$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa File: 8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa (raw, json) Hash identifier: 2KlKNyO4+DKYKG1ue+XDGd5+qQCgYOrJixX5fd1FxCI= Subject key identifier: 83:28:ED:76:86:DA:C1:95:41:A7:7B:23:45:73:51:F2:06:BF:14:F7 Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Certificate serial: 010D0C9F432858479362D436090E03A6C7808780 Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa Signing time: Thu 17 Oct 2024 22:22:54 +0000 ROA not before: Thu 17 Oct 2024 22:22:54 +0000 ROA not after: Wed 15 Jan 2025 23:22:54 +0000 asID: 16509 IP address blocks: 192.157.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:62:d4:36:09:0e:03:a6:c7:80:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4 Validity Not Before: Oct 17 22:22:54 2024 GMT Not After : Jan 15 23:22:54 2025 GMT Subject: CN=c628ea86-662e-46a4-a5f6-d5df1d83ef68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:b2:fa:08:32:5b:71:78:1c:f9:7f:06:f2: a4:82:f4:a6:9d:de:af:26:d2:a8:36:b0:c1:f9:c7: 54:dc:d7:38:8b:af:64:ab:09:2e:59:04:71:b7:b3: eb:0e:c9:c5:e5:8b:ea:ab:01:80:4f:24:40:5a:32: 9b:a6:0b:26:e9:dd:6c:a0:34:97:22:24:f2:c3:2a: a6:d7:3b:3f:c4:44:61:c5:c1:45:f2:c4:e8:59:67: f6:2d:eb:f3:b3:3b:6f:42:65:89:64:a8:3d:34:06: d3:bf:ab:ef:5b:8d:ae:e7:5f:18:a7:32:7b:1b:25: 77:1a:3d:6c:34:f3:33:1e:ad:1b:51:d0:d8:27:24: 8f:a2:b2:97:86:c2:03:2e:14:27:0c:2c:85:58:8d: 6a:79:9b:17:d1:97:91:29:77:35:15:26:5b:d9:92: fd:29:7d:fb:d5:e4:80:21:91:48:74:1f:87:06:0f: 56:a3:d6:81:8a:96:e5:55:9d:e5:25:68:26:c6:b8: 1a:71:79:c8:20:dd:09:ff:5b:f5:70:f4:5d:05:f9: b0:ad:e1:d6:81:12:93:25:5e:48:3e:1f:cf:b1:02: c1:c6:33:be:ee:b9:60:17:89:cb:c9:e3:30:2a:d4: 11:4b:62:c0:fe:0e:9e:ff:dc:57:9c:c4:33:48:62: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:28:ED:76:86:DA:C1:95:41:A7:7B:23:45:73:51:F2:06:BF:14:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl X509v3 Authority Key Identifier: keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer sbgp-ipAddrBlock: critical IPv4: 192.157.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d0:8d:8a:01:57:1a:00:ec:d1:c2:90:06:bf:95:ec:1c:7f: 07:37:09:ff:61:42:fb:a2:11:30:65:4c:54:5f:9d:9a:51:9a: fc:ad:82:34:ba:6a:c6:3e:13:33:10:61:c9:ab:e9:7e:84:78: c7:5f:99:d4:86:21:74:21:57:36:2f:ea:b5:56:ac:b4:09:ea: 74:f0:c1:25:1b:ae:60:84:7a:78:f4:b7:90:16:97:33:bd:d3: 22:19:8c:37:1d:b4:29:88:3e:4c:4e:d1:52:ec:9d:9c:4e:c5: b0:a3:eb:e1:55:02:c4:15:e6:da:d6:75:7e:91:18:e2:9d:10: 6c:7e:e1:07:7a:24:bb:89:b7:2c:9b:f2:57:f5:1f:00:6d:6b: 80:94:4f:5c:76:d7:17:77:b8:a3:23:66:65:5a:e4:7f:b6:52: fa:0e:2a:b5:97:3f:92:c8:64:46:39:c9:94:cf:d1:05:13:2a: cc:75:20:1b:53:ee:98:73:85:22:e2:df:07:eb:13:aa:03:e0: a9:79:b9:de:de:e6:f3:62:25:b7:76:fa:47:05:65:0c:96:66: 17:65:f1:1f:14:b5:89:e7:ec:81:de:4a:27:60:34:f7:06:99: f2:37:5b:79:f4:dc:97:7f:2b:a5:46:30:b0:bb:ed:28:f6:5d: 7f:ff:93:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTYtQ2CQ4DpseAh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm MWE0MB4XDTI0MTAxNzIyMjI1NFoXDTI1MDExNTIzMjI1NFowLzEtMCsGA1UEAxMk YzYyOGVhODYtNjYyZS00NmE0LWE1ZjYtZDVkZjFkODNlZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPay+ggyW3F4HPl/BvKkgvSmnd6vJtKoNrDB +cdU3Nc4i69kqwkuWQRxt7PrDsnF5YvqqwGATyRAWjKbpgsm6d1soDSXIiTywyqm 1zs/xERhxcFF8sToWWf2LevzsztvQmWJZKg9NAbTv6vvW42u518YpzJ7GyV3Gj1s NPMzHq0bUdDYJySPorKXhsIDLhQnDCyFWI1qeZsX0ZeRKXc1FSZb2ZL9KX371eSA IZFIdB+HBg9Wo9aBipblVZ3lJWgmxrgacXnIIN0J/1v1cPRdBfmwreHWgRKTJV5I Ph/PsQLBxjO+7rlgF4nLyeMwKtQRS2LA/g6e/9xXnMQzSGIZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMo7XaG2sGVQad7I0VzUfIGvxT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvOGM2OWRiZTctN2U2OS0z NGFhLWJiMTQtZGU4OTRiYWM2ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx YjNjMmYxYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHQjYoBVxoA7NHCkAa/lewcfwc3Cf9hQvuiETBlTFRfnZpRmvytgjS6 asY+EzMQYcmr6X6EeMdfmdSGIXQhVzYv6rVWrLQJ6nTwwSUbrmCEenj0t5AWlzO9 0yIZjDcdtCmIPkxO0VLsnZxOxbCj6+FVAsQV5trWdX6RGOKdEGx+4Qd6JLuJtyyb 8lf1HwBta4CUT1x21xd3uKMjZmVa5H+2UvoOKrWXP5LIZEY5yZTP0QUTKsx1IBtT 7phzhSLi3wfrE6oD4Kl5ud7e5vNiJbd2+kcFZQyWZhdl8R8UtYnn7IHeSidgNPcG mfI3W3n03Jd/K6VGMLC77Sj2XX//k1Q= -----END CERTIFICATE-----Generated at Tue Oct 22 22:59:59 2024 by rpki-client on console-fra.rpki-client.org