$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa File: ebc74e11-a225-3c40-a976-f2047dc2fdea.roa (raw, json) Hash identifier: RmBPWsH03i9L+J55x0ZmGUExIMJgBx2zHN0yRdWLW7M= Subject key identifier: 15:75:81:EE:DA:8E:EA:D0:2C:74:31:42:C9:0E:6B:54:D0:E1:29:09 Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F43285847B10160FB95D0668537DE9240 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 14041 IP address blocks: 192.43.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:60:fb:95:d0:66:85:37:de:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=addd3150-ec34-4c1d-82bf-98e755abb771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:99:2b:6c:46:2f:44:b7:69:05:f5:2d:a6: 65:07:b9:cb:8a:5f:56:fa:87:74:d5:5c:41:28:27: 16:17:42:56:eb:f5:a7:51:50:8e:88:6f:d9:24:1a: e7:bf:0a:92:dd:16:9f:d0:40:3a:48:b4:60:9b:b1: 10:ef:dc:4f:97:96:27:ad:af:9a:c2:f8:c7:94:ce: 45:17:79:84:28:dc:e2:21:5a:37:d9:9b:24:c8:b4: 00:eb:5e:d2:8e:11:f3:7e:66:e6:67:62:c8:b8:7f: 1a:f7:90:36:4a:cb:88:df:10:b0:1e:c1:33:03:7d: 2d:d0:db:77:17:fc:fc:af:a1:d2:2f:f1:49:2b:5d: f7:f6:89:cf:cb:c1:6b:f4:d8:87:28:e5:d9:b8:6d: bf:be:b1:c4:2a:54:b0:e1:30:b9:d7:0b:10:53:2b: fb:da:df:c4:d8:41:93:70:25:2e:0f:74:ec:99:26: 68:49:ad:03:2d:74:38:d1:b5:3d:5d:e1:1c:30:69: a0:c2:fd:69:b8:ea:34:f8:bc:2b:0c:5b:d3:d1:69: 81:7a:15:89:3c:77:52:6e:68:07:10:6f:80:9e:79: 49:46:eb:8e:9d:93:02:b1:4d:0c:e7:96:a4:62:c5: 83:fd:fd:59:ea:bd:ff:a8:3b:d9:24:bb:32:67:ae: 2e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:75:81:EE:DA:8E:EA:D0:2C:74:31:42:C9:0E:6B:54:D0:E1:29:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 192.43.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:39:5b:04:0f:0d:57:15:7c:1a:08:18:cb:31:5c:8b:42:85: a6:d0:90:7d:9c:cd:db:0a:e6:38:25:17:72:13:64:fd:df:2a: 80:4a:7b:9c:39:d6:58:3b:5b:82:f0:f1:62:58:f7:f1:c7:d1: 80:89:bc:a3:8b:51:5f:71:80:59:46:82:3b:98:dd:cd:37:c5: 2d:aa:87:57:d5:24:3e:4a:ed:66:17:fb:9c:9f:8b:af:dd:af: 4b:5c:b7:a3:22:b0:14:ad:98:b1:53:0f:93:3a:38:d4:f2:53: a4:18:3a:ba:1e:a9:68:96:3b:3a:ad:0e:b0:66:36:f5:4e:f0: 14:af:ed:4c:d6:4d:a1:48:1e:ab:f6:69:29:2b:c4:e6:af:7c: be:af:8a:e1:80:dc:bf:38:cd:48:1b:38:8e:9f:25:68:49:28: 12:99:d7:70:89:03:31:f6:dc:42:29:22:87:42:97:15:58:32: 48:fd:1c:b1:2d:b6:b4:02:66:de:4b:bf:e2:ba:67:f4:b3:b6: 59:cf:c1:3a:15:19:9d:7c:fd:4c:2e:02:0f:de:4b:a7:84:5f: 83:c8:c5:f9:25:c3:21:a4:ca:f1:2d:93:fa:bb:33:42:74:8d: c2:21:7e:79:b4:79:7d:d1:2d:70:04:2a:b2:8d:44:5d:d2:bd: 24:37:0d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWD7ldBmhTfekkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk YWRkZDMxNTAtZWMzNC00YzFkLTgyYmYtOThlNzU1YWJiNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cWZK2xGL0S3aQX1LaZlB7nLil9W+od01VxB KCcWF0JW6/WnUVCOiG/ZJBrnvwqS3Raf0EA6SLRgm7EQ79xPl5Ynra+awvjHlM5F F3mEKNziIVo32ZskyLQA617SjhHzfmbmZ2LIuH8a95A2SsuI3xCwHsEzA30t0Nt3 F/z8r6HSL/FJK1339onPy8Fr9NiHKOXZuG2/vrHEKlSw4TC51wsQUyv72t/E2EGT cCUuD3TsmSZoSa0DLXQ40bU9XeEcMGmgwv1puOo0+LwrDFvT0WmBehWJPHdSbmgH EG+AnnlJRuuOnZMCsU0M55akYsWD/f1Z6r3/qDvZJLsyZ64u6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV1ge7ajurQLHQxQskOa1TQ4SkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZWJjNzRlMTEtYTIyNS0z YzQwLWE5NzYtZjIwNDdkYzJmZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCvZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo5WwQPDVcVfBoIGMsxXItChabQkH2czdsK5jglF3ITZP3fKoBKe5w5 1lg7W4Lw8WJY9/HH0YCJvKOLUV9xgFlGgjuY3c03xS2qh1fVJD5K7WYX+5yfi6/d r0tct6MisBStmLFTD5M6ONTyU6QYOroeqWiWOzqtDrBmNvVO8BSv7UzWTaFIHqv2 aSkrxOavfL6viuGA3L84zUgbOI6fJWhJKBKZ13CJAzH23EIpIodClxVYMkj9HLEt trQCZt5Lv+K6Z/SztlnPwToVGZ18/UwuAg/eS6eEX4PIxfklwyGkyvEtk/q7M0J0 jcIhfnm0eX3RLXAEKrKNRF3SvSQ3DYQ= -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org