$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa File: 16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa (raw, json) Hash identifier: mqKiLd44nCMOXGfUqzXzBUhXYR//IperY3kTJsTIkBM= Subject key identifier: EF:1A:9E:B0:B7:2B:50:36:47:73:74:8B:2C:95:E7:E2:F6:9F:2C:56 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847CE6F4B4E6253BB6B1285A200 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 202 IP address blocks: 192.25.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:4b:4e:62:53:bb:6b:12:85:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=ad312c14-38bb-49b7-b86e-34215341e6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:13:d8:be:09:ba:f4:b1:17:a9:df:6b:05: e8:18:28:f0:02:95:ab:0b:cd:f5:6c:0d:77:f9:f4: d3:d0:b4:fe:30:55:09:4f:05:30:47:63:20:bd:67: d5:6e:69:9b:8f:ca:74:d3:46:65:a7:03:74:4a:01: 2e:5c:74:70:8e:52:c4:63:f6:94:2a:00:44:1f:99: f9:af:23:36:bb:26:08:6b:d6:27:8c:04:66:33:4b: 09:19:12:83:a4:f1:92:a7:28:db:22:95:b8:7f:c9: ed:02:48:55:55:cd:2d:40:7e:ee:98:6b:e1:9f:40: f1:9f:d0:3f:72:5a:80:54:eb:22:55:5e:3b:39:3e: 3d:97:06:ac:2a:77:6f:b2:c5:b5:b9:bb:47:9e:f8: 63:89:e8:f7:c8:9c:e6:f1:53:e6:1c:63:f6:6e:d5: 40:64:2c:09:10:04:71:c7:6f:c6:48:bb:ab:73:07: 61:05:d1:3a:f2:e2:ef:68:38:7b:88:99:64:e5:cd: 2b:9e:d8:cd:f1:c6:b6:de:ed:aa:c7:b4:93:e1:8c: 0f:0f:06:39:b5:72:c8:5d:42:c8:e1:16:a0:b9:4c: 83:22:84:84:f9:4f:f3:d6:4a:14:ef:4a:0a:b4:78: 87:81:f7:91:9d:a1:56:3e:ab:bc:9d:22:b7:3a:d4: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1A:9E:B0:B7:2B:50:36:47:73:74:8B:2C:95:E7:E2:F6:9F:2C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/16dc15d2-2b5d-39cc-bbc4-3a5e1b071724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.25.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:56:d0:e6:8b:1f:72:1d:4b:c6:f9:b4:ae:ed:33:84:e8:8a: 2b:4b:c1:ab:c3:4f:fe:93:ca:cf:b9:21:1e:26:d0:41:e0:40: dd:8d:84:42:12:1d:1b:03:eb:47:a0:15:6a:2c:dd:28:e2:da: 37:32:7d:9c:36:ac:34:53:27:ce:2c:ca:43:75:e1:87:e1:2f: 34:e4:ef:72:7f:c6:52:36:23:2c:e5:49:31:f7:9c:7c:8b:8d: 02:f9:8a:1d:2f:1f:fb:67:e1:c3:21:54:64:b7:c8:1c:e0:47: c0:ba:57:fe:9f:3e:96:3b:4f:35:bb:fe:0b:c7:c8:ae:a8:17: 6d:9c:e9:cb:00:e2:8b:c1:f1:7c:cf:9b:9f:4b:e3:23:4a:3a: 44:9f:3b:e8:ff:ea:fc:db:9b:fc:af:3a:86:eb:3b:22:7d:74: c9:1c:e3:e7:d5:2d:a4:53:28:0e:3a:66:3f:66:0a:96:a0:ed: 3c:c4:19:86:97:92:95:f6:13:cb:09:b4:5e:fa:f6:64:4c:87: 74:a5:ae:74:ee:e7:91:51:ec:e0:c3:5a:a2:c4:6c:c1:0b:f2: 03:af:0c:05:cc:f9:52:c0:8c:a7:e4:08:aa:e0:01:41:04:04: 3c:f9:f7:81:e8:c0:0a:b9:69:4f:b3:fb:06:8e:64:31:39:80: 08:47:32:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb0tOYlO7axKFogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk YWQzMTJjMTQtMzhiYi00OWI3LWI4NmUtMzQyMTUzNDFlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s0T2L4JuvSxF6nfawXoGCjwApWrC831bA13 +fTT0LT+MFUJTwUwR2MgvWfVbmmbj8p000ZlpwN0SgEuXHRwjlLEY/aUKgBEH5n5 ryM2uyYIa9YnjARmM0sJGRKDpPGSpyjbIpW4f8ntAkhVVc0tQH7umGvhn0Dxn9A/ clqAVOsiVV47OT49lwasKndvssW1ubtHnvhjiej3yJzm8VPmHGP2btVAZCwJEARx x2/GSLurcwdhBdE68uLvaDh7iJlk5c0rntjN8ca23u2qx7ST4YwPDwY5tXLIXULI 4RaguUyDIoSE+U/z1koU70oKtHiHgfeRnaFWPqu8nSK3OtSvkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8anrC3K1A2R3N0iyyV5+L2nyxWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTZkYzE1ZDItMmI1ZC0z OWNjLWJiYzQtM2E1ZTFiMDcxNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwBmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJW0OaLH3IdS8b5tK7tM4ToiitLwavDT/6Tys+5IR4m0EHgQN2NhEIS HRsD60egFWos3Sji2jcyfZw2rDRTJ84sykN14YfhLzTk73J/xlI2IyzlSTH3nHyL jQL5ih0vH/tn4cMhVGS3yBzgR8C6V/6fPpY7TzW7/gvHyK6oF22c6csA4ovB8XzP m59L4yNKOkSfO+j/6vzbm/yvOobrOyJ9dMkc4+fVLaRTKA46Zj9mCpag7TzEGYaX kpX2E8sJtF769mRMh3SlrnTu55FR7ODDWqLEbMEL8gOvDAXM+VLAjKfkCKrgAUEE BDz594HowAq5aU+z+waOZDE5gAhHMmE= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:38 2024 by rpki-client on console-fra.rpki-client.org