$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa File: 374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa (raw, json) Hash identifier: aoPRJN278ldJH6ErEZ3VmJNFaxtmxKCrAs7Jk4TalSE= Subject key identifier: 57:B6:3E:74:9D:54:60:37:78:2B:88:00:3A:69:31:6B:26:76:80:63 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285847A73BEAD896A7BD16EE5FF780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 23918 IP address blocks: 192.67.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:ea:d8:96:a7:bd:16:ee:5f:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=eee548cd-c9ca-432f-8c81-87d22f23cf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:05:c5:19:b4:49:69:25:dd:a4:f1:13:56: 87:5c:f5:51:97:9d:38:3d:b5:e6:33:32:ae:b8:9f: d9:b8:32:06:91:fb:37:bd:41:88:1d:46:d7:32:4f: 8a:87:6b:1f:e7:59:17:95:fc:c3:15:11:b1:1a:6e: e9:73:32:2f:6e:01:90:ac:1b:1a:fd:3b:a6:0c:a8: 08:03:14:45:c8:a8:22:f3:1d:fd:45:c2:3d:ee:ce: a4:c4:72:b3:54:2c:43:ca:33:4b:95:79:27:4f:bf: 17:f4:1a:bd:04:fb:2f:87:41:cb:f4:32:69:b7:95: 8f:57:bc:c8:5a:40:87:99:29:6e:69:64:2a:1a:5c: ad:dc:c6:1c:bf:cd:b0:c7:98:6e:8e:cb:5a:36:e1: 62:b1:27:e5:50:69:1c:61:bf:e3:67:14:52:29:95: 96:3b:7a:ac:d1:01:de:86:8b:bf:4c:a0:2a:b7:d5: b4:2e:32:28:9e:c9:51:05:65:32:81:6c:f6:91:f6: fd:86:47:c6:a8:b2:e6:51:34:15:96:0d:05:43:1b: 97:75:a7:0a:97:ca:7d:f2:52:0d:0b:25:49:40:45: dc:2a:f8:35:3c:d3:b2:67:6b:06:40:4e:de:40:2b: 47:af:a5:f6:2b:79:6c:be:38:74:a5:c1:9a:db:f0: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B6:3E:74:9D:54:60:37:78:2B:88:00:3A:69:31:6B:26:76:80:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/374a1ee7-9d31-3c69-9b87-ae090bfe7db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.67.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:13:9b:84:e4:f3:6a:5c:aa:a8:d6:21:2a:ec:af:be:6d:78: fb:57:4d:68:20:fc:23:91:05:96:c4:39:79:44:24:e9:0e:86: 88:d4:66:f1:94:f9:02:35:5c:0d:85:f2:62:fa:aa:e6:ad:b8: 3e:09:b9:37:91:7f:0c:34:27:d3:51:f0:b7:36:0f:18:87:a8: 3d:0d:7a:40:e6:8e:32:60:49:fe:cb:89:9b:6a:8d:2e:0c:17: c9:a1:36:7d:9e:35:af:54:10:89:ec:7e:fa:e6:bc:5b:23:26: bd:f2:fb:64:53:64:d0:93:0c:02:22:01:51:e2:99:c1:bf:22: 11:81:1f:4d:ad:41:d6:9b:15:cc:3e:d9:57:14:f5:cc:dd:77: 4e:f7:f0:e0:f0:d0:56:51:98:5d:e0:2e:79:0a:80:cc:8e:73: b0:72:36:3e:58:1a:36:71:b9:0b:c6:41:6b:93:5c:d8:62:16: 29:d7:99:f8:43:a1:75:41:6c:35:ce:bc:1f:e6:79:bf:ea:04: 12:8c:3b:22:88:ca:12:4b:bd:0c:f5:d3:4a:59:92:2b:34:11: a4:7f:e7:44:b1:9f:0c:3e:13:c6:2c:2c:0a:40:24:98:5e:b1: ee:c1:b1:c8:ed:ac:88:79:ea:54:eb:ae:85:75:9f:f1:71:af: ed:f8:3d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+rYlqe9Fu5f94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZWVlNTQ4Y2QtYzljYS00MzJmLThjODEtODdkMjJmMjNjZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq4FxRm0SWkl3aTxE1aHXPVRl504PbXmMzKu uJ/ZuDIGkfs3vUGIHUbXMk+Kh2sf51kXlfzDFRGxGm7pczIvbgGQrBsa/TumDKgI AxRFyKgi8x39RcI97s6kxHKzVCxDyjNLlXknT78X9Bq9BPsvh0HL9DJpt5WPV7zI WkCHmSluaWQqGlyt3MYcv82wx5hujstaNuFisSflUGkcYb/jZxRSKZWWO3qs0QHe hou/TKAqt9W0LjIonslRBWUygWz2kfb9hkfGqLLmUTQVlg0FQxuXdacKl8p98lIN CyVJQEXcKvg1PNOyZ2sGQE7eQCtHr6X2K3lsvjh0pcGa2/AEvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe2PnSdVGA3eCuIADppMWsmdoBjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzc0YTFlZTctOWQzMS0z YzY5LTliODctYWUwOTBiZmU3ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwEPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4Tm4Tk82pcqqjWISrsr75tePtXTWgg/CORBZbEOXlEJOkOhojUZvGU +QI1XA2F8mL6quatuD4JuTeRfww0J9NR8Lc2DxiHqD0NekDmjjJgSf7LiZtqjS4M F8mhNn2eNa9UEInsfvrmvFsjJr3y+2RTZNCTDAIiAVHimcG/IhGBH02tQdabFcw+ 2VcU9czdd0738ODw0FZRmF3gLnkKgMyOc7ByNj5YGjZxuQvGQWuTXNhiFinXmfhD oXVBbDXOvB/meb/qBBKMOyKIyhJLvQz100pZkis0EaR/50Sxnww+E8YsLApAJJhe se7BscjtrIh56lTrroV1n/Fxr+34Pfc= -----END CERTIFICATE-----Generated at Thu Nov 21 15:29:00 2024 by rpki-client on console-fra.rpki-client.org