$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/c0a28294-1d63-3b20-a63e-87954a0cc75c.roa File: c0a28294-1d63-3b20-a63e-87954a0cc75c.roa (raw, json) Hash identifier: 3XhbNi9n+i0uGzmdaJ0nhlVtuL3lI0lj8xzcj+gc59U= Subject key identifier: 95:94:C8:B6:C6:F5:4D:2A:F6:5F:E0:50:96:7C:BF:90:41:47:78:C2 Certificate issuer: /CN=97916c1f-c888-441b-ba14-786bf9f69cfb Certificate serial: 010D0C9F432858479D76B705F9106C1951AAD810 Authority key identifier: E8:AC:7A:7B:F7:3D:66:E7:D8:0F:8F:FD:34:04:0D:D3:F4:33:DC:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/c0a28294-1d63-3b20-a63e-87954a0cc75c.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 8075 IP address blocks: 216.73.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/97916c1f-c888-441b-ba14-786bf9f69cfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/97916c1f-c888-441b-ba14-786bf9f69cfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b7:05:f9:10:6c:19:51:aa:d8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97916c1f-c888-441b-ba14-786bf9f69cfb Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=e2459ea0-e811-4ab2-b0b1-c85c3771ccb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:f4:68:c4:57:15:66:2c:24:a0:f3:49:34: 0b:fb:3d:cc:3e:49:64:91:5b:c8:87:eb:74:0e:29: b5:7b:b7:f5:93:31:21:12:60:69:e7:a3:92:e5:28: 5a:31:33:28:23:c6:73:98:ec:7e:92:4a:8a:a2:c5: 64:64:2a:f7:1b:ed:92:e6:6c:c4:00:31:75:72:3e: 9e:bd:d2:c6:a1:68:4c:e5:0f:c9:75:ec:36:cd:9b: 3e:ef:28:38:37:d3:9f:4d:37:2f:e9:f1:e9:fd:45: c5:77:54:11:51:7f:81:49:7c:db:f4:06:0c:58:be: a5:78:bf:87:dd:1f:ed:c2:1a:77:3b:54:00:a9:47: a2:5d:d1:04:29:05:ba:43:35:60:3a:70:25:20:f0: c0:0a:51:4a:b8:eb:28:21:76:c0:5a:e7:40:8f:68: a1:ec:17:7a:84:01:f9:b6:05:8d:85:ca:5b:37:08: 32:4b:3b:1b:88:93:40:38:cc:d6:aa:30:e2:7a:34: 64:94:82:52:81:3a:2f:b9:6c:d5:b5:5f:6e:e1:db: 26:39:f3:e3:c5:87:67:8e:6f:39:94:70:67:dc:9e: c9:7a:7a:b9:4c:c3:30:80:90:07:c7:83:33:70:1a: de:22:0c:37:44:df:96:ff:18:87:c4:31:59:9d:36: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:94:C8:B6:C6:F5:4D:2A:F6:5F:E0:50:96:7C:BF:90:41:47:78:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/c0a28294-1d63-3b20-a63e-87954a0cc75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/97916c1f-c888-441b-ba14-786bf9f69cfb.crl X509v3 Authority Key Identifier: keyid:E8:AC:7A:7B:F7:3D:66:E7:D8:0F:8F:FD:34:04:0D:D3:F4:33:DC:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb.cer sbgp-ipAddrBlock: critical IPv4: 216.73.