$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3674c388-a88f-3785-a854-8f3efdc1a8ec.roa File: 3674c388-a88f-3785-a854-8f3efdc1a8ec.roa (raw, json) Hash identifier: IbESHXlfcpJzsK6B4gtZ3I+1dRs6DpipfgxtanHW48Y= Subject key identifier: 31:20:B5:72:0F:CE:7C:2B:C8:41:54:5F:94:3A:83:68:06:5B:D3:96 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285847C8D9FB92F9C49DF64B5F5180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3674c388-a88f-3785-a854-8f3efdc1a8ec.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 21313 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:fb:92:f9:c4:9d:f6:4b:5f:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=8e3fd6cd-d381-4911-8201-38cf810af9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:9d:4d:37:24:98:91:ab:a6:11:b8:d0:5b: b9:d4:99:fa:2c:c2:7d:a9:d0:29:06:9d:28:b2:65: dc:be:a3:90:05:93:62:16:4d:00:b1:07:0a:b4:40: 3f:fe:71:fb:dd:1f:cd:bf:ff:ee:6a:a4:3b:9b:60: ef:96:84:d8:71:f2:01:3d:7d:b0:23:b6:7f:19:ef: b2:7c:9a:ed:cc:64:da:fa:53:a8:28:4f:3d:ad:7c: e5:c8:a8:d6:9b:68:ac:f9:ad:8f:cb:d6:81:a5:1c: 5c:91:ac:61:3a:6a:4d:b1:53:bf:06:82:5a:c1:ca: ac:0c:be:d1:90:89:d1:ca:45:3f:35:d4:2a:74:8d: 26:f1:c6:be:4c:d6:45:04:e0:d5:a1:57:30:64:c2: e5:d3:59:94:69:3e:04:db:47:a7:06:d5:49:17:a8: 96:69:6c:b2:8d:a8:a7:ad:2c:3d:49:c0:0f:52:18: 85:58:f5:42:80:77:60:3c:8a:0c:df:40:2d:02:c5: 8e:e2:5c:36:85:4e:44:06:e3:a1:02:de:c7:f1:96: 58:93:30:c7:13:25:56:65:d4:2e:b1:5e:e3:c0:3b: 42:ee:25:f6:b2:08:e0:ac:0d:c5:16:71:79:fd:0d: 85:ce:84:07:e5:0a:29:76:a6:cf:6f:74:b7:1d:6d: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:20:B5:72:0F:CE:7C:2B:C8:41:54:5F:94:3A:83:68:06:5B:D3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3674c388-a88f-3785-a854-8f3efdc1a8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:42:8f:7b:8c:c6:e6:8f:04:41:1d:85:87:72:64:c6:bb:d8: 19:2f:1b:65:2e:ed:4e:1c:6e:26:0c:11:99:88:21:5e:2c:b5: 33:52:02:82:ec:2d:c5:8f:3c:88:a6:5b:02:11:1d:d3:05:e1: 8a:6a:d6:cc:64:9f:30:16:f5:4b:0c:e5:12:9e:1f:e4:c6:40: e0:81:3b:58:d3:bb:e5:52:a4:47:d4:ec:49:61:81:b9:77:ff: 97:27:5a:ba:63:b8:6e:c1:4e:2e:d2:11:c9:b8:ff:03:cc:51: a0:06:f4:4a:b5:8a:47:2e:f2:e6:b9:34:18:17:25:bc:bd:53: 6f:a5:ec:34:ee:e4:5f:bf:12:1a:af:79:40:87:da:43:49:7a: 3e:12:2c:81:28:ad:dd:7f:fc:25:87:8a:19:2b:12:30:a0:42: 51:8c:20:6c:ef:75:a4:48:0d:ff:50:4f:e1:7e:0e:37:5d:31: 43:8d:bb:66:84:d2:60:46:09:14:b1:e4:aa:be:70:79:1b:30: 97:11:3b:02:4a:47:1f:e1:4c:98:0c:96:1f:e9:27:74:97:32: e9:80:aa:aa:e5:3a:30:2a:c2:bd:fb:67:b2:e3:be:c7:a7:76: 7a:c8:ba:67:b7:e4:c3:7e:86:91:41:a8:f9:80:d9:9d:8c:29: 59:e7:43:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfI2fuS+cSd9ktfUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk OGUzZmQ2Y2QtZDM4MS00OTExLTgyMDEtMzhjZjgxMGFmOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEGdTTckmJGrphG40Fu51Jn6LMJ9qdApBp0o smXcvqOQBZNiFk0AsQcKtEA//nH73R/Nv//uaqQ7m2DvloTYcfIBPX2wI7Z/Ge+y fJrtzGTa+lOoKE89rXzlyKjWm2is+a2Py9aBpRxckaxhOmpNsVO/BoJawcqsDL7R kInRykU/NdQqdI0m8ca+TNZFBODVoVcwZMLl01mUaT4E20enBtVJF6iWaWyyjain rSw9ScAPUhiFWPVCgHdgPIoM30AtAsWO4lw2hU5EBuOhAt7H8ZZYkzDHEyVWZdQu sV7jwDtC7iX2sgjgrA3FFnF5/Q2FzoQH5QopdqbPb3S3HW2+ewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDEgtXIPznwryEFUX5Q6g2gGW9OWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzY3NGMzODgtYTg4Zi0z Nzg1LWE4NTQtOGYzZWZkYzFhOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuQo97jMbmjwRBHYWHcmTGu9gZLxtlLu1OHG4mDBGZiCFeLLUzUgKC 7C3FjzyIplsCER3TBeGKatbMZJ8wFvVLDOUSnh/kxkDggTtY07vlUqRH1OxJYYG5 d/+XJ1q6Y7huwU4u0hHJuP8DzFGgBvRKtYpHLvLmuTQYFyW8vVNvpew07uRfvxIa r3lAh9pDSXo+EiyBKK3df/wlh4oZKxIwoEJRjCBs73WkSA3/UE/hfg43XTFDjbtm hNJgRgkUseSqvnB5GzCXETsCSkcf4UyYDJYf6Sd0lzLpgKqq5TowKsK9+2ey477H p3Z6yLpnt+TDfoaRQaj5gNmdjClZ50PO -----END CERTIFICATE-----Generated at Fri Nov 22 04:19:27 2024 by rpki-client on console-fra.rpki-client.org