$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2be76d77-e7d2-3e3f-9faf-c52b18d01aa5.roa File: 2be76d77-e7d2-3e3f-9faf-c52b18d01aa5.roa (raw, json) Hash identifier: J3EoRbvszi4LsCR3Z5vIVqcQTtBo+WLYoyUb+hHTPqg= Subject key identifier: 65:8B:6E:9B:CA:48:9D:5A:87:0B:40:83:72:C3:39:D4:52:BE:8F:F5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847EFEF92702172C4C30950E040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2be76d77-e7d2-3e3f-9faf-c52b18d01aa5.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 204957 IP address blocks: 166.88.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:92:70:21:72:c4:c3:09:50:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=e0209490-eae8-417b-98c8-5f4e08c9bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:16:47:d3:52:42:9d:aa:56:c9:7b:5c:b0: e1:8b:5b:b4:01:de:bb:94:9c:b3:b2:de:1a:ff:bd: 47:ba:bc:60:07:16:57:4c:05:33:3a:1e:93:57:e9: c2:14:71:11:76:9c:77:6d:c3:5f:f2:d7:48:f7:ad: b6:fd:c4:76:a6:05:7a:2f:f6:ff:e4:18:67:ba:2f: 3f:c5:ff:bd:0d:7e:51:09:82:4f:33:d0:41:5c:86: d8:e3:34:8c:b8:aa:ef:0c:79:d9:dd:d7:a4:d2:5a: d5:67:8c:f3:82:9b:a0:c6:2b:37:65:e8:6b:71:a7: e7:77:b1:e7:9e:65:bc:ae:4b:55:b8:3b:2f:8b:6a: b0:6e:85:7a:1f:81:d0:f2:17:8c:57:71:30:c0:d4: 9a:cb:a8:3b:49:85:b8:20:d3:b6:94:6d:af:82:14: e8:18:52:90:4a:2e:6c:e5:99:75:65:2b:67:67:35: 3b:17:6c:aa:8b:40:e4:77:f2:9c:bb:30:e4:a2:a0: 9d:98:64:8a:12:f3:dd:49:93:1e:05:6a:86:b6:a7: 75:fe:ea:f1:2a:af:9a:ac:10:7c:10:2b:fe:83:93: 3b:60:b0:0b:f9:d0:d1:ab:af:0b:a8:85:fc:73:94: b8:0d:6d:fe:e4:db:11:93:76:a7:d5:88:52:dc:c2: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8B:6E:9B:CA:48:9D:5A:87:0B:40:83:72:C3:39:D4:52:BE:8F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2be76d77-e7d2-3e3f-9faf-c52b18d01aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:51:d1:05:dc:23:fe:ea:f7:d9:37:03:9a:a1:11:a1:70:60: 77:b7:e7:57:78:74:92:c7:95:8f:ee:53:62:b6:8b:83:a3:4f: 93:1e:ff:4e:66:ad:a6:4f:d0:87:1c:f6:90:83:a4:78:d3:b5: f6:7e:e1:5b:a0:c0:1e:21:7f:89:13:cd:74:d0:bc:d3:a8:48: 78:e7:24:6a:b4:10:9a:d6:ea:fe:12:65:5d:95:01:b8:a1:36: a4:0e:3c:dd:14:73:dd:58:7d:20:ce:3c:9e:e1:6a:f7:46:18: a4:b4:fc:91:36:0e:ea:e8:e0:b5:1c:c8:17:16:3f:94:74:13: f1:b9:d9:e5:e2:ab:3d:d4:e6:d5:53:3c:80:1c:c8:14:0f:93: 67:b1:67:a6:5a:23:0e:4b:19:ad:c9:d7:98:c9:c1:d5:97:4e: 6e:5e:92:4b:72:eb:a6:14:a7:bc:d4:16:17:0b:78:4a:8a:24: 50:d7:56:5b:e9:59:93:77:44:87:1d:27:d9:5a:00:b5:86:f7: a6:f2:de:c5:2b:bf:b3:37:23:5b:0a:8e:3b:43:73:6d:ca:38: ee:26:ec:87:17:d2:6f:b7:33:ff:38:e5:45:33:65:ff:37:22: 45:60:f4:eb:40:54:de:61:7d:a4:8a:29:d2:3d:47:26:5a:c5: b3:63:b5:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv75JwIXLEwwlQ4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk ZTAyMDk0OTAtZWFlOC00MTdiLTk4YzgtNWY0ZTA4YzliYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+MWR9NSQp2qVsl7XLDhi1u0Ad67lJyzst4a /71HurxgBxZXTAUzOh6TV+nCFHERdpx3bcNf8tdI9622/cR2pgV6L/b/5Bhnui8/ xf+9DX5RCYJPM9BBXIbY4zSMuKrvDHnZ3dek0lrVZ4zzgpugxis3Zehrcafnd7Hn nmW8rktVuDsvi2qwboV6H4HQ8heMV3EwwNSay6g7SYW4INO2lG2vghToGFKQSi5s 5Zl1ZStnZzU7F2yqi0Dkd/KcuzDkoqCdmGSKEvPdSZMeBWqGtqd1/urxKq+arBB8 ECv+g5M7YLAL+dDRq68LqIX8c5S4DW3+5NsRk3an1YhS3ML6NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWLbpvKSJ1ahwtAg3LDOdRSvo/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmJlNzZkNzctZTdkMi0z ZTNmLTlmYWYtYzUyYjE4ZDAxYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApljdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdR0QXcI/7q99k3A5qhEaFwYHe351d4dJLHlY/uU2K2i4OjT5Me/05m raZP0Icc9pCDpHjTtfZ+4VugwB4hf4kTzXTQvNOoSHjnJGq0EJrW6v4SZV2VAbih NqQOPN0Uc91YfSDOPJ7havdGGKS0/JE2Duro4LUcyBcWP5R0E/G52eXiqz3U5tVT PIAcyBQPk2exZ6ZaIw5LGa3J15jJwdWXTm5ekkty66YUp7zUFhcLeEqKJFDXVlvp WZN3RIcdJ9laALWG96by3sUrv7M3I1sKjjtDc23KOO4m7IcX0m+3M/845UUzZf83 IkVg9OtAVN5hfaSKKdI9RyZaxbNjtQE= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:41 2024 by rpki-client on console-fra.rpki-client.org