$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa File: 01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa (raw, json) Hash identifier: MKs+3e5mShoZXfetwoT+mDkwiFdNOXZkzP9pkvqvobc= Subject key identifier: AA:C2:1A:A7:78:26:DB:86:4E:CB:40:5C:AE:22:FD:E7:16:66:C0:66 Certificate issuer: /CN=160965a9-ceab-4a04-8e58-1c844268d35a Certificate serial: 010D0C9F43285847AF9BED574A369F73674C8395 Authority key identifier: A8:AD:66:52:62:08:9B:D1:1B:3A:A8:C1:71:D4:1B:5D:B4:86:FA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa Signing time: Mon 28 Oct 2024 01:00:32 +0000 ROA not before: Mon 28 Oct 2024 01:00:32 +0000 ROA not after: Sun 26 Jan 2025 02:00:32 +0000 asID: 8075 IP address blocks: 204.152.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/160965a9-ceab-4a04-8e58-1c844268d35a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/160965a9-ceab-4a04-8e58-1c844268d35a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:af:9b:ed:57:4a:36:9f:73:67:4c:83:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=160965a9-ceab-4a04-8e58-1c844268d35a Validity Not Before: Oct 28 01:00:32 2024 GMT Not After : Jan 26 02:00:32 2025 GMT Subject: CN=16c044a1-65a3-48d7-91dc-5ff52524e2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:10:d8:ff:a0:66:19:66:c0:78:0a:21:be: fa:c7:71:86:67:20:8f:42:b5:dd:10:56:a8:f0:9a: 1b:b2:9d:a9:5e:67:0d:65:53:1e:cb:3c:73:6e:f8: b8:a3:c5:92:07:47:84:9d:b1:20:2f:8a:ec:a6:43: 7f:ef:6a:d6:36:bb:92:0e:20:2a:ca:85:3d:5c:e8: 24:a3:19:4e:e4:4e:db:68:80:5e:5c:52:6f:fc:e4: b8:82:ea:f9:64:b7:7f:3c:85:c9:1a:a7:45:da:a2: fb:14:01:11:c3:61:9d:64:06:b2:fd:45:8a:3b:c6: fb:37:2f:ae:ed:cf:4e:06:03:8d:4d:41:7b:54:5f: 16:7e:d4:46:bb:b3:fe:4c:e2:52:dd:e3:fa:cc:20: f9:42:7b:22:65:03:f0:23:39:d3:35:8d:71:45:f9: 20:2f:28:91:76:1e:55:6c:99:2b:5f:fd:ed:3a:b2: 8a:03:20:ca:32:33:13:51:84:0d:2d:b3:39:1a:67: 37:ad:10:a2:6b:e4:ff:19:bb:37:e7:a6:d8:4a:0e: f4:00:dc:02:98:ec:65:c4:fd:a1:38:03:b4:de:76: cc:99:af:08:df:6a:a2:ba:47:d2:af:e6:84:6f:f9: e6:d5:d7:40:b1:be:3f:2e:19:47:7b:c0:5d:f2:d0: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C2:1A:A7:78:26:DB:86:4E:CB:40:5C:AE:22:FD:E7:16:66:C0:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/01b70b6f-84d6-3c4a-9b52-f27ce67df6de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/160965a9-ceab-4a04-8e58-1c844268d35a.crl X509v3 Authority Key Identifier: keyid:A8:AD:66:52:62:08:9B:D1:1B:3A:A8:C1:71:D4:1B:5D:B4:86:FA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer sbgp-ipAddrBlock: critical IPv4: 204.152.