$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa File: b40c47e3-8988-3029-b819-5be6fc4d7af7.roa (raw, json) Hash identifier: 3Kk6pWwHmT6o0ju70ptJ6s9AYInCXri9c4xrrd4QSM0= Subject key identifier: 3A:97:F9:BE:36:94:5B:B9:6A:00:F1:43:E5:7A:12:2D:2A:46:C0:9D Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584768F7E8A72FD579CCB7202270 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa Signing time: Wed 02 Oct 2024 17:43:31 +0000 ROA not before: Wed 02 Oct 2024 17:43:31 +0000 ROA not after: Tue 31 Dec 2024 18:43:31 +0000 asID: 399244 IP address blocks: 76.164.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:68:f7:e8:a7:2f:d5:79:cc:b7:20:22:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Oct 2 17:43:31 2024 GMT Not After : Dec 31 18:43:31 2024 GMT Subject: CN=d94dffb4-c503-45bd-8a94-2827df758879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:2d:a3:e3:ea:2f:df:0a:0e:76:d1:ee:43: d5:c8:e2:81:9a:5e:da:bf:bd:05:79:1c:91:a0:bb: 67:e3:17:a8:68:b7:51:06:3a:0f:31:b0:47:ed:ce: fa:17:50:88:40:7f:e7:5b:5d:00:dc:fc:7b:0a:01: f3:d5:b0:78:6a:c5:d0:4c:23:b0:a9:2b:76:48:2f: 26:34:9d:e0:62:e4:9b:e4:73:3d:85:54:8a:26:73: 70:50:82:99:2b:48:b8:6b:62:c2:c4:66:e9:e7:95: ba:1c:d0:bd:4e:c1:30:48:87:d5:b5:0a:e9:88:94: f4:45:79:7a:a8:36:d9:48:13:59:00:44:f1:52:aa: 22:e6:1f:78:de:3d:7f:3e:26:2a:55:56:52:4a:35: ef:eb:8a:82:96:0f:2b:6f:7b:cc:df:51:1f:3c:db: 51:14:5f:3d:9e:91:bd:8d:f9:fc:b3:f8:0b:1f:f3: a3:54:88:98:64:2a:39:91:b1:bc:a5:db:22:6d:16: 55:d9:31:88:5b:38:84:6d:8e:54:23:9e:61:b9:73: aa:c5:04:c4:78:23:9f:3e:26:5d:33:ce:42:5f:bf: a6:36:80:55:84:54:df:e5:cf:97:63:7f:01:0d:79: 1f:d8:af:02:63:31:1d:dd:2f:07:a5:c6:4a:34:be: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:F9:BE:36:94:5B:B9:6A:00:F1:43:E5:7A:12:2D:2A:46:C0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 76.164.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:26:9e:8a:c8:2b:b7:64:ad:52:e8:92:86:27:41:f2:b7:e1: 78:d8:e2:59:df:88:c3:a1:38:1f:00:2e:0b:a1:2b:21:0f:d6: 90:30:98:c2:bd:21:67:72:fa:84:de:2e:d7:8d:28:c0:6a:46: 4c:c8:0a:a2:61:d9:2e:ac:4f:c9:55:fc:45:1b:f2:01:a1:90: ff:df:89:0d:9e:7a:db:c8:d4:5f:af:16:c2:43:b1:94:63:d5: a8:2c:8c:c2:a8:1d:29:70:db:59:34:2d:66:9e:9b:07:b1:75: 65:7c:c1:41:09:bf:67:db:42:78:15:b8:fa:53:c6:e5:17:2f: 36:11:41:e3:ca:cb:b2:d2:42:4f:aa:0e:81:4f:ea:35:92:cc: a4:1f:4d:c9:f9:ac:e3:cd:27:48:e4:3b:9a:ec:8a:73:2a:5e: 9d:8b:f5:3c:b1:21:b6:7e:ca:66:66:fc:b3:fd:87:c0:2a:6b: f3:f8:fc:cc:35:57:b1:db:79:c7:d3:68:9a:72:70:9c:96:1f: 16:03:97:17:08:92:f9:90:d9:e9:35:5e:c2:35:b0:ca:17:77: 2a:3b:0e:57:be:b8:37:52:2e:6f:b0:1e:b3:fe:ea:fb:5c:d4: dc:7c:f3:3a:e9:8a:39:06:33:e7:43:56:8d:e1:f0:5e:d6:ce: 35:db:f9:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdo9+inL9V5zLcgInAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI0MTAwMjE3NDMzMVoXDTI0MTIzMTE4NDMzMVowLzEtMCsGA1UEAxMk ZDk0ZGZmYjQtYzUwMy00NWJkLThhOTQtMjgyN2RmNzU4ODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywoto+PqL98KDnbR7kPVyOKBml7av70FeRyR oLtn4xeoaLdRBjoPMbBH7c76F1CIQH/nW10A3Px7CgHz1bB4asXQTCOwqSt2SC8m NJ3gYuSb5HM9hVSKJnNwUIKZK0i4a2LCxGbp55W6HNC9TsEwSIfVtQrpiJT0RXl6 qDbZSBNZAETxUqoi5h943j1/PiYqVVZSSjXv64qClg8rb3vM31EfPNtRFF89npG9 jfn8s/gLH/OjVIiYZCo5kbG8pdsibRZV2TGIWziEbY5UI55huXOqxQTEeCOfPiZd M85CX7+mNoBVhFTf5c+XY38BDXkf2K8CYzEd3S8HpcZKNL7U2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqX+b42lFu5agDxQ+V6Ei0qRsCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYjQwYzQ3ZTMtODk4OC0z MDI5LWI4MTktNWJlNmZjNGQ3YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTKTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwmnorIK7dkrVLokoYnQfK34XjY4lnfiMOhOB8ALguhKyEP1pAwmMK9 IWdy+oTeLteNKMBqRkzICqJh2S6sT8lV/EUb8gGhkP/fiQ2eetvI1F+vFsJDsZRj 1agsjMKoHSlw21k0LWaemwexdWV8wUEJv2fbQngVuPpTxuUXLzYRQePKy7LSQk+q DoFP6jWSzKQfTcn5rOPNJ0jkO5rsinMqXp2L9TyxIbZ+ymZm/LP9h8Aqa/P4/Mw1 V7HbecfTaJpycJyWHxYDlxcIkvmQ2ek1XsI1sMoXdyo7Dle+uDdSLm+wHrP+6vtc 1Nx88zrpijkGM+dDVo3h8F7WzjXb+Q0= -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org