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:af:de:35:e4:a6:7f:06:b3:ed:ac:1d:2e:65:23:25:7b: f2:93:28:db:1d:06:04:ed:da:1b:13:7f:04:ea:23:7a:8d:d5: 9a:b4:14:74:34:de:37:be:1a:9a:c4:a9:9f:bc:f8:d7:0d:85: db:42:3c:44:43:a4:88:2c:fb:0c:02:69:91:6b:0d:62:da:65: c8:76:1a:2d:60:57:5e:46:83:fb:97:12:1b:8a:dc:e2:41:33: 84:9d:ac:3f:97:5d:71:92:43:91:13:6a:3c:df:31:e6:0f:74: 60:85:49:0b:16:0f:01:e6:1f:46:94:a1:0e:1b:db:e5:98:7f: 21:75:e3:19:db:a2:77:c2:ca:09:5d:cf:16:b3:d2:25:12:4a: 9d:a2:b2:ca:d8:c6:1d:b6:59:9a:ec:9a:61:6d:37:25:a1:3c: 25:e5:e2:fc:6d:d1:e7:b9:28:f3:fc:4c:43:31:fc:18:2b:a2: f4:04:0a:16:ce:ca:e3:85:38:33:9b:b9:c4:28:66:82:7b:88: ac:30:18:53:e3:1b:fc:22:7f:e4:3f:2c:43:9b:be:a3:e5:43: 0d:ab:28:11:cf:01:da:a2:4c:79:9e:cf:45:ae:58:68:3c:3e: 6d:f9:8c:86:7c:01:76:ea:ff:3c:15:9e:d8:b6:ae:07:9d:24: 82:00:d0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrcF+RBsGVGq2BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc5MTZjMWYtYzg4OC00NDFiLWJhMTQtNzg2YmY5ZjY5 Y2ZiMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTI0NTllYTAtZTgxMS00YWIyLWIwYjEtYzg1YzM3NzFjY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodn0aMRXFWYsJKDzSTQL+z3MPklkkVvIh+t0 Dim1e7f1kzEhEmBp56OS5ShaMTMoI8ZzmOx+kkqKosVkZCr3G+2S5mzEADF1cj6e vdLGoWhM5Q/Jdew2zZs+7yg4N9OfTTcv6fHp/UXFd1QRUX+BSXzb9AYMWL6leL+H 3R/twhp3O1QAqUeiXdEEKQW6QzVgOnAlIPDAClFKuOsoIXbAWudAj2ih7Bd6hAH5 tgWNhcpbNwgySzsbiJNAOMzWqjDiejRklIJSgTovuWzVtV9u4dsmOfPjxYdnjm85 lHBn3J7Jenq5TMMwgJAHx4MzcBreIgw3RN+W/xiHxDFZnTbaFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWUyLbG9U0q9l/gUJZ8v5BBR3jCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Nzkx NmMxZi1jODg4LTQ0MWItYmExNC03ODZiZjlmNjljZmIvYzBhMjgyOTQtMWQ2My0z YjIwLWE2M2UtODc5NTRhMGNjNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTc5MTZjMWYtYzg4OC00NDFiLWJh MTQtNzg2YmY5ZjY5Y2ZiLzk3OTE2YzFmLWM4ODgtNDQxYi1iYTE0LTc4NmJmOWY2 OWNmYi5jcmwwHwYDVR0jBBgwFoAU6Kx6e/c9ZufYD4/9NAQN0/Qz3AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NzkxNmMxZi1jODg4LTQ0MWItYmExNC03ODZi ZjlmNjljZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Em7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5Kr9415KZ/BrPtrB0uZSMle/KTKNsdBgTt2hsTfwTqI3qN1Zq0FHQ0 3je+GprEqZ+8+NcNhdtCPERDpIgs+wwCaZFrDWLaZch2Gi1gV15Gg/uXEhuK3OJB M4SdrD+XXXGSQ5ETajzfMeYPdGCFSQsWDwHmH0aUoQ4b2+WYfyF14xnbonfCygld zxaz0iUSSp2issrYxh22WZrsmmFtNyWhPCXl4vxt0ee5KPP8TEMx/BgrovQEChbO yuOFODObucQoZoJ7iKwwGFPjG/wif+Q/LEObvqPlQw2rKBHPAdqiTHmez0WuWGg8 Pm35jIZ8AXbq/zwVnti2rgedJIIA0Jo= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org