$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/5bb8ce73-e476-36aa-9f1f-56ee95845580.roa File: 5bb8ce73-e476-36aa-9f1f-56ee95845580.roa (raw, json) Hash identifier: S8oWR0iK9Cb9ogyqF5fxflMdxDqdNjiYH7J6yyZDH8I= Subject key identifier: 1E:9D:47:30:FF:56:6E:57:15:F2:09:1F:1E:5F:DC:CF:54:72:0C:8C Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F432858479D76B4D4EC6273254124F600 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/5bb8ce73-e476-36aa-9f1f-56ee95845580.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 8075 IP address blocks: 216.73.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b4:d4:ec:62:73:25:41:24:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=7fcefdaf-37d4-4d8f-a022-c7dc90ef4d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:a4:02:e3:0b:7c:e8:d0:72:a2:fc:7a:2e: 1e:08:d9:01:2c:ec:0d:d5:95:4b:a0:e1:db:81:a9: 66:f6:96:a0:ac:bc:b7:32:63:09:79:ed:00:bc:74: 16:d4:a2:28:d2:8a:39:65:93:d4:19:07:5a:96:5a: 8b:78:a8:81:53:73:fa:6c:2d:d6:51:f1:06:0a:c6: 9e:67:06:a9:5e:d1:88:30:4b:48:98:17:9f:b0:d8: 75:9f:b5:9d:5f:d2:46:18:2b:14:d7:27:50:0f:bd: ba:3c:4f:23:03:ff:fe:95:b9:36:68:e8:b1:e1:74: 66:e5:58:40:7d:fd:16:00:7e:10:c5:b7:b8:80:db: bb:c5:f7:e7:55:c3:9a:54:ea:77:8a:52:4f:12:73: 7d:06:bb:28:0a:7b:e8:31:33:cc:cb:6a:5c:b0:fd: 56:a0:6f:10:54:87:c7:1d:19:e4:ad:33:f7:a1:58: d1:47:72:2b:02:b2:e0:9b:aa:58:a2:f5:e4:60:5e: dc:e3:06:f3:d3:fd:19:4c:84:fd:60:4d:00:06:e3: 77:c2:6e:c0:0f:70:06:db:83:1c:c2:a2:cd:fb:27: ff:9e:72:1d:76:fb:31:8c:65:31:cc:6b:30:22:a5: 78:92:54:69:84:98:e4:11:28:b8:18:0f:dd:78:94: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9D:47:30:FF:56:6E:57:15:F2:09:1F:1E:5F:DC:CF:54:72:0C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/5bb8ce73-e476-36aa-9f1f-56ee95845580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv4: 216.73.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:55:ff:f7:8e:3c:8e:dc:d0:33:c2:b9:cf:f9:fb:22:7a:d6: 3e:94:53:df:11:47:00:a7:d1:99:4f:80:a3:7f:ec:e3:8a:1d: 86:16:16:59:2c:9d:bb:08:d4:4f:3a:51:88:63:c7:05:b7:ee: 2d:b8:8b:71:21:1c:fd:b1:52:8d:0c:d7:0e:37:57:93:1e:dd: ca:3e:ad:1c:12:6b:c0:bb:ac:0e:87:65:86:e6:2f:64:40:03: 9e:1a:5d:2b:ea:29:36:93:29:0c:14:ed:82:df:39:e7:46:f0: df:34:1f:e4:d9:31:d9:e0:f7:dc:0d:a7:1d:5e:ea:ad:0d:8f: 26:f2:92:97:e2:19:7c:1b:4b:59:14:ac:29:38:1e:14:ad:77: c3:cd:71:4b:32:77:cd:a0:4b:23:5e:8c:68:ec:b1:54:cc:28: ca:3f:86:7e:48:45:70:82:13:ac:46:4d:0a:b5:08:69:fb:4d: af:8e:a1:e3:95:d1:12:52:37:bd:5e:df:f6:47:9f:f0:77:18: 62:4e:1e:59:3f:71:79:55:a1:5a:25:11:ed:30:d9:20:bb:a9: 9f:91:b3:52:77:db:05:08:57:34:19:57:78:b4:a5:3e:4b:ac: 97:c0:a0:0b:a1:10:6f:9e:32:4b:78:21:b3:c9:5d:fb:83:90: 4e:59:6f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrTU7GJzJUEk9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk N2ZjZWZkYWYtMzdkNC00ZDhmLWEwMjItYzdkYzkwZWY0ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKGkAuMLfOjQcqL8ei4eCNkBLOwN1ZVLoOHb galm9pagrLy3MmMJee0AvHQW1KIo0oo5ZZPUGQdallqLeKiBU3P6bC3WUfEGCsae ZwapXtGIMEtImBefsNh1n7WdX9JGGCsU1ydQD726PE8jA//+lbk2aOix4XRm5VhA ff0WAH4Qxbe4gNu7xffnVcOaVOp3ilJPEnN9BrsoCnvoMTPMy2pcsP1WoG8QVIfH HRnkrTP3oVjRR3IrArLgm6pYovXkYF7c4wbz0/0ZTIT9YE0ABuN3wm7AD3AG24Mc wqLN+yf/nnIddvsxjGUxzGswIqV4klRphJjkESi4GA/deJQZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6dRzD/Vm5XFfIJHx5f3M9UcgyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvNWJiOGNlNzMtZTQ3Ni0z NmFhLTlmMWYtNTZlZTk1ODQ1NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Em3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFV//eOPI7c0DPCuc/5+yJ61j6UU98RRwCn0ZlPgKN/7OOKHYYWFlks nbsI1E86UYhjxwW37i24i3EhHP2xUo0M1w43V5Me3co+rRwSa8C7rA6HZYbmL2RA A54aXSvqKTaTKQwU7YLfOedG8N80H+TZMdng99wNpx1e6q0NjybykpfiGXwbS1kU rCk4HhStd8PNcUsyd82gSyNejGjssVTMKMo/hn5IRXCCE6xGTQq1CGn7Ta+OoeOV 0RJSN71e3/ZHn/B3GGJOHlk/cXlVoVolEe0w2SC7qZ+Rs1J32wUIVzQZV3i0pT5L rJfAoAuhEG+eMkt4IbPJXfuDkE5Zb+4= -----END CERTIFICATE-----Generated at Thu Nov 21 15:31:39 2024 by rpki-client on console-fra.rpki-client.org