$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c87c4f78-e88e-34b7-806f-b398043a8bfa.roa File: c87c4f78-e88e-34b7-806f-b398043a8bfa.roa (raw, json) Hash identifier: XSzo3wO+VqX/LeytfWBSgg8pKPSbCAMTKPi8OyQbrtM= Subject key identifier: E4:68:A0:61:A5:D0:37:BF:AF:96:72:88:61:9B:9E:D4:4D:68:BA:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473AE6E3A9859D92259F6BF300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c87c4f78-e88e-34b7-806f-b398043a8bfa.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.69.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:e6:e3:a9:85:9d:92:25:9f:6b:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=0aca3751-420b-4f12-9a0e-7d1c53bc62a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:8d:71:68:8c:42:0c:ee:9a:ba:49:3e:06: 96:24:fc:3f:8c:d1:98:aa:28:10:fc:45:33:37:fa: 20:ff:49:88:2a:14:09:cc:12:a3:da:3f:fc:cc:a7: a1:d8:38:da:3f:3b:a6:87:94:68:ec:17:ae:b0:4a: 1e:e7:04:60:4b:61:89:03:9d:84:24:09:f2:cd:d9: 4b:2a:40:1d:f5:b0:f5:bc:37:f8:92:09:06:4c:84: 04:ac:19:f2:b7:1a:a0:15:01:5e:4e:6f:d4:ce:94: b4:78:20:28:97:9d:01:a0:54:78:de:e1:70:e5:ba: 28:e5:39:c5:b5:50:66:66:8a:b1:fe:30:8a:d7:cd: 53:24:84:a4:9a:29:e2:b9:30:16:e4:a1:ad:2d:61: 9e:9b:64:24:a5:82:1b:da:73:31:dc:f4:4b:f4:5b: 34:64:26:86:12:ef:f8:3d:e3:04:1c:32:b8:06:4b: 0b:24:76:31:d1:57:b9:cc:e5:98:eb:15:19:d1:79: bc:da:ce:b3:db:b1:bb:e1:07:d4:e0:ad:6c:fc:9d: 51:bd:ee:dc:10:13:40:ab:df:03:33:3f:01:a1:55: e5:76:f7:15:43:3d:4b:da:c3:75:87:82:91:e2:cf: 4f:a4:c4:cc:7f:d4:35:85:dc:19:25:e8:e7:0a:e2: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:68:A0:61:A5:D0:37:BF:AF:96:72:88:61:9B:9E:D4:4D:68:BA:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c87c4f78-e88e-34b7-806f-b398043a8bfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:0a:1b:37:07:80:41:f5:4b:32:8e:ba:6c:c1:b7:43:e2:1f: c6:72:be:74:e1:50:03:c6:30:39:7b:bc:23:5d:d2:77:d5:e6: 5d:36:c4:10:8e:0d:67:2b:7c:3d:3c:ff:5a:fc:76:2b:5e:4f: b9:ae:22:86:f0:8f:ba:f3:69:45:88:ca:d7:02:4f:34:98:1b: 53:f5:67:25:1b:cb:6c:cb:5b:0b:e8:0f:2c:59:07:df:b6:21: 90:5f:84:57:74:06:10:4c:67:0f:78:8f:33:70:a7:a7:78:2f: 88:61:1e:87:2e:ff:4a:6a:ba:63:33:90:56:a0:56:34:f1:fe: 4b:c8:ad:e9:46:65:3e:35:03:5f:f0:28:8e:28:20:83:7b:a9: c8:92:4a:2f:f0:e7:0e:bd:9b:95:07:4d:f7:a9:4f:7e:70:74: 48:6a:65:b0:42:f7:a3:03:65:f7:a4:8a:27:d2:d0:82:b1:6d: ce:ad:bd:e8:ab:b1:cb:5c:7c:3d:30:4f:38:27:0b:2b:48:7c: 97:7e:64:bb:ee:57:17:2e:9c:f8:62:76:84:ad:3b:21:db:5c: c1:50:d3:a7:32:63:e4:2b:f1:51:fa:82:57:d0:3b:11:72:51: 49:8c:5d:e8:a4:27:36:7d:75:18:32:3a:8c:33:46:74:13:0b: f2:ba:9b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc65uOphZ2SJZ9r8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk MGFjYTM3NTEtNDIwYi00ZjEyLTlhMGUtN2QxYzUzYmM2MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKmNcWiMQgzumrpJPgaWJPw/jNGYqigQ/EUz N/og/0mIKhQJzBKj2j/8zKeh2DjaPzumh5Ro7BeusEoe5wRgS2GJA52EJAnyzdlL KkAd9bD1vDf4kgkGTIQErBnytxqgFQFeTm/UzpS0eCAol50BoFR43uFw5boo5TnF tVBmZoqx/jCK181TJISkminiuTAW5KGtLWGem2QkpYIb2nMx3PRL9Fs0ZCaGEu/4 PeMEHDK4BksLJHYx0Ve5zOWY6xUZ0Xm82s6z27G74QfU4K1s/J1Rve7cEBNAq98D Mz8BoVXldvcVQz1L2sN1h4KR4s9PpMTMf9Q1hdwZJejnCuIAPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORooGGl0De/r5ZyiGGbntRNaLqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzg3YzRmNzgtZTg4ZS0z NGI3LTgwNmYtYjM5ODA0M2E4YmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkKGzcHgEH1SzKOumzBt0PiH8ZyvnThUAPGMDl7vCNd0nfV5l02xBCO DWcrfD08/1r8diteT7muIobwj7rzaUWIytcCTzSYG1P1ZyUby2zLWwvoDyxZB9+2 IZBfhFd0BhBMZw94jzNwp6d4L4hhHocu/0pqumMzkFagVjTx/kvIrelGZT41A1/w KI4oIIN7qciSSi/w5w69m5UHTfepT35wdEhqZbBC96MDZfekiifS0IKxbc6tveir sctcfD0wTzgnCytIfJd+ZLvuVxcunPhidoStOyHbXMFQ06cyY+Qr8VH6glfQOxFy UUmMXeikJzZ9dRgyOowzRnQTC/K6m30= -----END CERTIFICATE-----Generated at Sun Nov 24 15:20:46 2024 by rpki-client on console-fra.rpki-client.org