$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a47efb20-4713-322e-8660-92ef9b9b6021.roa File: a47efb20-4713-322e-8660-92ef9b9b6021.roa (raw, json) Hash identifier: m56Frl+eUkdx4Xgi2sGCrd9nmiCkn21NLUlVrQSIIhQ= Subject key identifier: 95:33:9D:5B:96:C2:AE:EA:38:44:9E:E2:89:80:39:BE:DE:2D:8A:A4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847D404A19793C496946E673280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a47efb20-4713-322e-8660-92ef9b9b6021.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 209854 IP address blocks: 166.88.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:a1:97:93:c4:96:94:6e:67:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=54d7c4cc-8133-4b14-919b-036a6cd7b8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:bc:93:84:41:a7:8f:a5:6b:d1:ba:98:31: 8c:33:90:91:9e:f5:f9:ee:7d:88:f5:49:44:ba:e2: 93:ae:40:19:4b:6d:b2:fb:9d:03:7e:15:2a:81:f3: df:44:a5:fe:30:49:47:4d:84:a0:7e:7f:ab:9b:5c: 3e:d0:45:be:60:4d:d0:29:e6:7b:56:99:b0:24:a4: 9e:40:86:73:86:cb:70:6d:3e:be:4b:45:ca:3d:39: bf:ab:89:3f:ae:0a:66:a7:b4:c8:e4:77:10:16:11: c5:02:b0:b3:d3:a7:10:cc:b3:41:84:1f:ad:08:09: b6:d6:19:48:02:1e:fc:9b:1c:20:62:45:2e:7c:33: 05:9f:3d:2f:22:f3:d5:35:26:25:da:77:ec:af:48: db:68:f6:e4:b6:aa:5c:d4:5f:2b:c8:03:92:cb:9a: 87:c8:40:61:54:8f:96:21:af:b2:e3:0d:60:e5:ba: bf:b9:78:e3:87:db:cd:10:04:42:6a:88:cb:62:e4: 68:1e:94:cf:70:40:6c:35:23:bc:24:45:76:46:12: 55:b4:d1:6d:da:69:04:d7:ad:44:5e:9d:07:66:3a: 03:50:44:8f:5b:0b:0a:4f:ae:57:76:7c:ff:04:ed: b6:74:22:15:09:5b:9a:42:70:65:fc:59:05:5e:13: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:33:9D:5B:96:C2:AE:EA:38:44:9E:E2:89:80:39:BE:DE:2D:8A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a47efb20-4713-322e-8660-92ef9b9b6021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:22:f3:f5:7d:8f:f2:34:99:2a:93:06:84:e0:8e:75:b3:47: 7a:07:8e:38:ee:2f:bd:39:53:74:98:6b:24:59:8e:4a:9c:1a: 5d:9c:dc:1f:8f:15:7a:06:0a:0d:ab:0f:ef:19:b9:63:43:e7: 75:61:de:d7:68:4a:76:13:fe:43:c2:b1:31:c0:6d:27:96:42: 90:c4:0c:37:a5:03:4f:84:98:08:44:9e:1e:22:89:96:eb:d7: 6f:f0:30:b4:73:02:10:ef:c6:bb:5f:b2:88:a5:90:3e:e8:5e: 12:a6:e5:df:eb:df:7c:38:e2:f5:a0:1a:43:f6:62:09:62:b2: 3b:c8:ed:53:4c:1e:9f:be:f8:42:a9:a0:d1:dd:71:73:78:4b: 3c:b2:b0:9e:40:1f:1b:e9:82:5f:52:42:96:f0:2d:c3:5f:43: e5:0b:f2:77:2f:e1:e5:19:8a:31:ce:34:eb:1a:30:10:4a:49: f1:30:9f:7f:be:9d:5d:2c:8b:0d:b9:8f:87:7d:8f:b5:ca:47: 37:7e:72:d2:f4:7d:0a:32:ef:62:f0:02:82:3d:2d:50:b3:7f: ab:26:9e:5c:64:ba:98:3b:bf:37:55:c2:dc:f3:7a:bc:02:01: 8c:6a:ed:ed:5c:d0:56:22:91:d8:ab:23:94:e8:93:50:64:22: ca:fe:96:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBKGXk8SWlG5nMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk NTRkN2M0Y2MtODEzMy00YjE0LTkxOWItMDM2YTZjZDdiOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuK8k4RBp4+la9G6mDGMM5CRnvX57n2I9UlE uuKTrkAZS22y+50DfhUqgfPfRKX+MElHTYSgfn+rm1w+0EW+YE3QKeZ7VpmwJKSe QIZzhstwbT6+S0XKPTm/q4k/rgpmp7TI5HcQFhHFArCz06cQzLNBhB+tCAm21hlI Ah78mxwgYkUufDMFnz0vIvPVNSYl2nfsr0jbaPbktqpc1F8ryAOSy5qHyEBhVI+W Ia+y4w1g5bq/uXjjh9vNEARCaojLYuRoHpTPcEBsNSO8JEV2RhJVtNFt2mkE161E Xp0HZjoDUESPWwsKT65Xdnz/BO22dCIVCVuaQnBl/FkFXhPYVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUznVuWwq7qOESe4omAOb7eLYqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTQ3ZWZiMjAtNDcxMy0z MjJlLTg2NjAtOTJlZjliOWI2MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4i8/V9j/I0mSqTBoTgjnWzR3oHjjjuL705U3SYayRZjkqcGl2c3B+P FXoGCg2rD+8ZuWND53Vh3tdoSnYT/kPCsTHAbSeWQpDEDDelA0+EmAhEnh4iiZbr 12/wMLRzAhDvxrtfsoilkD7oXhKm5d/r33w44vWgGkP2YglisjvI7VNMHp+++EKp oNHdcXN4SzyysJ5AHxvpgl9SQpbwLcNfQ+UL8ncv4eUZijHONOsaMBBKSfEwn3++ nV0siw25j4d9j7XKRzd+ctL0fQoy72LwAoI9LVCzf6smnlxkupg7vzdVwtzzerwC AYxq7e1c0FYikdirI5Tok1BkIsr+ltA= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:56 2024 by rpki-client on console-fra.rpki-client.org