$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa File: d449ca14-5612-35c6-bb80-64b2f7a45f90.roa (raw, json) Hash identifier: gadDrWM5ODxVUcre4AfO2047hnxdnLzy3xX9jvJgVAI= Subject key identifier: 14:D1:24:8E:AE:FB:66:CE:BE:9A:A9:71:D4:20:72:DC:2A:A8:29:F5 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285847D0A7C20185FC63BD5594F0E0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa Signing time: Fri 08 Nov 2024 21:06:06 +0000 ROA not before: Fri 08 Nov 2024 21:06:06 +0000 ROA not after: Thu 06 Feb 2025 21:06:06 +0000 asID: 62651 IP address blocks: 216.151.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d0:a7:c2:01:85:fc:63:bd:55:94:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Nov 8 21:06:06 2024 GMT Not After : Feb 6 21:06:06 2025 GMT Subject: CN=13a70a7e-6800-425a-83ac-fe75e986812d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:d6:60:c2:f3:25:9a:f4:0b:0a:bc:87:7c: 8a:f0:aa:c3:8c:29:a6:55:eb:f6:e4:8d:63:08:91: fb:45:86:66:7f:1c:bf:e9:ca:69:0c:16:11:bd:58: b0:6a:7e:84:86:c8:6a:de:18:77:eb:a2:d4:6e:90: 67:6f:d5:12:b1:07:15:f3:b2:35:93:7a:e0:ea:57: 56:77:97:a2:12:6e:d2:71:7a:56:cc:97:aa:4f:01: d6:23:77:77:d2:af:44:30:be:c7:75:aa:f1:ab:6f: 29:92:e2:81:f8:3c:d1:b9:dd:87:38:89:3f:09:16: 76:5b:e0:5e:2d:05:8e:09:82:4b:6a:b4:4d:34:81: fc:ac:19:d0:ed:23:b5:df:ed:d3:90:a4:cb:b5:f6: 3f:0c:6d:62:02:52:ad:6a:8c:a8:d2:22:e8:e4:24: db:06:9f:17:c7:21:d9:2e:fa:f8:d8:71:11:63:c2: d6:97:5b:89:33:0f:d9:45:8e:a1:45:5e:29:01:96: 59:f8:c8:e0:7a:a0:fb:72:4f:35:94:cb:9f:1e:e5: 96:cc:85:29:88:e6:8b:66:61:4e:67:df:c6:03:cc: 88:ad:ed:91:77:b8:76:0d:a8:e2:61:e5:be:b6:95: bd:e3:78:ae:a8:0c:a3:13:28:8d:e2:20:06:ca:1d: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D1:24:8E:AE:FB:66:CE:BE:9A:A9:71:D4:20:72:DC:2A:A8:29:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 216.151.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e3:96:f0:e4:92:1d:5f:8d:40:e9:0e:a5:31:69:88:1a:16: 6e:f5:09:7b:3c:ed:8a:6c:a1:c4:00:05:c4:d3:62:f5:31:f8: 23:28:64:5e:d5:a8:18:f0:b5:c2:a2:1e:e8:4a:f5:5f:e5:af: 3d:7d:4c:fa:56:12:c3:b9:44:fb:70:5f:03:29:c0:ba:80:6e: 7b:ad:c4:ea:c0:15:20:27:e4:0c:d4:8f:3d:72:27:c0:33:04: cb:6a:86:d5:c4:f3:21:2b:a8:f8:51:7c:72:a0:bc:92:6d:ac: 44:78:d7:2c:56:bc:fc:19:88:51:21:39:df:27:9a:19:a9:11: a8:f0:79:33:82:05:26:a0:f3:08:b0:47:43:54:60:90:9e:b7: 6f:6d:1d:05:0b:46:7f:04:ee:4b:d0:37:f8:d5:3f:53:ef:b6: 08:db:54:58:f5:82:ba:20:65:b1:05:aa:f7:6a:e3:1e:28:77: 24:61:cd:a6:f0:43:e6:c3:3c:0e:70:04:64:17:31:ef:c6:12: ee:ff:8c:4f:67:b4:08:dc:ef:10:89:63:fe:9c:1e:27:fb:2d: 32:95:35:81:92:ca:92:84:33:2d:90:b3:25:f1:86:1b:6f:09: 93:9f:af:d9:b8:1f:df:9f:c8:ee:8c:e8:2d:86:ea:5d:cd:2a: da:8c:26:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfQp8IBhfxjvVWU8OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI0MTEwODIxMDYwNloXDTI1MDIwNjIxMDYwNlowLzEtMCsGA1UEAxMk MTNhNzBhN2UtNjgwMC00MjVhLTgzYWMtZmU3NWU5ODY4MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsrWYMLzJZr0Cwq8h3yK8KrDjCmmVev25I1j CJH7RYZmfxy/6cppDBYRvViwan6Ehshq3hh366LUbpBnb9USsQcV87I1k3rg6ldW d5eiEm7ScXpWzJeqTwHWI3d30q9EML7Hdarxq28pkuKB+DzRud2HOIk/CRZ2W+Be LQWOCYJLarRNNIH8rBnQ7SO13+3TkKTLtfY/DG1iAlKtaoyo0iLo5CTbBp8XxyHZ Lvr42HERY8LWl1uJMw/ZRY6hRV4pAZZZ+MjgeqD7ck81lMufHuWWzIUpiOaLZmFO Z9/GA8yIre2Rd7h2DajiYeW+tpW943iuqAyjEyiN4iAGyh0kQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTRJI6u+2bOvpqpcdQgctwqqCn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZDQ0OWNhMTQtNTYxMi0z NWM2LWJiODAtNjRiMmY3YTQ1ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Je/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXjlvDkkh1fjUDpDqUxaYgaFm71CXs87YpsocQABcTTYvUx+CMoZF7V qBjwtcKiHuhK9V/lrz19TPpWEsO5RPtwXwMpwLqAbnutxOrAFSAn5AzUjz1yJ8Az BMtqhtXE8yErqPhRfHKgvJJtrER41yxWvPwZiFEhOd8nmhmpEajweTOCBSag8wiw R0NUYJCet29tHQULRn8E7kvQN/jVP1PvtgjbVFj1grogZbEFqvdq4x4odyRhzabw Q+bDPA5wBGQXMe/GEu7/jE9ntAjc7xCJY/6cHif7LTKVNYGSypKEMy2QsyXxhhtv CZOfr9m4H9+fyO6M6C2G6l3NKtqMJnw= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org