$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa File: 654a5901-d2ef-3c77-9fec-fb93802aa967.roa (raw, json) Hash identifier: 1Egp81C6ib5tkRdL+8cgsH6PmbjFpUEFZWWnq+X2lqw= Subject key identifier: 1D:60:B4:E5:A7:42:D7:1B:04:8C:2E:F6:C8:C8:7B:A4:47:EF:31:3C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847D834C07920852874ED6B8F80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa Signing time: Mon 11 Nov 2024 14:00:39 +0000 ROA not before: Mon 11 Nov 2024 14:00:39 +0000 ROA not after: Sun 09 Feb 2025 14:00:39 +0000 asID: 212238 IP address blocks: 166.88.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d8:34:c0:79:20:85:28:74:ed:6b:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 11 14:00:39 2024 GMT Not After : Feb 9 14:00:39 2025 GMT Subject: CN=9b171ad7-dd2e-451b-beaa-42ed63d159bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:82:cb:ea:08:73:85:54:89:09:99:cc:8b: 6e:6a:5f:16:b6:1f:a5:0b:a7:e9:a0:bc:a7:17:01: 4f:29:7b:6f:7e:61:e0:e1:bb:22:f2:33:c1:1c:e4: a1:b7:f7:b3:2c:c6:b3:65:11:9f:4c:cd:ea:08:35: 10:72:4c:1f:67:8e:13:bd:88:c7:ae:9b:e5:da:e5: 1b:ff:e2:6d:91:73:81:5b:d7:fa:d5:77:83:3e:ac: a3:b8:00:d8:9f:7f:0b:e9:b1:5d:ea:c0:0f:d7:40: b2:44:34:d6:7e:b2:d0:3c:8b:65:74:e0:92:69:63: 82:f2:71:72:77:1f:fd:ad:3b:be:7d:c0:8c:c4:7e: ca:ce:00:49:e2:0e:48:39:b9:26:0c:63:de:fc:23: 1e:92:20:6e:1f:e6:00:68:21:bd:28:77:be:91:7d: a7:6c:e9:ae:5b:df:41:40:fa:86:73:6c:2b:dd:43: a5:ae:61:ea:a9:2e:a7:d0:54:3a:f8:b1:d2:b0:35: c2:dc:8e:31:01:16:9a:42:8e:cd:cf:d6:10:0b:80: bb:d6:ab:ea:bb:f6:fd:8e:90:d9:57:2e:d1:b1:d5: 81:c5:0c:09:1e:fd:38:ea:1c:bf:63:53:56:93:2d: fd:ce:1b:79:ba:dd:d6:a3:00:60:25:46:82:12:f9: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:B4:E5:A7:42:D7:1B:04:8C:2E:F6:C8:C8:7B:A4:47:EF:31:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654a5901-d2ef-3c77-9fec-fb93802aa967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ad:a5:92:60:f3:d2:ae:ac:ef:06:65:7f:d1:6a:41:01:88: db:a4:83:15:34:b6:a3:a3:03:e5:1a:35:ba:a3:8e:90:31:74: f9:bd:ca:fe:45:4d:a8:29:98:7e:10:7e:51:e1:cd:fd:43:cf: 2c:f9:f1:0a:51:f4:c2:be:fa:b5:b4:bf:1e:ad:60:87:78:b9: 93:8b:89:b8:eb:f4:3b:62:14:76:a9:55:59:08:e9:a5:8c:25: d3:86:9f:21:e0:81:e9:e6:6e:00:2e:55:73:df:f7:29:8c:3e: 6c:4e:e5:f8:da:20:33:bb:5d:03:fb:13:ed:e4:37:42:89:5d: e7:14:2e:ec:6e:76:95:f0:36:a0:fa:b6:60:29:6e:78:f8:f4: ec:9e:cb:77:f3:c1:70:c2:05:97:89:21:f5:da:b3:bd:a4:bd: f2:eb:67:6e:f2:e3:83:d7:03:f4:54:20:96:fd:61:dc:ba:02: 20:c3:0d:06:bd:5d:b8:4b:06:d3:20:ff:59:57:c0:bb:9d:26: c9:fe:be:b6:5b:67:0f:f8:0b:cf:6a:90:e7:14:db:d0:21:7d: fd:3a:86:87:ad:f2:ed:db:51:be:c7:db:f3:24:d7:34:06:96: 3d:48:f8:e4:f4:eb:53:02:e9:2d:42:83:e6:a3:9c:25:a9:09: 7c:4b:01:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYNMB5IIUodO1rj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk OWIxNzFhZDctZGQyZS00NTFiLWJlYWEtNDJlZDYzZDE1OWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS2Cy+oIc4VUiQmZzItual8Wth+lC6fpoLyn FwFPKXtvfmHg4bsi8jPBHOSht/ezLMazZRGfTM3qCDUQckwfZ44TvYjHrpvl2uUb /+JtkXOBW9f61XeDPqyjuADYn38L6bFd6sAP10CyRDTWfrLQPItldOCSaWOC8nFy dx/9rTu+fcCMxH7KzgBJ4g5IObkmDGPe/CMekiBuH+YAaCG9KHe+kX2nbOmuW99B QPqGc2wr3UOlrmHqqS6n0FQ6+LHSsDXC3I4xARaaQo7Nz9YQC4C71qvqu/b9jpDZ Vy7RsdWBxQwJHv046hy/Y1NWky39zht5ut3WowBgJUaCEvkGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1gtOWnQtcbBIwu9sjIe6RH7zE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjU0YTU5MDEtZDJlZi0z Yzc3LTlmZWMtZmI5MzgwMmFhOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2tpZJg89KurO8GZX/RakEBiNukgxU0tqOjA+UaNbqjjpAxdPm9yv5F TagpmH4QflHhzf1Dzyz58QpR9MK++rW0vx6tYId4uZOLibjr9DtiFHapVVkI6aWM JdOGnyHggenmbgAuVXPf9ymMPmxO5fjaIDO7XQP7E+3kN0KJXecULuxudpXwNqD6 tmApbnj49Oyey3fzwXDCBZeJIfXas72kvfLrZ27y44PXA/RUIJb9Ydy6AiDDDQa9 XbhLBtMg/1lXwLudJsn+vrZbZw/4C89qkOcU29Ahff06hoet8u3bUb7H2/Mk1zQG lj1I+OT061MC6S1Cg+ajnCWpCXxLAXE= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:43 2024 by rpki-client on console-fra.rpki-client.org