$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa File: 3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa (raw, json) Hash identifier: lSg01fiuvcq8ZdjBLvmn4s+U5/jmcd+/Jtxebckz4No= Subject key identifier: A9:08:AA:92:D2:9A:CF:B7:CB:DA:54:F4:0B:14:00:3C:54:C7:BE:C9 Certificate issuer: /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Certificate serial: 010D0C9F432858471FD5DE2845332DF3F0779440 Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 14445 IP address blocks: 185.216.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:de:28:45:33:2d:f3:f0:77:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=f08a2c6b-d1b7-4fee-9d33-ebfdac5c570b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:ec:57:30:de:80:76:d0:55:28:14:c0:86: 36:c1:31:d5:fe:30:6a:f4:67:a7:21:d8:c0:30:94: 4e:dc:10:35:8c:6a:0e:b6:30:8b:46:42:43:4f:bd: 2e:1e:3b:b4:54:d7:4e:69:dd:90:58:93:0d:5a:db: df:9a:07:0e:3a:1e:f7:61:77:e0:a6:b3:5d:42:ec: c1:08:0e:a8:4e:80:e8:34:59:69:f8:80:58:a6:22: 46:08:33:aa:e0:30:08:e0:8a:4d:e3:c9:a2:19:53: 19:f7:89:53:b4:b4:ff:3f:65:bb:02:07:06:42:8f: 4b:ce:31:d6:91:84:cd:9d:5c:a8:89:e4:98:bf:0b: 97:4a:b2:7c:60:4b:17:e2:0e:42:60:e1:b6:88:b5: 79:7c:1b:2a:b1:d1:15:9d:77:98:34:ae:ee:f7:b9: e4:56:0c:61:3a:31:2c:22:4f:fa:03:7b:6c:75:31: c1:02:83:c2:83:f7:4e:e0:ac:0e:5b:ad:b2:90:5d: 2b:48:64:09:85:b7:b9:1b:03:90:2c:45:2c:d9:6e: 68:59:72:4d:48:b2:7a:1d:fb:62:a0:48:ca:ed:75: 3a:a1:ff:3c:95:68:04:a7:65:b7:ed:6b:44:a9:fb: 33:49:86:16:6c:73:fa:3e:2f:75:75:be:0c:06:95: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:08:AA:92:D2:9A:CF:B7:CB:DA:54:F4:0B:14:00:3C:54:C7:BE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/3486fd0a-6efc-3a3f-b2d1-15acb69feac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl X509v3 Authority Key Identifier: keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer sbgp-ipAddrBlock: critical IPv4: 185.216.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:43:58:1a:30:ce:b6:45:99:8f:7f:2a:e9:09:cc:03:d4:9c: 0e:82:91:a7:da:98:d6:3a:39:6d:44:62:76:bf:29:33:3d:54: 82:4a:f9:89:02:0a:6c:df:a3:c9:72:8e:fa:1b:b0:91:45:ff: 50:9e:59:dc:7b:eb:f1:0f:4f:a2:81:93:6a:50:b7:c1:73:a9: 13:d0:55:33:4a:6c:7e:0e:bf:30:da:cc:bc:fe:3e:7b:b7:04: 43:97:9a:b9:15:41:bc:23:d2:4a:29:a8:53:e9:11:ba:8b:99: 6a:20:3a:e5:c5:08:78:e8:5c:1a:46:99:3f:85:b3:20:4b:c2: 6c:64:35:d6:85:21:16:c2:17:7e:0f:1e:4e:c3:5e:22:40:f4: 13:dd:c4:d3:27:58:e8:17:49:b6:43:6e:ef:56:fe:f2:c5:6d: a1:fa:c1:66:db:2f:12:6d:3e:af:97:85:17:b6:10:d9:32:8d: f2:6b:36:38:62:2c:e5:51:b1:c2:8b:5c:31:f0:2a:57:de:32: ed:f3:d9:11:4f:40:d5:e7:26:4b:48:01:86:da:cf:7c:e1:a3: 86:12:b7:eb:7f:7a:e6:33:6d:c1:e6:d8:c1:aa:c0:01:69:cb: c7:d6:3e:2b:be:08:f3:3c:24:0b:70:f4:99:39:a0:dd:01:f8: 4f:5d:a0:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1d4oRTMt8/B3lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJk ODgyMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjA4YTJjNmItZDFiNy00ZmVlLTlkMzMtZWJmZGFjNWM1NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonnsVzDegHbQVSgUwIY2wTHV/jBq9GenIdjA MJRO3BA1jGoOtjCLRkJDT70uHju0VNdOad2QWJMNWtvfmgcOOh73YXfgprNdQuzB CA6oToDoNFlp+IBYpiJGCDOq4DAI4IpN48miGVMZ94lTtLT/P2W7AgcGQo9LzjHW kYTNnVyoieSYvwuXSrJ8YEsX4g5CYOG2iLV5fBsqsdEVnXeYNK7u97nkVgxhOjEs Ik/6A3tsdTHBAoPCg/dO4KwOW62ykF0rSGQJhbe5GwOQLEUs2W5oWXJNSLJ6Hfti oEjK7XU6of88lWgEp2W37WtEqfszSYYWbHP6Pi91db4MBpXxUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkIqpLSms+3y9pU9AsUADxUx77JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZh ODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvMzQ4NmZkMGEtNmVmYy0z YTNmLWIyZDEtMTVhY2I2OWZlYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmVmYTg4MjktNTZmNS00YWMxLTk4 YzYtZTRiZjExOWJkODgyLzZlZmE4ODI5LTU2ZjUtNGFjMS05OGM2LWU0YmYxMTli ZDg4Mi5jcmwwHwYDVR0jBBgwFoAUIQdQimQNva+rxX/XYBlsUIFiUdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJm MTE5YmQ4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudh/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNDWBowzrZFmY9/KukJzAPUnA6CkafamNY6OW1EYna/KTM9VIJK+YkC Cmzfo8lyjvobsJFF/1CeWdx76/EPT6KBk2pQt8FzqRPQVTNKbH4OvzDazLz+Pnu3 BEOXmrkVQbwj0kopqFPpEbqLmWogOuXFCHjoXBpGmT+FsyBLwmxkNdaFIRbCF34P Hk7DXiJA9BPdxNMnWOgXSbZDbu9W/vLFbaH6wWbbLxJtPq+XhRe2ENkyjfJrNjhi LOVRscKLXDHwKlfeMu3z2RFPQNXnJktIAYbaz3zho4YSt+t/euYzbcHm2MGqwAFp y8fWPiu+CPM8JAtw9Jk5oN0B+E9doD4= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:52 2024 by rpki-client on console-fra.rpki-client.org