$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa File: 36273f28-a723-33e1-a389-9416819cddb6.roa (raw, json) Hash identifier: K1usAbaCMZAt1N7SzZ9QHjFahT84SdQ7un/89NarV5o= Subject key identifier: 4B:10:AB:28:DE:7A:A5:93:55:8E:1F:B2:B4:AE:0A:F6:42:2A:A4:50 Certificate issuer: /CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Certificate serial: 010D0C9F4328584773965933FCD83EB9C9D667C0 Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa Signing time: Sun 06 Oct 2024 13:00:41 +0000 ROA not before: Sun 06 Oct 2024 13:00:41 +0000 ROA not after: Sat 04 Jan 2025 14:00:41 +0000 asID: 21976 IP address blocks: 159.91.0.0/16 maxlen: 16 192.76.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:96:59:33:fc:d8:3e:b9:c9:d6:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Validity Not Before: Oct 6 13:00:41 2024 GMT Not After : Jan 4 14:00:41 2025 GMT Subject: CN=26b57796-ce69-46c5-878a-b06e83642731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a6:02:88:5a:23:31:e6:05:69:b6:c0:71:82: 29:f0:3e:db:29:c1:48:28:18:f4:35:d8:88:e7:e1: df:50:27:28:8c:94:e8:78:bf:80:15:d0:d0:f7:23: aa:ba:4d:10:37:87:25:d7:93:c8:ec:a0:17:5d:52: 99:69:36:e2:64:46:87:83:ff:0c:e4:40:e2:7c:d5: c3:14:26:a5:17:42:bc:70:70:9d:b1:db:68:c6:c7: a9:e4:85:1e:cc:1b:23:ac:de:1e:1b:0c:a7:a6:64: 2d:07:ba:80:1e:0b:fa:06:00:3a:85:7e:b4:f5:9e: dd:08:65:32:b8:9d:9d:f4:d9:2f:ba:03:c1:d0:7a: ec:2f:72:2d:4d:4c:0e:e2:e3:96:b8:71:b3:ae:f2: 30:1f:9e:61:90:67:af:0b:bf:40:ba:6a:a1:38:12: b4:d7:b2:16:a1:79:e7:39:64:c7:27:22:a6:f2:ea: ee:7a:14:b7:00:6e:bc:92:95:53:c3:5b:56:5f:9e: 9d:53:d3:c2:8f:a8:16:10:2b:7b:bb:5a:89:27:d7: 44:ab:ac:d3:17:25:8e:23:bf:6b:c6:e8:b2:81:4b: 57:82:23:1d:9c:0d:0f:93:98:2e:7a:cb:8d:7f:58: 58:6c:9c:1c:fc:e4:dc:a3:61:a0:4b:3f:4a:f5:84: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:10:AB:28:DE:7A:A5:93:55:8E:1F:B2:B4:AE:0A:F6:42:2A:A4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl X509v3 Authority Key Identifier: keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer sbgp-ipAddrBlock: critical IPv4: 159.91.0.0/16 192.76.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:75:f7:9d:4f:f7:5f:b8:8b:8e:04:93:db:e0:04:85:3c:69: dc:04:8d:d9:9d:5b:bd:b6:1d:82:87:cf:fb:c5:a1:e2:e9:c8: 17:63:ec:d3:43:f5:eb:bd:2c:3d:e9:fa:22:43:1b:5d:35:31: eb:0d:84:7b:f2:79:3e:e9:cf:24:57:99:b0:9c:e9:5d:0c:e5: 5b:37:7a:d4:e6:d5:08:eb:97:c1:0b:d0:8a:dc:0c:21:55:f4: 79:44:c9:69:7b:17:05:48:d2:18:50:0a:d6:1c:dd:71:31:63: 8c:0c:90:68:28:ff:e1:56:8b:6d:9d:41:20:d2:2a:56:33:bc: f9:46:ae:44:07:f7:34:46:31:26:5e:fb:3e:01:0b:7e:fd:8e: f9:b1:28:17:87:56:26:10:19:4d:00:69:5f:0f:36:f7:b7:36: f6:cb:96:6f:23:e7:fe:b3:c8:29:25:51:e5:68:f1:93:ce:f1: 95:ce:57:cf:e9:04:b5:f4:f3:10:99:f1:33:b7:2b:49:d7:cf: 80:8c:5b:d7:ae:87:48:29:48:db:df:d2:79:7f:af:96:50:7e: ef:82:2d:a9:2b:35:70:05:1d:5f:09:7e:e5:43:27:df:a7:ad: 39:73:77:9d:15:f9:6e:73:9b:c2:62:f9:c4:79:39:13:60:7f: 1c:e7:8a:8a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEdzllkz/Ng+ucnWZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNi YzExMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MjZiNTc3OTYtY2U2OS00NmM1LTg3OGEtYjA2ZTgzNjQyNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaYCiFojMeYFabbAcYIp8D7bKcFIKBj0NdiI 5+HfUCcojJToeL+AFdDQ9yOquk0QN4cl15PI7KAXXVKZaTbiZEaHg/8M5EDifNXD FCalF0K8cHCdsdtoxsep5IUezBsjrN4eGwynpmQtB7qAHgv6BgA6hX609Z7dCGUy uJ2d9NkvugPB0HrsL3ItTUwO4uOWuHGzrvIwH55hkGevC79AumqhOBK017IWoXnn OWTHJyKm8uruehS3AG68kpVTw1tWX56dU9PCj6gWECt7u1qJJ9dEq6zTFyWOI79r xuiygUtXgiMdnA0Pk5guesuNf1hYbJwc/OTco2GgSz9K9YTtUQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFEsQqyjeeqWTVY4fsrSuCvZCKqRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEw NjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvMzYyNzNmMjgtYTcyMy0z M2UxLWEzODktOTQxNjgxOWNkZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2VhMDYwNDgtN2JjMy00YjY1LTg0 NDMtNGM2MDBiNzNiYzExL2NlYTA2MDQ4LTdiYzMtNGI2NS04NDQzLTRjNjAwYjcz YmMxMS5jcmwwHwYDVR0jBBgwFoAUcv59GQtXmt7bYV7V2MtgXR9QrtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYw MGI3M2JjMTEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAn1sDBADA TLMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAnX3nU/3X7iLjgST2+AEhTxp3ASN2Z1bvbYdgofP+8Wh4unI F2Ps00P1670sPen6IkMbXTUx6w2Ee/J5PunPJFeZsJzpXQzlWzd61ObVCOuXwQvQ itwMIVX0eUTJaXsXBUjSGFAK1hzdcTFjjAyQaCj/4VaLbZ1BINIqVjO8+UauRAf3 NEYxJl77PgELfv2O+bEoF4dWJhAZTQBpXw8297c29suWbyPn/rPIKSVR5Wjxk87x lc5Xz+kEtfTzEJnxM7crSdfPgIxb166HSClI29/SeX+vllB+74ItqSs1cAUdXwl+ 5UMn36etOXN3nRX5bnObwmL5xHk5E2B/HOeKig== -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:25 2024 by rpki-client on console-fra.rpki-client.org