$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/9403e0f3-68ce-3a07-80f2-92e67cc39397.roa File: 9403e0f3-68ce-3a07-80f2-92e67cc39397.roa (raw, json) Hash identifier: tqY0o7imUT884P6nWw0BjtcTxnV3scF87UDNP+5BxXg= Subject key identifier: A3:BF:11:CD:1C:FD:3B:B6:1E:B0:AC:89:53:74:60:70:F0:96:8A:37 Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F432858477660FC8658C2E3A4996FF700 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/9403e0f3-68ce-3a07-80f2-92e67cc39397.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 33189 IP address blocks: 206.176.14.0/23 maxlen: 24 206.176.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:60:fc:86:58:c2:e3:a4:99:6f:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=c8f15665-dec4-4e79-947e-4db2adebe125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:71:44:a4:a9:d1:98:53:9f:ae:d5:5e:cb:9d: 5e:7a:a3:ff:b2:45:87:10:92:45:9c:7b:92:d9:69: 25:38:a0:ce:c8:df:0c:f1:c2:d6:ec:58:ec:9e:96: be:1d:f7:14:b5:d7:a9:70:51:60:af:f6:69:7c:93: 41:bb:c6:ea:0a:a4:b5:dd:51:70:61:5e:cb:ea:a2: b9:24:92:33:9f:c1:be:d1:e3:af:96:18:49:16:a4: 26:11:17:0f:45:ec:a4:e5:ee:c1:ed:ae:91:fe:cd: 0e:f1:43:49:21:69:24:75:5b:7f:24:cb:62:49:a5: 35:f6:8b:8c:5d:c2:a1:5e:32:4e:1b:32:2c:a9:aa: c9:ce:57:66:6f:e5:3f:93:0b:fa:61:11:bf:5f:95: ec:d8:cf:df:2f:b4:66:20:a0:aa:f7:79:1c:3f:45: a3:1f:cc:06:91:51:bc:7f:49:00:e8:97:80:0a:bd: b8:e4:9a:40:50:9b:f7:96:8a:44:7e:a8:e5:52:91: 07:0a:06:89:6c:09:b0:7c:70:49:1e:59:22:5a:e1: d4:ef:e0:89:6d:ee:75:60:81:b4:35:0c:fa:a3:10: aa:83:30:cd:57:71:cb:04:b4:33:a1:ae:e1:c9:89: 2a:1c:87:a9:aa:8d:73:2d:0f:26:9e:cb:68:63:cb: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BF:11:CD:1C:FD:3B:B6:1E:B0:AC:89:53:74:60:70:F0:96:8A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/9403e0f3-68ce-3a07-80f2-92e67cc39397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv4: 206.176.14.0/23 206.176.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:37:09:3e:e6:94:db:88:c9:5c:3b:2a:a7:b5:70:4a:41:6f: 18:83:ce:52:18:66:2a:56:11:41:b5:f5:d1:f0:f1:0c:09:01: 45:a6:3a:6a:00:41:58:1b:17:bf:c5:af:9a:19:44:57:52:0f: 6e:cf:62:8b:c4:ab:c6:3e:0b:c0:30:54:37:96:ed:c7:96:14: 70:ac:9b:12:d2:45:f5:8d:f2:6c:27:c8:da:9a:aa:d2:3d:28: 39:44:8a:c4:05:81:fd:4a:57:f7:41:b5:ad:58:66:e8:8e:74: fe:59:43:e1:a1:bd:52:51:f6:57:4d:b4:c2:1c:37:9c:03:bb: a5:cb:4d:e7:6e:e7:cb:52:61:c7:29:ff:dc:96:c0:0d:c2:69: fe:0a:6d:db:16:fb:42:7a:85:6c:5b:8c:22:6a:dc:cd:77:7b: c6:e2:02:1b:4f:69:17:f3:8a:15:82:59:6b:cc:2a:0a:b4:21: 7e:e3:60:ad:f9:59:84:46:11:bb:7f:fe:01:91:ec:1e:37:4e: 7e:55:50:5d:50:e7:ba:df:e7:7d:4a:65:94:a1:d9:45:fd:75: 14:0a:17:38:cc:30:38:0e:f6:3e:5e:65:25:a3:1f:3b:ed:bd: c4:7b:4d:ea:1d:1f:65:0d:88:07:06:12:6b:de:6c:a4:3e:b1: 95:f6:2e:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEd2YPyGWMLjpJlv9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YzhmMTU2NjUtZGVjNC00ZTc5LTk0N2UtNGRiMmFkZWJlMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknFEpKnRmFOfrtVey51eeqP/skWHEJJFnHuS 2WklOKDOyN8M8cLW7Fjsnpa+HfcUtdepcFFgr/ZpfJNBu8bqCqS13VFwYV7L6qK5 JJIzn8G+0eOvlhhJFqQmERcPReyk5e7B7a6R/s0O8UNJIWkkdVt/JMtiSaU19ouM XcKhXjJOGzIsqarJzldmb+U/kwv6YRG/X5Xs2M/fL7RmIKCq93kcP0WjH8wGkVG8 f0kA6JeACr245JpAUJv3lopEfqjlUpEHCgaJbAmwfHBJHlkiWuHU7+CJbe51YIG0 NQz6oxCqgzDNV3HLBLQzoa7hyYkqHIepqo1zLQ8mnstoY8sJnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKO/Ec0c/Tu2HrCsiVN0YHDwloo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvOTQwM2UwZjMtNjhjZS0z YTA3LTgwZjItOTJlNjdjYzM5Mzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzrAOAwQA zrASMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABk3CT7mlNuIyVw7Kqe1cEpBbxiDzlIYZipWEUG19dHw8QwJ AUWmOmoAQVgbF7/Fr5oZRFdSD27PYovEq8Y+C8AwVDeW7ceWFHCsmxLSRfWN8mwn yNqaqtI9KDlEisQFgf1KV/dBta1YZuiOdP5ZQ+GhvVJR9ldNtMIcN5wDu6XLTedu 58tSYccp/9yWwA3Caf4KbdsW+0J6hWxbjCJq3M13e8biAhtPaRfzihWCWWvMKgq0 IX7jYK35WYRGEbt//gGR7B43Tn5VUF1Q57rf531KZZSh2UX9dRQKFzjMMDgO9j5e ZSWjHzvtvcR7TeodH2UNiAcGEmvebKQ+sZX2Lk4= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:27 2024 by rpki-client on console-fra.rpki-client.org