$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa File: fadabf4c-484e-39bf-b855-d4b07f61005e.roa (raw, json) Hash identifier: QyX6BJ+C6ymfWUjqjspqRkNbEb9z5SH9FAEPTXGSWp4= Subject key identifier: 86:1D:4D:FD:12:64:40:26:22:EF:64:51:8B:1B:81:9D:AB:2E:0C:93 Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F4328584769D0D9F93495C99F2981E940 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 14543 IP address blocks: 96.43.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:d9:f9:34:95:c9:9f:29:81:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=ce759c41-3d87-4fc1-bb79-a6b93bbee1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:84:16:18:0a:42:11:a6:b8:b0:0a:16:d9:eb: 02:a4:34:ae:2f:d2:55:d8:46:f7:e5:1d:54:67:6c: c5:82:d1:1a:56:e6:9b:04:d3:5b:79:dc:32:19:f0: ff:ae:00:ee:14:5d:52:f9:da:93:6b:9d:eb:3f:1c: c0:84:44:ee:a0:ca:c1:96:7b:84:4d:4d:45:2e:41: d1:ae:90:6e:42:70:4e:e6:89:19:d2:7e:93:12:bb: 23:c9:30:d8:3e:30:b4:f2:df:57:14:b0:33:2a:cf: 41:ce:76:48:93:10:58:16:dc:b0:8d:83:a8:bc:f4: 60:c8:69:bc:4b:cb:ef:45:28:16:0e:71:17:45:94: 06:6e:d0:2a:bc:a8:31:c5:4d:66:37:e2:6d:1e:5f: 60:e0:4d:a5:29:db:5e:1e:de:c6:73:4a:ec:9d:6b: ff:c0:60:72:f9:27:db:d4:0a:ad:83:20:c8:b4:49: b0:5f:1c:49:9d:33:d2:66:b4:d7:56:6c:21:0b:b4: 72:a3:37:ef:44:18:d5:04:15:49:63:3f:88:76:b5: 1d:61:98:86:d3:81:c4:bc:e4:e5:43:d2:1e:ac:96: b4:c1:e5:5f:30:a9:f1:8c:e8:93:33:b1:45:28:db: 68:48:b1:53:86:24:72:88:2d:9a:6c:dc:d2:cf:8d: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:4D:FD:12:64:40:26:22:EF:64:51:8B:1B:81:9D:AB:2E:0C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 96.43.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:73:55:89:aa:79:79:95:44:85:12:57:47:a6:61:8c:36:4a: 35:39:18:ee:96:17:6f:12:5b:7e:0e:82:eb:3e:50:9c:c8:4a: f4:52:d8:18:9f:04:65:f4:12:cf:0c:98:1d:e6:7d:b5:95:b9: 55:82:ee:f0:ee:05:fd:60:9e:ed:04:8b:52:3c:cf:ee:27:69: 62:3c:b3:bf:6d:99:18:f2:21:5e:c6:5a:40:7c:b7:3f:89:c3: 5e:e0:4d:a6:23:9a:46:f6:2a:71:6c:94:5c:39:01:6f:9a:ca: b3:66:9f:30:f1:cb:52:e5:27:17:bd:bc:84:e5:69:61:9b:75: 1c:c6:dd:31:35:62:45:9d:2f:8b:b3:84:58:98:4a:a5:be:96: 07:c1:13:2a:a3:d5:7c:60:95:79:31:8e:34:e7:4f:8e:a2:5e: f3:4d:6f:22:70:3f:19:d4:c0:a2:c9:22:20:9d:3b:97:2a:3c: c2:cd:e6:b9:d9:77:35:61:0d:86:37:0f:f1:31:90:d8:c5:fb: ae:ea:ce:ab:7a:14:80:2a:34:77:5f:66:8f:02:04:07:57:cc: 3b:71:bd:14:25:00:1b:42:b0:c2:30:9f:6b:aa:71:04:8c:48: 2d:ff:f6:dc:bf:db:f3:d2:2e:8d:33:05:f1:82:70:7c:82:e2: d3:4e:d1:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0Nn5NJXJnymB6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2U3NTljNDEtM2Q4Ny00ZmMxLWJiNzktYTZiOTNiYmVlMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oQWGApCEaa4sAoW2esCpDSuL9JV2Eb35R1U Z2zFgtEaVuabBNNbedwyGfD/rgDuFF1S+dqTa53rPxzAhETuoMrBlnuETU1FLkHR rpBuQnBO5okZ0n6TErsjyTDYPjC08t9XFLAzKs9BznZIkxBYFtywjYOovPRgyGm8 S8vvRSgWDnEXRZQGbtAqvKgxxU1mN+JtHl9g4E2lKdteHt7Gc0rsnWv/wGBy+Sfb 1AqtgyDItEmwXxxJnTPSZrTXVmwhC7RyozfvRBjVBBVJYz+IdrUdYZiG04HEvOTl Q9IerJa0weVfMKnxjOiTM7FFKNtoSLFThiRyiC2abNzSz43M0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYdTf0SZEAmIu9kUYsbgZ2rLgyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvZmFkYWJmNGMtNDg0ZS0z OWJmLWI4NTUtZDRiMDdmNjEwMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtzVYmqeXmVRIUSV0emYYw2SjU5GO6WF28SW34Ogus+UJzISvRS2Bif BGX0Es8MmB3mfbWVuVWC7vDuBf1gnu0Ei1I8z+4naWI8s79tmRjyIV7GWkB8tz+J w17gTaYjmkb2KnFslFw5AW+ayrNmnzDxy1LlJxe9vITlaWGbdRzG3TE1YkWdL4uz hFiYSqW+lgfBEyqj1XxglXkxjjTnT46iXvNNbyJwPxnUwKLJIiCdO5cqPMLN5rnZ dzVhDYY3D/ExkNjF+67qzqt6FIAqNHdfZo8CBAdXzDtxvRQlABtCsMIwn2uqcQSM SC3/9ty/2/PSLo0zBfGCcHyC4tNO0SU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:50 2024 by rpki-client on console-fra.rpki-client.org