$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa File: 157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa (raw, json) Hash identifier: Ge1nfJPtxGG3Gnc/LyXItlHqAQzKJhzTzLzqu0qekX4= Subject key identifier: 00:2D:85:C0:4F:CE:C3:1E:6A:F2:B6:A0:BB:8C:0B:7D:19:82:1E:BE Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F432858473E8B4C9CE57C0C4D98D7CF10 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa Signing time: Tue 17 Sep 2024 13:00:41 +0000 ROA not before: Tue 17 Sep 2024 13:00:41 +0000 ROA not after: Mon 16 Dec 2024 14:00:41 +0000 asID: 7018 IP address blocks: 192.171.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3e:8b:4c:9c:e5:7c:0c:4d:98:d7:cf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 17 13:00:41 2024 GMT Not After : Dec 16 14:00:41 2024 GMT Subject: CN=9136f7c0-9f5c-4801-bc04-1ec57deac904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:29:96:f5:c2:2e:54:08:45:8c:ac:f6:91: d5:b1:8e:89:da:67:d9:bb:88:d2:47:50:c2:bb:cd: 24:0f:ff:99:75:7d:6c:77:ac:57:af:24:b2:47:1f: 59:58:dd:b7:56:ed:10:6f:06:17:19:d5:97:27:0a: 6a:d0:f4:17:44:d1:da:b9:61:27:47:6e:08:18:49: 4c:dd:f8:85:74:39:ee:21:62:4f:08:0a:88:a9:8a: 22:a3:81:7e:c1:50:d6:91:2a:fe:28:bc:f1:87:e1: 0b:0d:7c:9f:fd:8b:88:29:5d:11:ad:39:33:33:d8: ac:25:51:b5:0a:07:11:53:3d:db:6b:e5:d1:59:e8: b6:37:00:fb:0b:c4:6a:e0:4e:d9:27:09:f0:ae:67: 12:0e:6a:b6:09:04:10:ac:79:30:66:96:ee:45:9c: 20:c9:9a:79:1d:7b:a9:3b:40:92:f0:09:ab:8b:6b: 4f:99:90:16:4d:9a:a3:da:e6:16:ae:64:17:a4:1b: 37:bb:d0:cf:24:39:37:ed:8f:f8:e1:fc:84:5e:94: e5:e9:89:2e:31:ce:e2:52:0a:08:8b:a1:9a:96:84: 28:60:b1:0f:91:b3:01:cf:88:fd:78:1d:e1:d0:f3: 49:81:07:61:d6:2b:e3:14:16:b2:85:e5:a9:7c:40: 5b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2D:85:C0:4F:CE:C3:1E:6A:F2:B6:A0:BB:8C:0B:7D:19:82:1E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/157c83b7-e86a-3b66-8b96-dbaf630e7fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4c:b2:fc:7c:64:7a:cb:4e:09:48:d3:b6:97:06:cb:0c:29: 3f:cf:6b:a1:5d:4e:47:76:54:53:ad:c2:0e:c7:7b:85:28:37: 03:d7:95:aa:4c:c3:1d:2c:d5:89:8a:a7:b8:28:4b:ad:00:96: 67:11:be:a0:2b:81:d5:28:0c:80:6f:d2:05:e4:8d:6a:d0:94: 49:cd:db:f8:ab:80:54:18:c0:93:71:03:09:9e:95:ff:a4:7a: 48:46:9a:1a:33:88:ff:ea:90:bd:41:b7:be:1e:7d:a1:37:bb: 03:b5:0e:09:5c:62:51:d2:b9:2a:9c:72:c6:3d:79:93:d4:4f: 21:ed:c2:2e:62:7f:4e:22:95:99:85:b2:81:ea:b1:d9:15:66: 7f:83:e0:f2:81:44:0f:cc:94:99:b3:45:a2:b9:c2:40:1d:3d: de:28:b3:27:11:25:b3:55:b1:49:a1:ad:67:11:c2:77:96:1b: e7:b7:fd:d0:eb:cb:d5:73:f3:86:9c:2d:d6:fe:19:d0:3f:8b: 44:d5:3b:1b:19:54:99:c5:b6:b5:d2:93:28:57:e6:41:37:5c: e2:47:4e:42:9d:2b:0c:91:84:df:3f:c2:8f:9c:b1:dc:84:32: 12:7b:59:54:5b:82:ce:21:25:cc:e7:af:99:c6:f8:99:2d:b8: b6:d6:a6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc+i0yc5XwMTZjXzxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MDkxNzEzMDA0MVoXDTI0MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk OTEzNmY3YzAtOWY1Yy00ODAxLWJjMDQtMWVjNTdkZWFjOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIcplvXCLlQIRYys9pHVsY6J2mfZu4jSR1DC u80kD/+ZdX1sd6xXrySyRx9ZWN23Vu0QbwYXGdWXJwpq0PQXRNHauWEnR24IGElM 3fiFdDnuIWJPCAqIqYoio4F+wVDWkSr+KLzxh+ELDXyf/YuIKV0RrTkzM9isJVG1 CgcRUz3ba+XRWei2NwD7C8Rq4E7ZJwnwrmcSDmq2CQQQrHkwZpbuRZwgyZp5HXup O0CS8Amri2tPmZAWTZqj2uYWrmQXpBs3u9DPJDk37Y/44fyEXpTl6YkuMc7iUgoI i6GaloQoYLEPkbMBz4j9eB3h0PNJgQdh1ivjFBayheWpfEBb6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAthcBPzsMeavK2oLuMC30Zgh6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMTU3YzgzYjctZTg2YS0z YjY2LThiOTYtZGJhZjYzMGU3ZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Msvx8ZHrLTglI07aXBssMKT/Pa6FdTkd2VFOtwg7He4UoNwPXlapM wx0s1YmKp7goS60AlmcRvqArgdUoDIBv0gXkjWrQlEnN2/irgFQYwJNxAwmelf+k ekhGmhoziP/qkL1Bt74efaE3uwO1DglcYlHSuSqccsY9eZPUTyHtwi5if04ilZmF soHqsdkVZn+D4PKBRA/MlJmzRaK5wkAdPd4osycRJbNVsUmhrWcRwneWG+e3/dDr y9Vz84acLdb+GdA/i0TVOxsZVJnFtrXSkyhX5kE3XOJHTkKdKwyRhN8/wo+csdyE MhJ7WVRbgs4hJcznr5nG+JktuLbWplE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org