$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa File: 04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa (raw, json) Hash identifier: HZLAtlhiOXWzhJGJCUHwKV+0Xf0Ooq9+fYIioXx5JBI= Subject key identifier: AF:8E:42:E5:16:14:91:78:A9:78:F3:AA:FA:50:76:7B:DD:B3:C3:F9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DC649F88D1E172DBEBBCD300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 852 IP address blocks: 207.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:9f:88:d1:e1:72:db:eb:bc:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=bb3ce0a7-269e-4e29-b416-22bbcb6c18f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:0b:35:5d:8f:ad:62:d3:1e:0a:f7:a3:37: 81:6e:3d:1a:63:72:57:9b:80:e1:2f:8b:51:8a:42: c3:d4:a1:5f:bc:7d:9f:e3:c1:c1:94:aa:a0:ff:85: 77:9c:33:3a:48:b1:df:50:77:cd:b5:ae:9f:e8:ac: d7:8f:a7:7b:1f:07:f5:6e:d8:7c:0c:37:ae:4c:35: 4d:04:0e:ea:78:d8:0a:19:75:5f:87:03:eb:0d:d9: dc:fa:42:b3:51:22:33:1e:fe:70:24:c7:11:a8:f2: d0:a6:7b:3f:a1:6c:52:4d:68:cb:29:fe:ad:0c:07: 5e:08:d0:ae:d6:61:fc:f4:6d:72:6d:80:20:88:44: ef:39:41:b3:54:43:d9:79:77:a1:a1:7a:bf:d4:37: ca:71:f9:5a:3a:be:37:25:31:4a:36:cb:66:47:25: df:be:0b:d7:98:68:06:81:e4:bf:f7:89:66:64:02: 63:db:72:2c:fc:ee:f3:a2:ac:ca:df:b6:b9:f4:ac: e9:e4:37:13:10:46:cd:1d:22:83:02:08:80:fa:0c: 2f:8a:47:30:e5:d8:55:8e:e0:b4:86:df:e7:24:43: 9d:66:bb:4c:4c:7f:41:8b:db:77:c3:d0:bd:87:24: 64:30:cc:59:4d:f5:f3:ee:63:22:7d:05:48:72:dc: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8E:42:E5:16:14:91:78:A9:78:F3:AA:FA:50:76:7B:DD:B3:C3:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/04150e6b-fb3c-3afe-8de2-1a2d7b44dc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:1d:ba:0e:72:5e:d4:2c:1b:ad:dd:29:db:ec:34:6a:97:2f: 91:ab:c0:c7:58:1e:e4:89:a8:b7:ea:71:1a:24:6a:1f:64:c7: bf:15:ba:73:0e:3c:96:d6:6f:ca:e2:41:80:ff:8a:d9:dd:32: 59:12:71:be:a8:1d:16:17:c3:4f:30:8e:23:7f:24:87:b6:72: 07:a2:dd:cd:17:30:c9:fd:a7:ee:74:a2:bf:de:31:2a:28:14: dc:c4:98:32:78:1a:cd:8e:65:aa:28:1b:6a:1a:ac:35:11:ca: 88:0d:b1:ab:d9:3a:30:54:cf:ed:a8:72:17:82:a5:d7:c0:66: 93:e7:e1:61:fb:f2:82:57:bb:75:ad:ce:2f:a3:45:37:a4:5e: 84:ac:5a:e7:d3:91:30:fe:e2:56:31:55:ae:99:68:92:c2:79: ec:54:cf:5f:37:1d:a4:3a:4f:34:3b:18:57:1e:d2:ca:e1:99: 04:e2:8e:2e:d9:ef:6c:f1:46:f0:54:6a:98:f4:79:55:0f:9d: 50:10:65:37:e0:70:e2:bf:12:2a:2e:da:97:0b:86:ad:d3:3a: 27:1f:7a:9a:00:a3:7f:11:96:30:28:8e:dd:22:73:8f:96:7d: 73:fc:7a:9f:d2:48:ea:d4:ae:54:3b:69:41:9f:9d:40:95:55: c9:d3:58:28 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfcZJ+I0eFy2+u80wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk YmIzY2UwYTctMjY5ZS00ZTI5LWI0MTYtMjJiYmNiNmMxOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ALNV2PrWLTHgr3ozeBbj0aY3JXm4DhL4tR ikLD1KFfvH2f48HBlKqg/4V3nDM6SLHfUHfNta6f6KzXj6d7Hwf1bth8DDeuTDVN BA7qeNgKGXVfhwPrDdnc+kKzUSIzHv5wJMcRqPLQpns/oWxSTWjLKf6tDAdeCNCu 1mH89G1ybYAgiETvOUGzVEPZeXehoXq/1DfKcflaOr43JTFKNstmRyXfvgvXmGgG geS/94lmZAJj23Is/O7zoqzK37a59Kzp5DcTEEbNHSKDAgiA+gwvikcw5dhVjuC0 ht/nJEOdZrtMTH9Bi9t3w9C9hyRkMMxZTfXz7mMifQVIctxcVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK+OQuUWFJF4qXjzqvpQdnvds8P5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDQxNTBlNmItZmIzYy0z YWZlLThkZTItMWEyZDdiNDRkYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz2YwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAox26DnJe1Cwbrd0p2+w0apcvkavAx1ge5Imot+pxGiRqH2THvxW6cw48 ltZvyuJBgP+K2d0yWRJxvqgdFhfDTzCOI38kh7ZyB6LdzRcwyf2n7nSiv94xKigU 3MSYMngazY5lqigbahqsNRHKiA2xq9k6MFTP7ahyF4Kl18Bmk+fhYfvygle7da3O L6NFN6RehKxa59ORMP7iVjFVrploksJ57FTPXzcdpDpPNDsYVx7SyuGZBOKOLtnv bPFG8FRqmPR5VQ+dUBBlN+Bw4r8SKi7alwuGrdM6Jx96mgCjfxGWMCiO3SJzj5Z9 c/x6n9JI6tSuVDtpQZ+dQJVVydNYKA== -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:47 2024 by rpki-client on console-fra.rpki-client.org