$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a1b7a04e-6503-3504-9f6c-08f9a3768bcf.roa File: a1b7a04e-6503-3504-9f6c-08f9a3768bcf.roa (raw, json) Hash identifier: GqgJlGOKVSDcv+RmAKj1vc70ffcAZesoPWi5DTyb0w4= Subject key identifier: 66:AA:18:53:E6:DA:15:90:0F:DB:93:33:2A:D7:F0:35:24:D5:2C:85 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F43285846D30FDA3F795C732EDC4F9E40 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a1b7a04e-6503-3504-9f6c-08f9a3768bcf.roa Signing time: Sat 10 Aug 2024 01:00:28 +0000 ROA not before: Sat 10 Aug 2024 01:00:28 +0000 ROA not after: Fri 08 Nov 2024 02:00:28 +0000 asID: 174 IP address blocks: 165.140.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d3:0f:da:3f:79:5c:73:2e:dc:4f:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Aug 10 01:00:28 2024 GMT Not After : Nov 8 02:00:28 2024 GMT Subject: CN=aa60d99a-2fa6-47dc-94b6-816a25ababb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:95:07:32:ee:1e:a0:09:bc:c0:74:70:68: b8:b3:dc:43:80:e4:0b:eb:ab:85:15:a9:5d:79:2a: 16:b7:9c:d1:35:81:22:1c:00:43:69:cd:fe:60:b0: fb:5a:85:d7:ab:7a:b0:06:f5:e6:e6:14:09:50:78: 76:6d:75:10:31:95:5b:21:02:5b:6a:e7:99:dc:ee: a3:19:a2:48:a2:30:85:13:75:f6:36:3c:30:69:a1: ee:a2:4d:f0:47:d6:83:3b:a5:cb:1a:79:eb:78:15: 48:dc:c7:8f:7f:43:57:bc:c1:77:04:38:c8:41:4f: 13:e0:fb:8f:67:9f:46:11:55:0d:f7:5c:ae:34:b8: 2a:f9:ec:d1:75:c5:3f:68:44:4b:84:cc:d7:c0:1a: ad:cc:33:69:3d:60:3c:5e:61:f9:14:2f:be:0b:6f: c7:f2:88:17:04:53:cb:1f:c5:97:ed:5e:bf:33:25: 90:8e:ac:3d:6f:d1:28:9f:45:86:35:7b:0b:0b:83: c4:f8:96:29:89:8e:56:d1:7d:d5:9e:0d:ae:a3:06: cc:3a:58:b9:62:78:05:46:04:65:90:2d:be:6d:ac: 62:a4:1f:2a:e9:29:48:55:3d:d5:d1:96:26:f6:bd: a8:26:ff:95:d8:9e:06:1f:c8:c7:1c:0b:c8:c8:63: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AA:18:53:E6:DA:15:90:0F:DB:93:33:2A:D7:F0:35:24:D5:2C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a1b7a04e-6503-3504-9f6c-08f9a3768bcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 165.140.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:55:74:42:a4:b8:a2:cc:89:19:d4:17:26:32:cb:40:91:5a: 89:13:a1:d3:e0:36:b0:18:1c:79:c5:34:57:51:94:0e:84:b7: b8:b3:ff:c9:fa:fe:b8:9d:d8:a1:22:e3:97:7b:27:65:8b:fe: b1:0d:35:a6:e1:1a:f0:d1:4a:3e:6e:18:9e:c1:60:6a:a5:d9: c2:a1:9f:5a:f1:c4:92:9c:00:84:f3:15:6f:ab:33:14:db:b2: c7:f6:50:70:4e:05:00:c9:11:11:36:04:1f:17:6c:50:f7:da: ca:ba:1a:ba:41:33:e9:40:52:44:99:a1:7d:66:65:79:3f:99: 54:87:68:fc:0e:21:f3:e6:d2:32:71:63:49:bb:7b:d0:a5:c4: 1b:1a:49:2b:f4:90:b8:8b:49:6e:d1:94:05:69:fb:c9:13:cd: 23:5f:7d:b2:42:41:92:ac:03:eb:a7:32:45:0c:e5:87:81:d0: 5e:a1:91:b0:8d:31:07:9b:ad:71:28:fd:26:b8:14:6d:a0:ca: e6:0f:bd:bb:8d:28:5a:86:d9:26:e8:e9:55:1e:a7:82:96:ac: 71:dd:32:9a:8b:6b:9f:48:21:74:e0:4c:fd:26:de:e8:3e:81: 5e:96:ce:b3:c1:3c:a8:e5:2b:3d:eb:d6:95:40:55:b9:55:df: 10:65:3d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbTD9o/eVxzLtxPnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI0MDgxMDAxMDAyOFoXDTI0MTEwODAyMDAyOFowLzEtMCsGA1UEAxMk YWE2MGQ5OWEtMmZhNi00N2RjLTk0YjYtODE2YTI1YWJhYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwmVBzLuHqAJvMB0cGi4s9xDgOQL66uFFald eSoWt5zRNYEiHABDac3+YLD7WoXXq3qwBvXm5hQJUHh2bXUQMZVbIQJbaueZ3O6j GaJIojCFE3X2NjwwaaHuok3wR9aDO6XLGnnreBVI3MePf0NXvMF3BDjIQU8T4PuP Z59GEVUN91yuNLgq+ezRdcU/aERLhMzXwBqtzDNpPWA8XmH5FC++C2/H8ogXBFPL H8WX7V6/MyWQjqw9b9Eon0WGNXsLC4PE+JYpiY5W0X3Vng2uowbMOli5YngFRgRl kC2+baxipB8q6SlIVT3V0ZYm9r2oJv+V2J4GH8jHHAvIyGNtvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaqGFPm2hWQD9uTMyrX8DUk1SyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvYTFiN2EwNGUtNjUwMy0z NTA0LTlmNmMtMDhmOWEzNzY4YmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1VdEKkuKLMiRnUFyYyy0CRWokTodPgNrAYHHnFNFdRlA6Et7iz/8n6 /rid2KEi45d7J2WL/rENNabhGvDRSj5uGJ7BYGql2cKhn1rxxJKcAITzFW+rMxTb ssf2UHBOBQDJERE2BB8XbFD32sq6GrpBM+lAUkSZoX1mZXk/mVSHaPwOIfPm0jJx Y0m7e9ClxBsaSSv0kLiLSW7RlAVp+8kTzSNffbJCQZKsA+unMkUM5YeB0F6hkbCN MQebrXEo/Sa4FG2gyuYPvbuNKFqG2Sbo6VUep4KWrHHdMpqLa59IIXTgTP0m3ug+ gV6WzrPBPKjlKz3r1pVAVblV3xBlPeQ= -----END CERTIFICATE-----Generated at Tue Oct 22 20:14:51 2024 by rpki-client on console-fra.rpki-client.org