$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa File: 9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (raw, json) Hash identifier: ctshJY7mx9YzM103TXiVtZa41EnlYZBklQ8hZ0lWAxA= Subject key identifier: F9:31:C1:C1:6F:F6:24:FB:C0:E4:E6:F2:D5:17:BA:30:B0:89:62:68 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F43285847BEF6D2F3489A072BF9537680 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 26918 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d2:f3:48:9a:07:2b:f9:53:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=032dfbdd-e940-49c9-9fe7-c4ab3cdea27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:e9:58:57:e9:23:7a:da:67:a2:b5:aa:98: 9f:e7:78:f4:3a:4c:e2:e9:a7:b1:9a:5b:bb:19:30: 24:8c:88:2a:e5:fa:7c:7a:30:ef:a3:43:a5:79:47: 4a:bc:05:72:29:0f:c1:10:4f:6e:10:b8:a8:c4:0e: a1:74:6c:aa:94:a2:a0:44:22:82:8d:1a:91:1b:3f: cd:ec:75:8d:c0:4c:5b:36:bc:04:3b:84:57:a3:3c: 82:a4:00:f4:74:07:d7:7b:34:16:c9:50:19:94:cd: fb:9d:3a:b4:83:0f:72:c6:91:9b:9c:a0:91:75:55: 5a:0c:6e:b0:d0:0c:69:65:f6:98:81:d4:42:98:66: 90:25:4b:4f:d4:22:63:b0:f5:02:cd:04:68:c5:bd: 79:ab:6d:45:5e:7d:ec:d2:52:6b:39:52:b6:de:a2: 1b:a9:39:50:45:a6:cf:fd:75:7e:e3:3b:f4:4f:56: 0d:03:9c:6c:cb:52:1d:36:d3:32:a3:71:96:1b:c4: 39:37:62:b7:ae:a2:4f:c8:e4:4e:2f:ea:1c:e7:85: 69:d0:12:0d:1a:1a:28:61:37:79:3e:62:f0:d8:77: 09:81:e3:53:1f:5e:8a:6e:c4:fc:06:ee:80:fb:b5: 79:61:6e:54:2a:1f:a4:7d:8a:3f:7b:29:f0:d0:49: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:C1:C1:6F:F6:24:FB:C0:E4:E6:F2:D5:17:BA:30:B0:89:62:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:48:db:00:4b:03:df:7d:92:b2:0e:fc:8a:70:62:5b:9e:32: d7:e7:ae:56:74:09:6a:03:be:81:c7:92:06:64:55:1c:2b:ae: c9:79:55:bc:69:36:de:64:6b:56:58:e9:58:db:da:03:f5:64: aa:56:46:d5:34:92:43:1f:9c:b9:43:48:e1:8d:cb:a2:66:b9: 3e:2a:da:11:b7:e2:88:91:ee:ad:53:e4:51:36:81:d2:6b:57: 52:7a:6f:ab:47:86:84:41:39:9b:7e:2d:4d:19:f8:0d:73:0c: c9:6b:6d:cc:e0:b3:a0:59:1f:ff:e5:c6:25:28:81:0d:d0:9e: 1d:1f:d1:99:47:ef:6e:49:d8:4f:70:3b:fa:27:ee:3e:c7:06: b1:50:2d:b0:42:9d:5e:2e:44:c2:e2:a1:7a:94:fe:12:42:e3: 60:bc:1c:52:2c:c6:94:8c:b2:ef:c6:fb:4a:75:a2:73:99:b4: 8e:67:a7:40:91:19:5b:ae:11:18:5b:34:0c:1a:07:c3:33:1e: ca:bd:8f:49:94:fd:b4:1f:b7:c1:e9:30:09:3b:b8:8f:5e:47: 2b:1e:78:34:6b:dd:af:63:41:f7:74:89:87:9a:44:2e:4f:cf: ab:ec:a8:f0:7d:2e:4d:28:70:13:a3:ad:c6:49:37:68:66:7f: fd:3b:bd:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tLzSJoHK/lTdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MDMyZGZiZGQtZTk0MC00OWM5LTlmZTctYzRhYjNjZGVhMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRTpWFfpI3raZ6K1qpif53j0Okzi6aexmlu7 GTAkjIgq5fp8ejDvo0OleUdKvAVyKQ/BEE9uELioxA6hdGyqlKKgRCKCjRqRGz/N 7HWNwExbNrwEO4RXozyCpAD0dAfXezQWyVAZlM37nTq0gw9yxpGbnKCRdVVaDG6w 0AxpZfaYgdRCmGaQJUtP1CJjsPUCzQRoxb15q21FXn3s0lJrOVK23qIbqTlQRabP /XV+4zv0T1YNA5xsy1IdNtMyo3GWG8Q5N2K3rqJPyOROL+oc54Vp0BINGhooYTd5 PmLw2HcJgeNTH16KbsT8Bu6A+7V5YW5UKh+kfYo/eynw0EkOJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkxwcFv9iT7wOTm8tUXujCwiWJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvOWMzZmFiNzQtMGIwZC0z MWNlLTllNjAtNDgzODJkZGFiMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtI2wBLA999krIO/IpwYlueMtfnrlZ0CWoDvoHHkgZkVRwrrsl5Vbxp Nt5ka1ZY6Vjb2gP1ZKpWRtU0kkMfnLlDSOGNy6JmuT4q2hG34oiR7q1T5FE2gdJr V1J6b6tHhoRBOZt+LU0Z+A1zDMlrbczgs6BZH//lxiUogQ3Qnh0f0ZlH725J2E9w O/on7j7HBrFQLbBCnV4uRMLioXqU/hJC42C8HFIsxpSMsu/G+0p1onOZtI5np0CR GVuuERhbNAwaB8MzHsq9j0mU/bQft8HpMAk7uI9eRyseeDRr3a9jQfd0iYeaRC5P z6vsqPB9Lk0ocBOjrcZJN2hmf/07vQw= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org