$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e009342d-3db9-319f-8e9e-99edde58107d.roa File: e009342d-3db9-319f-8e9e-99edde58107d.roa (raw, json) Hash identifier: Lk7lc1m0MSJaqLO2yvGbccfGSLfZIh8wWpJeW/OEz9o= Subject key identifier: 8A:30:AF:83:18:34:EE:5B:88:44:BC:52:92:08:5C:3A:BC:D9:B9:6F Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285847A8A154EB12093F7F31371A20 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e009342d-3db9-319f-8e9e-99edde58107d.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 7018 IP address blocks: 172.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:54:eb:12:09:3f:7f:31:37:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=a7b68f4b-dfaa-4d75-a154-aba8e6d2e5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:56:6d:f2:95:4e:2c:08:17:44:23:3d:67:f4: d3:00:e8:50:31:3d:ce:0a:40:9f:d2:52:05:b7:c8: b2:62:68:76:9a:6d:59:da:67:f1:66:06:91:e7:77: 1e:dd:81:6d:8a:ae:75:f5:4e:aa:69:67:ad:c6:63: a7:8a:e5:78:5f:f6:c3:58:cc:b2:22:8f:f9:4b:6e: 31:12:07:d2:24:77:1d:ea:60:1f:37:92:02:67:29: b5:d0:83:d6:85:0c:b4:59:04:ba:b1:34:a2:cb:d4: 67:a0:af:08:47:83:3e:6f:05:ff:2c:36:c9:45:ae: ca:85:99:ad:92:6c:21:14:b2:d5:99:4c:e1:2f:5b: e7:a1:98:af:6e:44:70:11:82:64:d2:e8:7a:64:5c: a9:b5:c8:2e:5b:53:1d:b0:11:d0:3d:5b:5e:e4:13: bb:89:f5:67:a6:cd:77:29:a6:8b:83:87:2c:bc:57: 37:9b:fa:9e:eb:e9:2f:b5:5c:15:68:94:0d:30:b3: 1a:5b:a8:bc:8a:f3:c9:fb:0d:47:f6:1a:5f:71:bc: 99:01:c3:45:b0:24:47:16:61:10:67:c3:8b:fa:dd: b6:47:3e:2b:d1:98:55:ba:c7:e0:41:61:cd:98:a8: 8e:26:54:dc:85:1b:ac:16:6a:c8:c0:9f:48:30:12: 43:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:30:AF:83:18:34:EE:5B:88:44:BC:52:92:08:5C:3A:BC:D9:B9:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e009342d-3db9-319f-8e9e-99edde58107d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9d:a1:27:e3:35:c8:14:c9:bf:dd:cd:2a:69:a6:70:ab:f4: 33:f9:80:aa:94:ff:71:2e:97:ba:81:a7:1f:9a:a4:dd:28:cf: b2:55:2e:be:57:bb:0d:94:02:83:05:90:8d:52:f6:52:79:31: 05:81:25:6f:c5:7c:4e:dc:b9:2e:13:da:29:8b:39:8d:31:f3: 66:75:a8:11:b7:20:6d:e5:8f:a3:f3:e6:68:8d:9c:89:59:d4: fd:e0:bf:dd:47:15:74:16:ec:2c:b7:13:7f:79:99:c9:a0:0c: b5:0e:3f:61:74:56:37:d9:25:b6:d8:df:7b:3f:3c:8e:cf:f9: f1:49:f7:63:c8:4f:67:3c:c2:93:d8:48:09:13:35:81:8d:36: 06:5b:fd:28:52:d1:45:1c:4d:6e:93:ee:c8:e2:96:79:36:f9: 37:36:28:1f:be:eb:c8:f8:f4:d3:fa:0b:7b:81:b7:33:96:06: cb:fc:cb:1a:4b:ae:96:25:3f:0e:a0:5f:fe:68:3a:98:fd:90: d1:6c:1b:17:39:5c:5d:b7:3a:de:f2:11:d8:06:e8:c0:be:00: d0:f4:54:df:18:a2:d9:5f:4b:56:71:f9:92:a3:0c:e2:63:6e: 54:ed:fd:9f:bd:3d:fe:8b:02:2d:74:10:a4:39:ef:a5:ca:41: 1f:49:70:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooVTrEgk/fzE3GiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk YTdiNjhmNGItZGZhYS00ZDc1LWExNTQtYWJhOGU2ZDJlNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VZt8pVOLAgXRCM9Z/TTAOhQMT3OCkCf0lIF t8iyYmh2mm1Z2mfxZgaR53ce3YFtiq519U6qaWetxmOniuV4X/bDWMyyIo/5S24x EgfSJHcd6mAfN5ICZym10IPWhQy0WQS6sTSiy9RnoK8IR4M+bwX/LDbJRa7KhZmt kmwhFLLVmUzhL1vnoZivbkRwEYJk0uh6ZFyptcguW1MdsBHQPVte5BO7ifVnps13 KaaLg4csvFc3m/qe6+kvtVwVaJQNMLMaW6i8ivPJ+w1H9hpfcbyZAcNFsCRHFmEQ Z8OL+t22Rz4r0ZhVusfgQWHNmKiOJlTchRusFmrIwJ9IMBJDmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIowr4MYNO5biES8UpIIXDq82blvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZTAwOTM0MmQtM2RiOS0z MTlmLThlOWUtOTllZGRlNTgxMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWdoSfjNcgUyb/dzSpppnCr9DP5gKqU/3Eul7qBpx+apN0oz7JVLr5X uw2UAoMFkI1S9lJ5MQWBJW/FfE7cuS4T2imLOY0x82Z1qBG3IG3lj6Pz5miNnIlZ 1P3gv91HFXQW7Cy3E395mcmgDLUOP2F0VjfZJbbY33s/PI7P+fFJ92PIT2c8wpPY SAkTNYGNNgZb/ShS0UUcTW6T7sjilnk2+Tc2KB++68j49NP6C3uBtzOWBsv8yxpL rpYlPw6gX/5oOpj9kNFsGxc5XF23Ot7yEdgG6MC+AND0VN8YotlfS1Zx+ZKjDOJj blTt/Z+9Pf6LAi10EKQ576XKQR9JcEI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org