$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa File: 4305d133-1886-3cea-8f72-7f6bc4e75a43.roa (raw, json) Hash identifier: vYNKBxnhVyRM8DrkE9FmarE7eDkqpJ+yIpnttSYPM60= Subject key identifier: E7:4D:52:00:2B:F3:1E:F3:36:92:B4:B1:01:E0:23:E7:CC:10:46:0A Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F43285847BEF6D2A75D853BFCF2BA4280 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 16509 IP address blocks: 69.7.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d2:a7:5d:85:3b:fc:f2:ba:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=0038ca4a-5b38-4058-a082-e6a73eba9ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8a:60:f7:3f:1a:65:4f:05:9a:71:16:1c:24: ff:90:3a:cf:bb:72:43:df:e1:40:1f:6f:e3:e5:64: 0a:c3:23:68:d5:c8:85:29:5a:b2:a9:91:63:98:a6: 77:10:54:2e:71:b6:86:e6:52:6c:50:14:0a:c7:b6: 9f:7f:98:d5:73:a5:fa:75:74:32:00:fc:17:80:ab: 36:b0:01:30:04:82:85:66:70:70:8d:79:0a:05:11: 53:45:9e:72:1b:24:ca:34:8c:fc:64:46:cf:54:5f: f8:61:e7:7a:58:a3:50:d7:61:a2:93:a0:1b:14:31: a4:12:d4:32:f6:e0:fb:8f:ac:4c:a8:5b:31:62:55: 08:53:5f:bb:a5:65:b9:b4:13:96:b9:f9:c9:91:f0: 5f:03:24:b1:1a:ef:4b:51:b2:f3:79:bf:de:81:c7: 72:06:4b:bd:e7:f4:00:5d:b7:6f:e8:03:58:50:9b: a1:cc:7d:b5:94:69:da:a1:3e:c0:d0:56:8d:0c:43: d8:79:96:a6:42:28:87:bb:1b:77:7c:7b:cf:97:b7: b6:e1:c8:10:3f:98:78:0e:66:ff:8c:30:2d:c8:bf: 26:1e:c1:ac:bb:c8:74:04:3a:a6:cf:58:93:6b:b5: 8e:f0:30:a3:b7:b3:87:8d:fd:6e:91:5c:5f:b2:72: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4D:52:00:2B:F3:1E:F3:36:92:B4:B1:01:E0:23:E7:CC:10:46:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 69.7.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:28:a6:ed:1b:36:6d:83:74:b4:42:38:79:5e:85:43:79:fc: eb:2b:8a:6b:1a:a5:22:18:ad:6d:44:86:e4:e2:99:ef:c7:c3: ec:11:a3:62:d5:bb:f9:f8:19:80:1b:7f:19:dc:8f:c1:0a:0b: 6d:9b:62:b7:7d:60:18:3f:f5:84:fd:03:c2:28:63:4b:00:b8: aa:6b:6f:04:90:19:59:ec:23:9e:f8:b2:b6:a0:b9:33:3b:0e: 9c:93:56:1f:7c:4c:ab:75:be:5d:0c:38:99:7e:82:50:ba:e7: cf:f6:34:ea:b8:3a:a2:1d:0a:c1:4d:99:3d:bf:e8:b5:31:14: 52:6c:ad:5b:32:ca:93:09:56:78:6c:84:4f:09:f0:b9:73:e6: e3:f0:6f:42:52:26:3f:ee:3e:90:9f:71:6f:89:5b:c5:51:47: 68:f1:7f:9e:e3:3f:b9:e8:d1:7f:b0:53:88:d0:64:73:a2:73: 8e:c0:e7:31:3b:45:c0:0f:da:1f:a1:c2:de:9d:fc:34:f0:26: db:55:b7:d6:a4:2c:fc:6e:0a:33:e5:b3:61:7a:c6:fd:db:16: d0:6c:fd:1a:4e:c7:d3:c3:06:51:b4:c1:4a:9d:fa:63:5e:36: 64:73:83:0e:d5:b9:d5:c7:08:79:93:05:23:6d:b2:75:5e:5b: 1b:a8:2a:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tKnXYU7/PK6QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MDAzOGNhNGEtNWIzOC00MDU4LWEwODItZTZhNzNlYmE5ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ipg9z8aZU8FmnEWHCT/kDrPu3JD3+FAH2/j 5WQKwyNo1ciFKVqyqZFjmKZ3EFQucbaG5lJsUBQKx7aff5jVc6X6dXQyAPwXgKs2 sAEwBIKFZnBwjXkKBRFTRZ5yGyTKNIz8ZEbPVF/4Yed6WKNQ12Gik6AbFDGkEtQy 9uD7j6xMqFsxYlUIU1+7pWW5tBOWufnJkfBfAySxGu9LUbLzeb/egcdyBku95/QA Xbdv6ANYUJuhzH21lGnaoT7A0FaNDEPYeZamQiiHuxt3fHvPl7e24cgQP5h4Dmb/ jDAtyL8mHsGsu8h0BDqmz1iTa7WO8DCjt7OHjf1ukVxfsnK8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdNUgAr8x7zNpK0sQHgI+fMEEYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvNDMwNWQxMzMtMTg4Ni0z Y2VhLThmNzItN2Y2YmM0ZTc1YTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIopu0bNm2DdLRCOHlehUN5/OsrimsapSIYrW1EhuTime/Hw+wRo2LV u/n4GYAbfxncj8EKC22bYrd9YBg/9YT9A8IoY0sAuKprbwSQGVnsI574sraguTM7 DpyTVh98TKt1vl0MOJl+glC658/2NOq4OqIdCsFNmT2/6LUxFFJsrVsyypMJVnhs hE8J8Llz5uPwb0JSJj/uPpCfcW+JW8VRR2jxf57jP7no0X+wU4jQZHOic47A5zE7 RcAP2h+hwt6d/DTwJttVt9akLPxuCjPls2F6xv3bFtBs/RpOx9PDBlG0wUqd+mNe NmRzgw7VudXHCHmTBSNtsnVeWxuoKgE= -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:05 2024 by rpki-client on console-fra.rpki-client.org