$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa File: 85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa (raw, json) Hash identifier: gexVTgVqhmOY8hVxRcmvMX7BBfNLqafaR7R0jPbtUXY= Subject key identifier: 71:DB:CC:14:C3:E0:44:E7:BD:43:C7:16:32:36:67:68:DD:4A:ED:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A87C5D0D0FC143D222500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 184.21.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:87:c5:d0:d0:fc:14:3d:22:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=4bc02f3e-55a4-410f-a508-fd278abec23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e2:e2:be:3b:a7:aa:a6:2b:64:e1:c1:17:fa: 7a:e2:43:a2:d8:7f:5c:e0:f8:a5:39:00:6f:28:15: d1:dc:b7:f7:9e:be:c0:a5:e9:6d:9b:e6:c1:04:38: 8a:90:bc:22:0e:56:bd:4f:8b:6d:b3:68:d1:92:6d: b3:66:9e:fc:b1:7e:d1:a0:e5:34:02:3c:f5:3e:9c: 46:96:60:e4:0a:6a:0c:1f:9a:ee:62:12:54:4e:c9: 2f:be:87:25:26:cf:cd:91:49:a8:48:81:34:58:c9: 38:0f:a9:b4:17:02:a0:29:f1:fc:bb:78:19:61:1a: 1e:02:93:53:aa:f5:20:ca:ac:f6:56:39:9d:96:0a: 58:37:8f:18:46:4b:fd:19:bf:96:66:98:33:ce:aa: cd:65:7c:35:cc:81:7b:b9:c5:0d:09:45:a3:b8:ba: f4:d7:f1:c5:57:d6:65:cb:7e:96:8f:da:bc:c6:ea: 12:5d:15:82:00:e7:96:16:49:f4:82:2d:3a:13:2d: 9d:aa:9a:db:eb:95:de:c5:cd:50:8e:eb:7f:c6:eb: e3:8e:c6:3c:31:fb:88:a6:f5:03:36:e8:23:da:bd: 7c:aa:84:8c:db:59:e9:ed:dc:0c:b0:25:cc:3e:a3: 16:60:ea:01:8b:45:a7:21:9d:ec:fd:c9:f9:16:04: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DB:CC:14:C3:E0:44:E7:BD:43:C7:16:32:36:67:68:DD:4A:ED:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2c:4d:23:c0:1a:ff:1d:3f:04:56:39:9c:53:fd:1c:24:86: cb:d3:88:ee:e5:66:39:76:3d:b3:19:89:2f:32:60:d7:c8:93: 23:17:9b:f9:31:fb:36:4c:90:93:aa:99:8a:98:c5:e1:3c:a6: c5:9d:63:ad:cd:21:2b:de:54:c0:68:f2:61:49:18:98:59:2f: 58:87:38:b1:8f:e3:9c:03:3c:b1:a0:6f:01:66:8c:48:67:c7: bc:d1:a7:0e:4e:d6:66:ee:9f:6a:9f:bf:0b:ad:8b:bc:61:13: 14:f2:2e:71:99:31:8a:60:54:d2:d4:b0:c9:4e:33:39:83:f4: 44:8d:04:ba:fa:ce:af:aa:60:65:f8:0d:6c:f9:17:8d:54:52: 7d:0c:54:17:00:ac:34:f0:10:47:d4:61:48:cd:b6:ed:e4:a4: 3f:af:21:bf:e3:64:cf:cd:88:b0:49:49:0b:b7:64:c4:5a:28: 47:31:a5:6d:0b:4f:c1:72:05:e8:4b:92:85:cf:88:39:50:1e: 88:91:b2:a7:74:1d:f4:0f:24:86:45:9c:5b:73:5f:f8:3b:2b: 8f:d0:c3:74:c0:f9:7a:31:ad:14:7c:e6:3b:0c:a6:52:5b:6e: fd:e8:0a:fb:f7:47:3f:1a:4e:a4:ad:36:16:2d:c7:48:9c:70: 6c:41:e2:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKofF0ND8FD0iJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NGJjMDJmM2UtNTVhNC00MTBmLWE1MDgtZmQyNzhhYmVjMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eLivjunqqYrZOHBF/p64kOi2H9c4PilOQBv KBXR3Lf3nr7Apeltm+bBBDiKkLwiDla9T4tts2jRkm2zZp78sX7RoOU0Ajz1PpxG lmDkCmoMH5ruYhJUTskvvoclJs/NkUmoSIE0WMk4D6m0FwKgKfH8u3gZYRoeApNT qvUgyqz2VjmdlgpYN48YRkv9Gb+WZpgzzqrNZXw1zIF7ucUNCUWjuLr01/HFV9Zl y36Wj9q8xuoSXRWCAOeWFkn0gi06Ey2dqprb65Xexc1Qjut/xuvjjsY8MfuIpvUD Nugj2r18qoSM21np7dwMsCXMPqMWYOoBi0WnIZ3s/cn5FgSTTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHbzBTD4ETnvUPHFjI2Z2jdSu0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVmMDg0MzMtMTJlMy0z ZDllLWJmZGYtMGVmM2QyZTZjNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABosTSPAGv8dPwRWOZxT/RwkhsvTiO7lZjl2PbMZiS8yYNfIkyMXm/kx +zZMkJOqmYqYxeE8psWdY63NISveVMBo8mFJGJhZL1iHOLGP45wDPLGgbwFmjEhn x7zRpw5O1mbun2qfvwuti7xhExTyLnGZMYpgVNLUsMlOMzmD9ESNBLr6zq+qYGX4 DWz5F41UUn0MVBcArDTwEEfUYUjNtu3kpD+vIb/jZM/NiLBJSQu3ZMRaKEcxpW0L T8FyBehLkoXPiDlQHoiRsqd0HfQPJIZFnFtzX/g7K4/Qw3TA+XoxrRR85jsMplJb bv3oCvv3Rz8aTqStNhYtx0iccGxB4qY= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:53 2024 by rpki-client on console-fra.rpki-client.org