$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa File: 11be9af3-f515-32ba-a037-d02c859f7b8e.roa (raw, json) Hash identifier: I5kEoNT7nJcfmNNdBHl6phXaK0v+GcibIaxJ1Iw4Etw= Subject key identifier: A4:F3:3F:C2:92:95:AD:4F:A5:48:76:20:EA:9A:A6:06:DB:58:44:80 Certificate issuer: /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Certificate serial: 010D0C9F43285847A5AAD7858A0425A7447BBEA0 Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa Signing time: Thu 24 Oct 2024 11:32:33 +0000 ROA not before: Thu 24 Oct 2024 11:32:33 +0000 ROA not after: Wed 22 Jan 2025 12:32:33 +0000 asID: 16276 IP address blocks: 40.160.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:aa:d7:85:8a:04:25:a7:44:7b:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Validity Not Before: Oct 24 11:32:33 2024 GMT Not After : Jan 22 12:32:33 2025 GMT Subject: CN=97fdfd0e-720c-45e6-84a9-63eb008abaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:89:ff:46:88:ff:83:b7:a6:ad:c0:bf:f1: 27:ee:db:a2:e7:fd:fe:15:f5:f3:0b:58:76:78:5f: 96:12:56:ac:f5:76:6e:44:f9:f5:7b:ef:e5:78:ef: 97:8b:47:13:ce:06:0f:ca:e0:8e:c9:7c:7c:99:29: 6f:38:c5:34:66:7f:8e:cd:03:24:66:a7:a1:6d:01: 99:0d:18:df:c1:49:52:6b:f0:b9:bd:2b:30:d9:34: 24:d9:7b:c5:2a:2c:cd:ab:68:15:5f:05:52:e7:cb: c7:89:b5:04:bd:83:28:2c:04:3b:e1:80:d7:fd:24: ea:47:02:1b:05:c2:70:ab:c9:f8:d1:45:58:b9:38: e7:d1:40:77:26:35:39:1b:9e:9b:7d:4c:9c:00:aa: 92:5b:02:f8:d0:1d:ce:24:c8:90:cf:a1:58:72:c6: 3b:04:cf:c7:a7:b8:7f:0b:d6:f0:93:a8:58:a2:6c: 33:be:5c:e0:45:fe:aa:b1:e4:e1:52:9c:b8:29:43: fd:6e:13:6b:71:33:5c:1c:bc:19:e3:90:ec:b9:53: 7b:4e:84:15:ef:b7:a8:b4:cb:fd:d9:4f:e5:b1:09: 2a:4f:55:aa:4c:81:90:d6:51:6f:0f:4a:a5:ba:98: 6b:92:72:e3:01:37:ed:8e:9a:57:1f:62:ce:42:29: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F3:3F:C2:92:95:AD:4F:A5:48:76:20:EA:9A:A6:06:DB:58:44:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/11be9af3-f515-32ba-a037-d02c859f7b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl X509v3 Authority Key Identifier: keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer sbgp-ipAddrBlock: critical IPv4: 40.160.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5b:bc:e2:ad:c4:69:b0:04:76:17:72:f8:4b:a8:06:2e:f3: 8b:1c:9e:72:2b:4a:66:d3:93:d4:db:e0:42:97:8c:05:68:20: 2a:4d:1d:c8:a0:6f:89:29:42:df:b7:ea:ea:45:79:e9:2a:db: 4a:54:1e:f9:be:ca:ff:c0:c3:65:35:34:2b:6c:72:28:a6:ff: 18:1b:81:b9:b7:ad:cd:b1:eb:72:96:9d:8f:26:cd:3b:7d:55: 35:19:41:ca:96:7d:08:cf:5e:a3:92:a0:ef:d6:7c:dc:6c:0a: 88:8b:7d:a9:76:52:00:70:3a:86:d7:5f:4f:f0:9b:e7:a4:95: 82:5a:94:b8:e3:4d:ee:13:bc:2b:f0:34:31:c7:be:d5:9f:e7: 63:ec:df:49:35:c2:cb:0d:aa:eb:c2:66:16:86:d0:10:93:77: 9b:6e:39:83:c0:62:c8:78:1b:03:1a:d5:a5:05:75:96:86:d2: 14:a3:e3:ab:80:34:69:a5:09:37:d6:71:cd:ae:c7:f9:8f:f7: 38:b6:de:14:41:4c:29:6d:e7:34:c0:45:69:68:56:36:34:67: 47:88:40:f0:c1:db:85:df:ca:e2:61:01:56:a9:0e:64:bd:38: e5:62:9a:da:9f:b4:b9:50:10:ca:c2:39:db:5d:31:82:0a:91: 3e:84:64:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEelqteFigQlp0R7vqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2NmU0YTAtNTgxMC00YmI0LTljNTQtN2Y3MDNjY2Y0 Mjg5MB4XDTI0MTAyNDExMzIzM1oXDTI1MDEyMjEyMzIzM1owLzEtMCsGA1UEAxMk OTdmZGZkMGUtNzIwYy00NWU2LTg0YTktNjNlYjAwOGFiYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvGJ/0aI/4O3pq3Av/En7tui5/3+FfXzC1h2 eF+WElas9XZuRPn1e+/leO+Xi0cTzgYPyuCOyXx8mSlvOMU0Zn+OzQMkZqehbQGZ DRjfwUlSa/C5vSsw2TQk2XvFKizNq2gVXwVS58vHibUEvYMoLAQ74YDX/STqRwIb BcJwq8n40UVYuTjn0UB3JjU5G56bfUycAKqSWwL40B3OJMiQz6FYcsY7BM/Hp7h/ C9bwk6hYomwzvlzgRf6qseThUpy4KUP9bhNrcTNcHLwZ45DsuVN7ToQV77eotMv9 2U/lsQkqT1WqTIGQ1lFvD0qluphrknLjATftjppXH2LOQikWywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTzP8KSla1PpUh2IOqapgbbWESAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2 ZTRhMC01ODEwLTRiYjQtOWM1NC03ZjcwM2NjZjQyODkvMTFiZTlhZjMtZjUxNS0z MmJhLWEwMzctZDAyYzg1OWY3YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjg2NmU0YTAtNTgxMC00YmI0LTlj NTQtN2Y3MDNjY2Y0Mjg5LzY4NjZlNGEwLTU4MTAtNGJiNC05YzU0LTdmNzAzY2Nm NDI4OS5jcmwwHwYDVR0jBBgwFoAUEHunC1iP+wF1ygZ5ghjPQfW9FmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2ZTRhMC01ODEwLTRiYjQtOWM1NC03Zjcw M2NjZjQyODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKKDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRbvOKtxGmwBHYXcvhLqAYu84scnnIrSmbTk9Tb4EKXjAVoICpNHcig b4kpQt+36upFeekq20pUHvm+yv/Aw2U1NCtsciim/xgbgbm3rc2x63KWnY8mzTt9 VTUZQcqWfQjPXqOSoO/WfNxsCoiLfal2UgBwOobXX0/wm+eklYJalLjjTe4TvCvw NDHHvtWf52Ps30k1wssNquvCZhaG0BCTd5tuOYPAYsh4GwMa1aUFdZaG0hSj46uA NGmlCTfWcc2ux/mP9zi23hRBTClt5zTARWloVjY0Z0eIQPDB24XfyuJhAVapDmS9 OOVimtqftLlQEMrCOdtdMYIKkT6EZCY= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:05 2024 by rpki-client on console-fra.rpki-client.org