$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa File: 9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa (raw, json) Hash identifier: OwI/7A20EyJG6Fe3QvXeVZcRnw60v+innT9drQ8v/Ng= Subject key identifier: 02:8F:5A:CB:FE:2D:16:CD:65:CB:3C:6C:16:63:E5:93:ED:4F:32:04 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584765A0E9B8C0E0183B314F4300 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 14061 IP address blocks: 192.34.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:e9:b8:c0:e0:18:3b:31:4f:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=b5920507-e564-4a68-89f4-1a7cc19cf1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:a1:d8:a8:62:83:50:07:99:b1:14:db:67: 71:0d:e5:dd:aa:b1:39:b8:12:a9:b5:d6:e4:9a:33: 72:70:fe:7c:a3:ba:a6:b9:e4:3e:d3:b4:21:21:d8: 6d:f1:ad:d7:52:d7:10:3c:1b:2e:51:8d:e7:46:9f: e2:f1:19:de:d6:6e:7e:86:84:74:e1:34:5b:31:9a: 8c:95:61:ae:8b:a3:3f:a5:c0:42:42:08:e1:e9:ab: 19:c5:42:a1:10:b4:a6:23:92:3f:77:11:4e:d1:fe: 71:19:a1:e2:55:8c:4c:20:a2:1e:57:67:8e:29:a4: aa:f4:ed:e3:52:f9:49:8c:24:b1:95:52:55:62:ba: fe:52:4d:27:71:90:35:05:01:ec:45:63:c4:1b:ba: 38:54:75:2b:c5:6e:47:7e:3a:74:67:af:9a:49:88: a9:d4:87:65:1a:cf:b8:6b:3e:d7:4c:8f:d3:1f:27: 89:d7:ee:55:2a:f8:9e:89:44:cd:6c:ee:b3:c1:53: 92:aa:84:33:7f:f5:5f:18:64:71:e9:21:82:cb:25: c7:4a:08:e1:12:b6:11:42:7c:4a:d4:4a:e9:ac:7a: 00:13:9a:6a:50:39:11:d0:03:84:d4:b5:d7:a2:b7: 72:a6:2e:1f:41:eb:2a:d2:7b:da:74:ab:1a:7a:7a: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8F:5A:CB:FE:2D:16:CD:65:CB:3C:6C:16:63:E5:93:ED:4F:32:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/9e6c2e32-ee59-3df5-a9b2-52442844eca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 192.34.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a7:a6:c5:23:9b:b5:3e:f4:5b:87:37:b9:d3:a7:6d:e1:b4: 70:ce:0d:ac:03:12:91:9b:dc:1e:1f:d8:e4:10:89:1c:7b:2f: a9:0e:a1:2f:cc:cd:02:1a:21:c4:62:5d:87:39:15:81:bc:50: fc:48:51:72:4e:ee:48:ba:05:2b:3e:b5:43:98:1f:58:33:b9: 1f:7f:ea:08:38:ea:3c:40:ee:92:1b:7b:9b:6b:27:4a:f4:3c: b4:fd:d9:79:54:ee:4a:06:55:73:c8:47:04:73:5c:e7:38:05: 7b:9b:c6:2f:14:fb:d8:13:56:73:ae:1e:4d:87:6f:99:1b:ba: b6:ff:27:f8:10:ee:ce:f4:a9:85:b9:97:a7:93:2b:0c:e4:d1: c8:fe:2f:da:b6:39:f5:88:a6:21:72:7f:ce:d5:1a:ef:14:cd: d0:2d:ef:76:36:04:b9:fa:2c:9e:d0:e9:62:d9:11:4b:00:e3: 86:ba:6f:0a:8f:f2:97:68:76:4d:56:08:2e:dc:2a:53:b0:13: 71:ea:12:c4:34:cd:a2:6b:65:38:29:de:3a:4d:03:94:36:de: ad:d5:66:c2:87:7d:2e:e9:66:76:18:fa:23:42:ae:d6:e1:1b: 72:8c:6f:09:3f:a7:e0:37:7c:39:e8:c6:41:95:06:a8:dc:73: e9:e4:08:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloOm4wOAYOzFPQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk YjU5MjA1MDctZTU2NC00YTY4LTg5ZjQtMWE3Y2MxOWNmMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKGh2Khig1AHmbEU22dxDeXdqrE5uBKptdbk mjNycP58o7qmueQ+07QhIdht8a3XUtcQPBsuUY3nRp/i8Rne1m5+hoR04TRbMZqM lWGui6M/pcBCQgjh6asZxUKhELSmI5I/dxFO0f5xGaHiVYxMIKIeV2eOKaSq9O3j UvlJjCSxlVJVYrr+Uk0ncZA1BQHsRWPEG7o4VHUrxW5Hfjp0Z6+aSYip1IdlGs+4 az7XTI/THyeJ1+5VKvieiUTNbO6zwVOSqoQzf/VfGGRx6SGCyyXHSgjhErYRQnxK 1ErprHoAE5pqUDkR0AOE1LXXordypi4fQesq0nvadKsaenqa7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKPWsv+LRbNZcs8bBZj5ZPtTzIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvOWU2YzJlMzItZWU1OS0z ZGY1LWE5YjItNTI0NDI4NDRlY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCnpsUjm7U+9FuHN7nTp23htHDODawDEpGb3B4f2OQQiRx7L6kOoS/M zQIaIcRiXYc5FYG8UPxIUXJO7ki6BSs+tUOYH1gzuR9/6gg46jxA7pIbe5trJ0r0 PLT92XlU7koGVXPIRwRzXOc4BXubxi8U+9gTVnOuHk2Hb5kburb/J/gQ7s70qYW5 l6eTKwzk0cj+L9q2OfWIpiFyf87VGu8UzdAt73Y2BLn6LJ7Q6WLZEUsA44a6bwqP 8pdodk1WCC7cKlOwE3HqEsQ0zaJrZTgp3jpNA5Q23q3VZsKHfS7pZnYY+iNCrtbh G3KMbwk/p+A3fDnoxkGVBqjcc+nkCKI= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:02 2024 by rpki-client on console-ams.rpki-client.org