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b2:71:ed:a1:eb:ad:f9:03:15:28:4e:fc:bf:57:5d:66:6e: cb:88:17:c1:c2:26:03:4c:ed:0e:b1:a1:58:56:8e:27:6e:e6: b1:00:9b:b6:1d:8f:0d:2c:67:dd:df:f8:eb:bd:04:e0:b6:3a: 6b:8b:83:6e:37:0f:35:24:48:0b:01:16:e2:1f:2f:da:06:64: c8:b8:53:87:a9:5b:1d:ba:1f:17:ed:de:38:ae:b3:e1:ad:85: aa:6a:c7:c3:57:af:bb:f3:fd:ba:66:27:2d:3a:60:20:b2:c4: b5:17:59:d9:15:34:54:22:71:2e:6e:c8:14:b1:9a:e2:a5:08: 62:42:a4:73:99:45:cf:87:24:2b:a5:5a:ea:7d:7b:15:87:77: 2c:9a:3e:ea:47:06:b7:59:88:e2:51:5e:1b:ab:81:d6:33:bc: 24:1e:57:4b:a4:6d:3a:f1:df:80:de:74:69:68:3f:50:c3:a1: ba:ae:89:e1:ea:3c:7c:ba:6d:8e:21:99:20:30:90:5c:c2:12: a9:66:4e:88:39:9a:c1:45:e4:20:10:88:70:05:14:8d:4c:e1: e0:e7:e0:05:b0:0f:d0:4a:53:6b:55:5c:58:a0:41:35:94:92: e3:38:ae:34:fa:23:e2:ae:fe:bf:03:d4:ca:ef:64:a5:02:01: 95:06:f5:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEevm+1XSjafc2dMg5UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYwOTY1YTktY2VhYi00YTA0LThlNTgtMWM4NDQyNjhk MzVhMB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk MTZjMDQ0YTEtNjVhMy00OGQ3LTkxZGMtNWZmNTI1MjRlMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEoQ2P+gZhlmwHgKIb76x3GGZyCPQrXdEFao 8Jobsp2pXmcNZVMeyzxzbvi4o8WSB0eEnbEgL4rspkN/72rWNruSDiAqyoU9XOgk oxlO5E7baIBeXFJv/OS4gur5ZLd/PIXJGqdF2qL7FAERw2GdZAay/UWKO8b7Ny+u 7c9OBgONTUF7VF8WftRGu7P+TOJS3eP6zCD5QnsiZQPwIznTNY1xRfkgLyiRdh5V bJkrX/3tOrKKAyDKMjMTUYQNLbM5Gmc3rRCia+T/Gbs356bYSg70ANwCmOxlxP2h OAO03nbMma8I32qiukfSr+aEb/nm1ddAsb4/LhlHe8Bd8tCTHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrCGqd4JtuGTstAXK4i/ecWZsBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNjA5 NjVhOS1jZWFiLTRhMDQtOGU1OC0xYzg0NDI2OGQzNWEvMDFiNzBiNmYtODRkNi0z YzRhLTliNTItZjI3Y2U2N2RmNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTYwOTY1YTktY2VhYi00YTA0LThl NTgtMWM4NDQyNjhkMzVhLzE2MDk2NWE5LWNlYWItNGEwNC04ZTU4LTFjODQ0MjY4 ZDM1YS5jcmwwHwYDVR0jBBgwFoAUqK1mUmIIm9EbOqjBcdQbXbSG+mwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xNjA5NjVhOS1jZWFiLTRhMDQtOGU1OC0xYzg0 NDI2OGQzNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2yce2h6635AxUoTvy/V11mbsuIF8HCJgNM7Q6xoVhWjidu5rEAm7Yd jw0sZ93f+Ou9BOC2OmuLg243DzUkSAsBFuIfL9oGZMi4U4epWx26Hxft3jius+Gt hapqx8NXr7vz/bpmJy06YCCyxLUXWdkVNFQicS5uyBSxmuKlCGJCpHOZRc+HJCul Wup9exWHdyyaPupHBrdZiOJRXhurgdYzvCQeV0ukbTrx34DedGloP1DDobquieHq PHy6bY4hmSAwkFzCEqlmTog5msFF5CAQiHAFFI1M4eDn4AWwD9BKU2tVXFigQTWU kuM4rjT6I+Ku/r8D1MrvZKUCAZUG9eU= -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:29 2024 by rpki-client on console-ams.rpki-client.org