$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa File: e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa (raw, json) Hash identifier: oAu7hISjJbYRZrVMb7SxaixDGzyJKrOYPjlnNxAxrr4= Subject key identifier: AA:6A:8D:82:EE:19:71:41:13:3E:5D:D7:57:48:69:3A:7F:01:B4:8D Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285847A73BEA0A046B6CF93C087AA0 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 9009 IP address blocks: 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:ea:0a:04:6b:6c:f9:3c:08:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=743be1c3-172d-4b4f-8514-4fddcf2e1283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:10:15:43:b1:00:1a:e3:ed:a6:66:99:93: a7:55:07:2f:e0:f6:fa:73:9c:af:c4:1f:f1:cd:2f: e4:44:9b:bf:08:7b:8e:99:00:52:88:23:71:9b:49: cd:e9:97:8c:8d:a7:09:e7:0a:12:67:db:22:5d:3b: ab:f9:00:e0:76:91:e5:58:b1:62:66:c6:c9:a8:26: b1:99:7e:fa:13:e7:e6:68:97:53:7b:64:8a:2f:0a: 6a:e6:97:84:36:50:10:3b:f2:16:a4:dd:f5:c0:14: 72:8a:cc:cc:c8:24:61:ba:2a:25:63:3e:2e:a8:8b: 00:f6:7e:3d:7b:94:c5:f6:15:a4:75:50:bc:a2:05: 95:b7:96:64:bc:b6:d0:02:53:a7:73:88:d9:31:0b: 73:17:a5:d4:ee:7c:7f:46:00:a1:a9:0a:63:6e:ee: dd:97:4a:19:9e:6d:ae:b4:f5:d5:1e:4f:cd:81:ae: 0e:d9:6a:14:9c:b8:b9:d9:9e:a0:f5:cd:51:f2:81: 0a:d7:77:7b:2f:cc:b0:28:05:7b:e5:c9:93:7b:d3: c2:1a:6e:73:e0:3e:63:fb:64:e2:2d:08:4c:81:ef: 97:f3:d8:fa:1d:4e:bd:e6:cb:2e:6a:f5:0a:82:c9: 3a:b4:a1:87:b7:d4:ca:00:88:1a:d2:dd:9a:8f:71: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6A:8D:82:EE:19:71:41:13:3E:5D:D7:57:48:69:3A:7F:01:B4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1d:a4:30:5d:08:6e:1f:cc:f3:71:9b:11:a3:0f:78:11:46: ef:29:89:f9:68:44:22:05:92:0b:8f:82:f6:92:b5:42:fe:05: 5e:39:10:c4:96:f2:ac:1d:8a:14:27:c7:ea:9d:2f:84:62:d9: 5f:2f:44:e0:27:41:ea:58:7c:fc:98:73:93:c4:45:5f:1d:49: 53:6b:1a:dd:66:c1:07:7f:9f:89:34:49:b8:ee:29:d9:fa:31: 96:1b:48:1f:c5:18:06:2f:9d:6b:f8:36:b4:b3:17:32:db:d2: 7a:f5:f5:9f:70:be:e0:94:6c:11:cf:6e:05:11:80:b1:05:65: 19:f1:4c:63:83:8d:f1:57:c9:0c:97:2a:20:3e:7a:e0:d8:5b: cd:e8:8a:10:be:16:38:f6:1e:73:b3:5c:7d:e6:8e:47:f6:ab: ac:d5:4d:e6:60:eb:c4:44:ca:fe:84:b0:91:07:1b:29:09:51: 3a:cd:3c:20:ca:44:58:c7:ce:4a:e8:05:8e:3f:bf:ba:13:66: 17:34:95:8f:83:c2:da:0e:06:3c:56:e0:e8:6c:80:60:9b:42: 15:99:ec:97:4f:4c:c4:42:db:46:21:27:5f:80:6a:ef:d9:a5: 26:2f:ad:8b:3c:3b:2d:99:66:df:23:65:99:60:79:c0:2b:21: b7:c8:4b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO+oKBGts+TwIeqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NzQzYmUxYzMtMTcyZC00YjRmLTg1MTQtNGZkZGNmMmUxMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSUQFUOxABrj7aZmmZOnVQcv4Pb6c5yvxB/x zS/kRJu/CHuOmQBSiCNxm0nN6ZeMjacJ5woSZ9siXTur+QDgdpHlWLFiZsbJqCax mX76E+fmaJdTe2SKLwpq5peENlAQO/IWpN31wBRyiszMyCRhuiolYz4uqIsA9n49 e5TF9hWkdVC8ogWVt5ZkvLbQAlOnc4jZMQtzF6XU7nx/RgChqQpjbu7dl0oZnm2u tPXVHk/Nga4O2WoUnLi52Z6g9c1R8oEK13d7L8ywKAV75cmTe9PCGm5z4D5j+2Ti LQhMge+X89j6HU695ssuavUKgsk6tKGHt9TKAIga0t2aj3HpkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpqjYLuGXFBEz5d11dIaTp/AbSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZTljOGI5NTctMDhiNi0z NDZiLWJmYWEtNWUwMmEwODk2MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIdpDBdCG4fzPNxmxGjD3gRRu8pifloRCIFkguPgvaStUL+BV45EMSW 8qwdihQnx+qdL4Ri2V8vROAnQepYfPyYc5PERV8dSVNrGt1mwQd/n4k0SbjuKdn6 MZYbSB/FGAYvnWv4NrSzFzLb0nr19Z9wvuCUbBHPbgURgLEFZRnxTGODjfFXyQyX KiA+euDYW83oihC+Fjj2HnOzXH3mjkf2q6zVTeZg68REyv6EsJEHGykJUTrNPCDK RFjHzkroBY4/v7oTZhc0lY+DwtoOBjxW4OhsgGCbQhWZ7JdPTMRC20YhJ1+Aau/Z pSYvrYs8Oy2ZZt8jZZlgecArIbfIS7M= -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org