$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa File: a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa (raw, json) Hash identifier: z1n+8iNchuR9eZorhg2nXJbKVhg/cJ5ZbEPlHod2Og8= Subject key identifier: 28:2B:15:2E:9F:2C:E3:C3:7D:DC:4F:F2:26:41:24:BD:29:E2:18:40 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F43285847818BC5A89D4111DF587CA580 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa Signing time: Fri 11 Oct 2024 13:00:41 +0000 ROA not before: Fri 11 Oct 2024 13:00:41 +0000 ROA not after: Thu 09 Jan 2025 14:00:41 +0000 asID: 134450 IP address blocks: 172.84.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:81:8b:c5:a8:9d:41:11:df:58:7c:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Oct 11 13:00:41 2024 GMT Not After : Jan 9 14:00:41 2025 GMT Subject: CN=4ca8ebba-b295-45d2-b07a-3e94245ac959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:a9:56:e0:79:4b:07:d2:b4:6c:eb:35:a2: ed:b9:73:a4:1a:9a:fc:98:37:a4:e3:8b:7a:21:dc: 31:c0:07:94:25:fe:bd:54:d5:5f:7d:c3:69:e3:2c: c2:35:64:6a:57:a3:e7:17:35:07:98:2f:9f:af:0d: bd:2b:7c:ed:3f:37:7b:bc:53:90:77:a6:17:d6:e2: db:f3:30:fa:b4:b6:98:2f:ac:ad:cc:50:b8:4b:fd: 9f:06:6b:12:65:e7:33:dc:1b:0c:12:6b:61:02:4c: 73:7a:ce:f5:9d:67:07:f4:69:a3:b4:cf:50:3e:99: ec:f4:44:13:a4:df:3e:3f:72:11:be:f4:71:5f:eb: f9:e1:99:29:87:81:31:3d:4e:6b:b0:d8:e8:3f:5c: c4:3f:67:d0:a4:3c:35:79:47:12:ab:3d:7b:ae:f6: dd:12:49:51:17:7e:59:7b:de:02:a5:97:fe:ae:c7: d9:94:b3:c5:db:be:84:7e:2c:26:02:91:42:8d:a0: 98:78:e8:5f:13:30:38:e1:c8:76:67:f8:05:e9:9d: 8f:7d:77:35:ea:5d:32:66:b6:28:88:07:ed:a4:26: 99:37:6f:db:8c:fc:b2:ec:49:32:13:63:a5:e9:b4: 5f:7a:17:5b:2f:a6:1d:f6:b9:2d:e5:b2:fd:df:f5: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2B:15:2E:9F:2C:E3:C3:7D:DC:4F:F2:26:41:24:BD:29:E2:18:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:ab:d3:c2:7f:0e:4c:59:e1:51:9e:9d:40:a6:ce:29:66: 17:4b:1c:4a:7d:cf:47:19:91:56:48:a5:97:f2:99:2b:4e:f2: cb:92:69:c5:90:ca:c1:3d:3f:fd:95:29:96:58:50:2c:2a:a0: dc:d0:89:12:b6:ec:e9:38:33:3f:68:bf:7a:4d:e3:ae:1a:9a: 48:e2:b6:c7:f9:cc:55:28:1b:fc:dc:35:0f:87:27:5b:01:7f: aa:8a:76:0a:54:59:26:44:38:2a:50:a0:ba:04:0c:e3:85:ad: 88:5b:3f:2c:32:5a:3c:ce:c2:20:f2:88:e7:fa:cc:dc:87:59: 81:3f:d1:c7:43:f0:d3:bd:8c:89:b9:79:f5:27:07:36:c8:74: 5c:54:17:95:4a:4a:ce:52:67:b2:64:c6:18:ca:1b:f5:b7:11: 64:86:70:65:e3:a6:27:17:64:6e:09:e3:eb:f5:9b:69:34:2e: b6:ec:eb:23:87:34:0f:0d:5d:ca:c8:94:f3:14:40:8a:7c:0a: 2b:7e:43:21:b0:5a:71:7d:f4:71:fc:a1:15:d0:f6:8f:53:67: 96:3b:5a:fb:ae:c0:92:72:d1:bd:bf:c8:12:fa:7c:40:4f:b5: 4e:10:35:57:1b:39:59:d4:ff:50:4d:ba:5c:99:95:0f:40:f8: 28:19:be:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeBi8WonUER31h8pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI0MTAxMTEzMDA0MVoXDTI1MDEwOTE0MDA0MVowLzEtMCsGA1UEAxMk NGNhOGViYmEtYjI5NS00NWQyLWIwN2EtM2U5NDI0NWFjOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWepVuB5SwfStGzrNaLtuXOkGpr8mDek44t6 IdwxwAeUJf69VNVffcNp4yzCNWRqV6PnFzUHmC+frw29K3ztPzd7vFOQd6YX1uLb 8zD6tLaYL6ytzFC4S/2fBmsSZecz3BsMEmthAkxzes71nWcH9GmjtM9QPpns9EQT pN8+P3IRvvRxX+v54Zkph4ExPU5rsNjoP1zEP2fQpDw1eUcSqz17rvbdEklRF35Z e94CpZf+rsfZlLPF276EfiwmApFCjaCYeOhfEzA44ch2Z/gF6Z2PfXc16l0yZrYo iAftpCaZN2/bjPyy7EkyE2Ol6bRfehdbL6Yd9rkt5bL93/WdpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgrFS6fLOPDfdxP8iZBJL0p4hhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYTBiZWMyYjQtZWM3OC0z ZjZjLWEyNmEtNjJkZmY0YmJjMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMyq9PCfw5MWeFRnp1Aps4pZhdLHEp9z0cZkVZIpZfymStO8suSacWQ ysE9P/2VKZZYUCwqoNzQiRK27Ok4Mz9ov3pN464amkjitsf5zFUoG/zcNQ+HJ1sB f6qKdgpUWSZEOCpQoLoEDOOFrYhbPywyWjzOwiDyiOf6zNyHWYE/0cdD8NO9jIm5 efUnBzbIdFxUF5VKSs5SZ7JkxhjKG/W3EWSGcGXjpicXZG4J4+v1m2k0Lrbs6yOH NA8NXcrIlPMUQIp8Cit+QyGwWnF99HH8oRXQ9o9TZ5Y7WvuuwJJy0b2/yBL6fEBP tU4QNVcbOVnU/1BNulyZlQ9A+CgZvhk= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org