b:07:7c:1c:59:ae: df:87:9d:ac:21:a0:7f:82:b3:93:a1:ce:bd:95:e2: 62:c5:31:13:50:5a:9d:5c:e4:d8:fa:bc:b3:ee:95: 05:d6:d7:fd:d5:ff:07:5a:b8:ce:95:38:b0:a3:02: 9e:3f:eb:85:3b:bb:ae:e8:07:76:51:c2:f6:fb:6e: 8a:c6:d1:46:32:15:8a:72:65:e4:21:f7:eb:e4:75: df:ec:b4:79:a1:e4:91:33:61:06:90:e1:51:a6:59: 36:c9:37:92:97:b3:65:52:7c:6e:1f:ba:96:b0:8d: 45:f7:5f:c0:bc:ab:47:62:11:b7:4c:0e:d5:78:4f: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:45:21:65:9C:B0:65:74:5F:B9:5F:11:83:4D:90:72:26:6F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl X509v3 Authority Key Identifier: keyid:81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer sbgp-ipAddrBlock: critical IPv4: 156.77.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7f:0b:14:b0:65:c9:47:87:e2:4f:72:5b:27:5f:30:3b:16: 1c:aa:86:05:d8:38:97:c6:93:ba:8c:ab:20:b6:61:a5:04:70: d1:2f:f1:ba:02:dc:eb:5d:64:61:ad:4b:9e:a7:77:5a:51:78: 68:cf:f5:03:05:d7:7f:ad:4c:21:1b:cc:e9:11:47:b7:54:db: fc:98:b7:31:bd:d8:31:18:35:05:f4:cc:99:dd:67:2b:99:df: 9d:ba:95:bc:eb:c6:29:e2:7c:35:e1:c2:19:9f:15:b0:b3:04: e2:a8:c4:48:64:84:c1:13:ca:54:d5:c1:0e:0c:8d:d1:98:b1: bf:4e:68:8c:0a:f5:75:d0:5a:86:9d:d4:77:ae:20:fa:fc:8b: 27:0c:8d:5d:11:d7:98:67:33:33:86:7a:d0:9d:74:c1:0f:6d: 9e:18:cb:b9:9a:2a:37:f3:0c:28:c0:08:a1:56:68:88:bf:f1: 77:92:bd:7a:df:f4:c4:91:a7:cb:88:7d:66:ad:d3:a6:0b:9a: ea:bb:b0:13:7d:27:f2:d8:32:63:70:c2:01:95:b6:e4:79:dd: 7f:72:a5:61:8d:80:71:af:91:bf:43:d4:22:c8:ac:96:49:bc: cd:e6:1b:71:de:e2:c5:f9:3f:ca:36:57:a6:bc:34:91:bb:d1: d5:73:23:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qOnBT218lC54AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU2ZjRiNDEtOGZkZi00YTRlLWI2Y2YtN2I3MzdkMGRi ZmRlMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YTI4YTMxZmMtOTYwYi00NjFiLTg2N2QtMzkxNWQ3ZWMyYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTOfjZegyOOohIB6WSOfF/yNJnYzHkhksKFJ 5RT9O3ymT1tEIx12alrtEKUViqHTTPW9KYYyskBJ3Sz9dwLCkaZayQhtcfmSR0by 8rLdX3a864G3RwnxqANZbxsTm7wbpQc5Wbq/crTSRmUTqengPAU42oEWQhgJmzqx 1AWxmIkbB3wcWa7fh52sIaB/grOToc69leJixTETUFqdXOTY+ryz7pUF1tf91f8H WrjOlTiwowKeP+uFO7uu6Ad2UcL2+26KxtFGMhWKcmXkIffr5HXf7LR5oeSRM2EG kOFRplk2yTeSl7NlUnxuH7qWsI1F91/AvKtHYhG3TA7VeE917wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbIRSFlnLBldF+5XxGDTZByJm/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNTZm NGI0MS04ZmRmLTRhNGUtYjZjZi03YjczN2QwZGJmZGUvNDEyZGMzYzAtMjc5MS0z NjZmLWFmYTEtMjkxYzAzODEzNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzU2ZjRiNDEtOGZkZi00YTRlLWI2 Y2YtN2I3MzdkMGRiZmRlL2M1NmY0YjQxLThmZGYtNGE0ZS1iNmNmLTdiNzM3ZDBk YmZkZS5jcmwwHwYDVR0jBBgwFoAUgd78BhosNScmulUaH0WfTnXUwVUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNTZmNGI0MS04ZmRmLTRhNGUtYjZjZi03Yjcz N2QwZGJmZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnE2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER/CxSwZclHh+JPclsnXzA7FhyqhgXYOJfGk7qMqyC2YaUEcNEv8boC 3OtdZGGtS56nd1pReGjP9QMF13+tTCEbzOkRR7dU2/yYtzG92DEYNQX0zJndZyuZ 3526lbzrxinifDXhwhmfFbCzBOKoxEhkhMETylTVwQ4MjdGYsb9OaIwK9XXQWoad 1HeuIPr8iycMjV0R15hnMzOGetCddMEPbZ4Yy7maKjfzDCjACKFWaIi/8XeSvXrf 9MSRp8uIfWat06YLmuq7sBN9J/LYMmNwwgGVtuR53X9ypWGNgHGvkb9D1CLIrJZJ vM3mG3He4sX5P8o2V6a8NJG70dVzIxA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:49 2024 by rpki-client on console-fra.rpki-client.org