$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d72bebd0-f057-30db-96a7-045cb12a8b5e.roa File: d72bebd0-f057-30db-96a7-045cb12a8b5e.roa (raw, json) Hash identifier: esFu1S7ArGOQU3VwPvZ0lCiAhChG4zFpdakB2RGLMxw= Subject key identifier: 0F:30:EA:26:0A:C9:64:A8:50:80:B5:74:70:DE:80:B6:F2:86:24:8D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285847AE36BC4A804806567F4CCE80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d72bebd0-f057-30db-96a7-045cb12a8b5e.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 56941 IP address blocks: 192.78.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:bc:4a:80:48:06:56:7f:4c:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=c4b885f6-543f-4e7b-b9a6-05043c7b6063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:6a:72:49:96:50:63:da:ce:b8:6a:18:d8: 9e:98:25:4e:59:10:23:78:fd:cf:fc:e4:66:ff:e1: 3f:cb:dc:76:fc:cf:a0:4f:9a:3b:d3:8f:f9:94:2d: 57:65:ef:90:6a:5a:f0:85:d1:3d:01:f9:93:aa:6c: d0:de:04:6a:d4:7e:87:93:69:08:84:c5:d0:3a:49: 9c:8a:ac:9d:4f:b1:60:ef:21:d4:12:e9:20:af:20: 27:4f:8f:38:2f:5b:42:d1:5d:53:d4:87:c2:04:86: 31:3a:f4:82:36:29:94:93:2d:46:71:91:04:7a:f5: 50:dd:73:16:0a:a6:36:7b:08:31:67:ff:83:57:58: 49:d6:09:28:db:cd:bd:91:98:28:17:16:58:0d:8e: aa:3b:8c:ef:32:03:b7:75:f7:dc:db:71:de:bb:35: 19:cc:6d:a2:06:81:e2:cd:07:7e:fe:45:44:24:fc: 38:bf:22:e0:cd:ce:68:80:72:ac:8a:c1:04:a9:ab: 85:67:2a:ed:50:12:a0:15:c8:3b:14:cb:d7:6e:9c: fe:c5:27:73:62:9c:53:4b:a8:d2:70:03:f8:64:82: 19:30:d3:8b:4a:bf:5e:ed:c4:3f:8c:45:c4:d0:1c: 2d:cb:b7:e6:75:c5:65:78:b3:1b:ac:0d:88:f5:47: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:30:EA:26:0A:C9:64:A8:50:80:B5:74:70:DE:80:B6:F2:86:24:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d72bebd0-f057-30db-96a7-045cb12a8b5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.78.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ea:01:df:1d:0f:bd:d1:cc:d0:05:22:13:31:07:6f:74:ec: a8:03:50:34:66:45:3b:e8:1c:24:1c:93:7e:32:ee:87:61:8c: 44:38:09:92:8f:f8:02:e2:4f:cc:46:be:b5:fe:b9:97:11:b4: 0d:5c:96:03:fb:69:c2:e3:4a:0a:f7:2a:22:d0:37:67:c1:e7: 4e:73:47:84:c1:44:f7:18:e5:9b:31:1d:04:85:9e:98:9d:88: 14:5b:5d:73:09:7f:0b:6c:73:76:a3:c2:10:70:c4:99:e0:53: bb:dc:6f:e9:9f:b2:61:cf:bd:27:31:b2:5f:b9:96:15:38:f3: 8d:03:c9:49:ed:e1:df:81:4e:d9:d1:bb:0f:be:4e:de:f1:da: 91:43:4b:d7:d2:4a:fe:86:1d:a6:2f:57:f0:1c:5d:6e:41:02: fc:7e:79:e8:9d:d7:3b:61:fd:3f:40:25:1e:41:37:9f:53:dd: 86:3d:1c:d8:f0:5a:31:89:aa:a9:8a:17:24:b6:6d:d0:38:6e: 77:59:9b:15:a5:0e:bc:07:8d:52:3a:33:44:5f:8d:20:21:3e: 7d:b5:28:df:4d:f3:5b:be:25:7c:9b:f7:5f:0f:e9:fa:d9:b4: 49:f7:08:9f:1a:c3:1d:73:25:7c:ff:1b:b7:75:ce:41:ef:31: 5f:19:cf:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNrxKgEgGVn9MzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YzRiODg1ZjYtNTQzZi00ZTdiLWI5YTYtMDUwNDNjN2I2MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKdqckmWUGPazrhqGNiemCVOWRAjeP3P/ORm /+E/y9x2/M+gT5o704/5lC1XZe+QalrwhdE9AfmTqmzQ3gRq1H6Hk2kIhMXQOkmc iqydT7Fg7yHUEukgryAnT484L1tC0V1T1IfCBIYxOvSCNimUky1GcZEEevVQ3XMW CqY2ewgxZ/+DV1hJ1gko2829kZgoFxZYDY6qO4zvMgO3dffc23HeuzUZzG2iBoHi zQd+/kVEJPw4vyLgzc5ogHKsisEEqauFZyrtUBKgFcg7FMvXbpz+xSdzYpxTS6jS cAP4ZIIZMNOLSr9e7cQ/jEXE0Bwty7fmdcVleLMbrA2I9UdocwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8w6iYKyWSoUIC1dHDegLbyhiSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDcyYmViZDAtZjA1Ny0z MGRiLTk2YTctMDQ1Y2IxMmE4YjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwE4uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjqAd8dD73RzNAFIhMxB2907KgDUDRmRTvoHCQck34y7odhjEQ4CZKP +ALiT8xGvrX+uZcRtA1clgP7acLjSgr3KiLQN2fB505zR4TBRPcY5ZsxHQSFnpid iBRbXXMJfwtsc3ajwhBwxJngU7vcb+mfsmHPvScxsl+5lhU4840DyUnt4d+BTtnR uw++Tt7x2pFDS9fSSv6GHaYvV/AcXW5BAvx+eeid1zth/T9AJR5BN59T3YY9HNjw WjGJqqmKFyS2bdA4bndZmxWlDrwHjVI6M0RfjSAhPn21KN9N81u+JXyb918P6frZ tEn3CJ8awx1zJXz/G7d1zkHvMV8Zz+8= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:22 2024 by rpki-client on console-ams.rpki-client.org