$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa File: a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa (raw, json) Hash identifier: AC0lLdMj5PjnLYYkcc8EKthMBWbnC2cu/f2F/q39S80= Subject key identifier: CF:CE:4A:17:BA:5E:02:4F:26:26:B4:5E:F8:F7:95:8F:13:DC:9C:24 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F432858477660F9D7887E52C17E99A280 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 88 IP address blocks: 192.12.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:60:f9:d7:88:7e:52:c1:7e:99:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=73a9934b-cda4-40aa-8ae1-0ebc2a8e93a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c4:82:31:b6:82:80:e7:f1:4f:c3:aa:a4:1a: 5d:a4:0f:14:c9:49:d3:03:e8:01:82:58:41:db:7f: eb:5e:68:6c:cb:f9:bb:e3:54:46:4e:4e:05:18:66: f6:c1:85:84:75:b7:a4:1b:9c:a0:e6:9e:22:61:70: 19:1a:32:6b:f3:9f:e5:f6:54:29:f0:76:34:5b:e1: 34:38:c3:53:cb:dc:b9:3f:cd:e9:12:dd:aa:59:23: 75:5b:f4:b7:e4:de:09:35:48:1b:9e:27:05:73:13: 39:32:83:38:07:bc:c2:2e:ca:f7:dd:1a:50:af:10: 50:3c:40:c8:34:b3:8f:36:3f:b6:e2:d0:fc:cb:b4: 1c:86:6e:29:49:66:67:bb:39:0c:fc:7b:ec:7d:92: 92:49:0e:01:1d:39:31:9d:a6:bf:3b:ef:0d:b7:76: d9:08:cc:ee:fa:2e:4a:7c:11:75:d7:2e:2e:8b:5d: 87:06:01:41:3b:ce:88:f3:15:3d:1c:09:de:2e:6a: 18:29:cd:b2:b2:78:b5:e6:2d:f2:e3:86:35:b2:99: ff:d3:f0:8a:3a:67:f2:ad:0a:ab:50:28:d4:3a:b2: d8:de:84:2c:dd:3c:85:90:82:29:b1:4b:32:fe:5e: 6a:78:11:9a:45:fe:4c:c6:75:1f:e1:27:4d:4f:a2: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CE:4A:17:BA:5E:02:4F:26:26:B4:5E:F8:F7:95:8F:13:DC:9C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 192.12.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bb:03:84:6d:df:46:8d:ed:e2:db:28:82:61:9c:7e:c9:df: 78:c3:d7:76:1c:60:ab:fe:0b:8a:db:f4:36:4c:81:e9:78:0b: 4f:b5:83:e0:18:e7:ca:ff:0d:24:8b:6d:3d:ec:47:3c:36:1d: 28:d8:72:3f:c2:70:a2:9f:f6:be:f5:da:b8:53:c8:4a:5a:61: 37:9d:5b:f2:b9:9c:29:f4:72:e4:1e:c1:c7:4f:15:07:6d:ce: 07:4e:5f:a5:7a:e3:12:0b:9a:a6:db:66:68:40:25:de:d7:8a: ca:19:bf:74:7b:a9:4e:21:4d:29:ab:78:3a:22:cb:d8:cc:84: 22:b4:cf:c6:89:a7:94:fd:04:be:88:05:72:b1:0e:99:75:f6: c4:60:bc:89:9d:40:9c:4b:04:5b:f4:05:5f:49:92:0c:a3:9c: bb:31:ef:a0:bc:76:9c:e4:f2:41:dd:ac:c9:5a:2c:73:7a:26: 1e:43:8a:e3:90:31:97:8c:51:fc:3f:89:e9:36:51:ca:0d:77: da:ad:2f:0e:ea:a7:d0:72:8f:a5:8c:38:33:7f:61:22:80:ac: a8:07:b1:f6:f9:50:7a:c1:26:12:43:e4:65:69:0b:7b:92:4d: cc:f5:7a:5c:e3:75:60:b0:48:cb:84:06:1c:a9:42:49:2b:64: 08:dd:8c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YPnXiH5SwX6ZooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NzNhOTkzNGItY2RhNC00MGFhLThhZTEtMGViYzJhOGU5M2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsSCMbaCgOfxT8OqpBpdpA8UyUnTA+gBglhB 23/rXmhsy/m741RGTk4FGGb2wYWEdbekG5yg5p4iYXAZGjJr85/l9lQp8HY0W+E0 OMNTy9y5P83pEt2qWSN1W/S35N4JNUgbnicFcxM5MoM4B7zCLsr33RpQrxBQPEDI NLOPNj+24tD8y7Qchm4pSWZnuzkM/HvsfZKSSQ4BHTkxnaa/O+8Nt3bZCMzu+i5K fBF11y4ui12HBgFBO86I8xU9HAneLmoYKc2ysni15i3y44Y1spn/0/CKOmfyrQqr UCjUOrLY3oQs3TyFkIIpsUsy/l5qeBGaRf5MxnUf4SdNT6IDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/OShe6XgJPJia0Xvj3lY8T3JwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYTcwNDY4ODMtZDllZS0z ZWZlLWJjY2QtY2I2YTAxM2IzYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAw1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS7A4Rt30aN7eLbKIJhnH7J33jD13YcYKv+C4rb9DZMgel4C0+1g+AY 58r/DSSLbT3sRzw2HSjYcj/CcKKf9r712rhTyEpaYTedW/K5nCn0cuQewcdPFQdt zgdOX6V64xILmqbbZmhAJd7XisoZv3R7qU4hTSmreDoiy9jMhCK0z8aJp5T9BL6I BXKxDpl19sRgvImdQJxLBFv0BV9JkgyjnLsx76C8dpzk8kHdrMlaLHN6Jh5DiuOQ MZeMUfw/iek2UcoNd9qtLw7qp9Byj6WMODN/YSKArKgHsfb5UHrBJhJD5GVpC3uS Tcz1elzjdWCwSMuEBhypQkkrZAjdjI8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:27 2024 by rpki-client on console-fra.rpki-client.org