$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa File: bfba4049-9260-3ea8-abbe-443facb7c8f1.roa (raw, json) Hash identifier: YvihQViOqRQNco4LNDkGV3agBGaRQqCaq2cAv0LzHHA= Subject key identifier: C3:1F:40:E1:7B:5F:F1:D6:C0:28:20:C2:A5:D6:6E:ED:67:7C:81:9F Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285847F84F82D95D0675DDF5ECE100 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa Signing time: Sat 23 Nov 2024 02:00:28 +0000 ROA not before: Sat 23 Nov 2024 02:00:28 +0000 ROA not after: Fri 21 Feb 2025 02:00:28 +0000 asID: 64267 IP address blocks: 192.171.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f8:4f:82:d9:5d:06:75:dd:f5:ec:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 23 02:00:28 2024 GMT Not After : Feb 21 02:00:28 2025 GMT Subject: CN=7c58bea3-ecc5-4ebe-99b6-74d20353a435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:df:ab:45:a1:4f:34:95:2e:9d:9c:19:36: b6:34:60:c5:be:bf:3f:a3:de:29:6e:77:3b:1f:16: 79:46:4c:a4:3a:47:81:e5:17:83:bc:75:60:68:b5: 0a:10:e6:de:f4:f1:ab:9b:54:50:d6:47:01:67:9d: 99:6d:cd:96:22:c6:fa:0c:59:01:ca:2b:5c:8c:3a: 4b:45:41:c2:21:98:4e:02:65:57:2e:86:cd:5a:e7: 40:88:6d:46:54:93:53:23:53:27:e7:1d:de:ce:e4: 42:d3:40:60:97:ea:aa:00:b5:8e:f7:c5:b7:18:e3: 23:56:2f:5b:5f:03:74:1f:41:e8:bd:38:2c:87:ea: 46:83:ae:f2:5d:7f:2f:ad:c8:96:62:2f:0e:18:76: e1:56:c8:e1:14:bb:bf:67:dd:6b:06:4b:9c:48:e9: 15:a9:48:6b:e2:fe:a8:c2:2a:93:92:20:d6:3a:3f: 51:82:55:92:d3:b9:e9:68:bf:92:17:4a:a7:84:fd: 20:28:f4:8c:f6:83:46:2b:f6:66:59:9d:40:85:de: 5d:54:b4:f1:a5:c4:0a:ad:da:4f:1f:89:d0:87:31: c0:ce:b3:4c:cd:a4:29:78:c5:03:d7:ce:b1:8d:a8: 6b:57:b1:ff:35:4c:b4:11:2f:01:1c:47:f9:a1:f2: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1F:40:E1:7B:5F:F1:D6:C0:28:20:C2:A5:D6:6E:ED:67:7C:81:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:14:31:d0:ba:38:40:fe:e4:1e:50:4d:0e:df:f8:5a:c2:1c: 6e:6f:37:30:d4:95:53:fe:07:7c:24:08:de:2d:96:52:f8:d7: a8:df:55:18:c5:b6:ac:ee:cb:6e:4d:97:ea:25:77:ef:fd:8a: ce:87:7a:d7:81:1e:19:c6:1c:54:20:1e:a2:d4:18:14:d3:2f: c2:7c:0a:66:ff:8b:2c:c5:58:ab:ed:0a:10:bd:48:9d:60:d6: b7:3e:c3:8e:43:54:27:fc:f0:ef:1b:8d:99:42:25:50:9c:c4: 6b:03:0c:11:03:39:a2:69:60:72:69:9b:f6:3b:e4:44:23:78: 66:36:9c:b0:e6:dd:d4:7c:3e:1e:13:63:75:04:08:c9:5f:48: 34:f4:00:82:b9:21:a9:98:c4:8c:74:af:89:00:4b:c7:00:2f: 31:fe:ef:83:e4:39:92:17:ee:94:e6:5f:bd:56:7b:86:fa:92: 91:3d:3a:fc:2a:ef:e2:24:70:91:6b:ca:25:64:37:51:41:bf: c0:0f:35:0e:23:04:ac:52:52:8b:0f:92:f4:1d:62:46:54:3f: e3:7a:57:17:6b:98:f0:ce:91:fc:21:8f:c3:1b:ca:1c:df:d1: 33:31:a3:3b:9c:8c:63:9e:97:29:8c:c0:94:29:00:1b:0c:f4: 89:7d:8c:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T4LZXQZ13fXs4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk N2M1OGJlYTMtZWNjNS00ZWJlLTk5YjYtNzRkMjAzNTNhNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaPfq0WhTzSVLp2cGTa2NGDFvr8/o94pbnc7 HxZ5RkykOkeB5ReDvHVgaLUKEObe9PGrm1RQ1kcBZ52Zbc2WIsb6DFkByitcjDpL RUHCIZhOAmVXLobNWudAiG1GVJNTI1Mn5x3ezuRC00Bgl+qqALWO98W3GOMjVi9b XwN0H0HovTgsh+pGg67yXX8vrciWYi8OGHbhVsjhFLu/Z91rBkucSOkVqUhr4v6o wiqTkiDWOj9RglWS07npaL+SF0qnhP0gKPSM9oNGK/ZmWZ1Ahd5dVLTxpcQKrdpP H4nQhzHAzrNMzaQpeMUD186xjahrV7H/NUy0ES8BHEf5ofJXhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMfQOF7X/HWwCggwqXWbu1nfIGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmZiYTQwNDktOTI2MC0z ZWE4LWFiYmUtNDQzZmFjYjdjOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIUMdC6OED+5B5QTQ7f+FrCHG5vNzDUlVP+B3wkCN4tllL416jfVRjF tqzuy25Nl+old+/9is6HeteBHhnGHFQgHqLUGBTTL8J8Cmb/iyzFWKvtChC9SJ1g 1rc+w45DVCf88O8bjZlCJVCcxGsDDBEDOaJpYHJpm/Y75EQjeGY2nLDm3dR8Ph4T Y3UECMlfSDT0AIK5IamYxIx0r4kAS8cALzH+74PkOZIX7pTmX71We4b6kpE9Ovwq 7+IkcJFryiVkN1FBv8APNQ4jBKxSUosPkvQdYkZUP+N6VxdrmPDOkfwhj8Mbyhzf 0TMxozucjGOelymMwJQpABsM9Il9jPA= -----END CERTIFICATE-----Generated at Sun Nov 24 16:06:21 2024 by rpki-client on console-ams.rpki-client.org