$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa File: 8af2fb46-8563-309f-9125-ce5d7bfd1527.roa (raw, json) Hash identifier: IAaFTLMOku7ZAOnpReCB4Ey6+o1RW2Xby2MLXlvNQAk= Subject key identifier: CD:C9:BC:27:32:AB:1F:9E:EB:2B:88:5F:08:86:E1:D3:22:93:5F:BC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DC64A394337278DD3E159280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 852 IP address blocks: 96.1.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:a3:94:33:72:78:dd:3e:15:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=5c38d901-2b54-42e8-aaff-1a4ac0a1d286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:02:ce:a6:fb:fd:64:c0:4c:37:7b:75:c2: 4b:9f:d3:fc:65:c6:50:45:3c:35:ad:80:f3:cb:00: ec:1e:ed:e6:74:76:28:85:5f:1f:12:65:f4:cd:94: 59:d8:05:ab:d7:a4:15:41:f2:79:d3:99:f8:2f:00: 4b:d2:cb:4c:df:ca:d8:b3:19:f2:27:46:62:3e:0e: 60:c7:7f:ba:0d:de:70:45:b1:61:72:dd:82:5d:e2: 12:64:bf:3b:23:e5:a6:ae:b6:1b:62:08:91:d2:c8: 12:25:0c:7a:19:87:88:1c:91:c1:80:55:e9:12:6d: 0f:cc:12:14:70:5d:c5:55:20:ac:af:55:a2:8f:13: de:9c:05:8f:a6:d5:e3:8a:ee:47:d4:9c:55:2f:4a: ed:f7:c6:a5:7e:a3:d0:24:5f:7e:0a:a1:29:61:5c: 45:5b:55:eb:c6:b7:06:e1:2e:cc:68:5b:8e:84:9d: 0c:97:60:88:1e:91:12:53:b9:2e:92:f3:7b:19:27: 54:d7:dc:5d:a0:69:bb:83:a8:b0:a3:02:70:4b:83: 07:07:35:9f:d0:14:ac:e2:22:f0:76:8f:53:a0:73: f7:c3:1f:ba:f6:eb:64:31:48:09:56:2c:06:3e:cc: 25:1b:bf:0e:39:40:3d:12:e1:58:9c:e7:1d:0e:94: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C9:BC:27:32:AB:1F:9E:EB:2B:88:5F:08:86:E1:D3:22:93:5F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 96.1.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:82:0a:3c:8a:0d:05:29:d1:9d:73:e8:6e:ec:ef:60:30:5f: 0a:f9:d2:7f:60:87:78:26:a6:ac:98:b8:0b:41:25:39:cf:ab: fd:91:ab:51:ea:02:15:bd:2f:2c:56:39:72:ed:02:d1:9d:a6: c2:e1:77:26:2e:45:df:d9:25:99:bc:c2:f5:02:1b:64:04:f5: d0:d1:7f:77:b7:10:51:aa:4e:f6:88:f5:af:1f:f4:f8:db:2d: 89:06:37:91:09:be:4c:0c:2b:3d:03:c4:af:50:ae:9e:d2:39: 98:5b:40:26:0d:b6:1b:75:7f:bf:39:3c:b3:3c:cd:93:b8:c7: 25:44:65:c0:32:1d:cd:5c:7c:e4:14:72:62:4d:df:1b:d2:a1: f9:e1:e1:f0:1b:b0:3a:cd:3e:f4:09:5e:55:c3:d5:64:ac:7a: fc:27:e3:05:9f:2a:1f:94:f8:be:b9:c1:8e:df:71:f8:28:eb: 49:f3:97:5c:20:57:1c:9d:7c:42:3b:d5:2c:8a:e4:ae:b0:06: e0:c1:1a:7e:97:d0:b8:1e:36:87:a0:01:6f:12:bf:ba:87:a8: 59:f7:39:3e:da:9a:21:d3:ca:59:d6:f2:f4:68:9a:b2:8c:b1: 0f:d8:d4:f9:2a:26:1a:de:7f:9e:ee:3c:ad:41:38:29:b9:15: 7c:fd:e6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZKOUM3J43T4VkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk NWMzOGQ5MDEtMmI1NC00MmU4LWFhZmYtMWE0YWMwYTFkMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBkCzqb7/WTATDd7dcJLn9P8ZcZQRTw1rYDz ywDsHu3mdHYohV8fEmX0zZRZ2AWr16QVQfJ505n4LwBL0stM38rYsxnyJ0ZiPg5g x3+6Dd5wRbFhct2CXeISZL87I+WmrrYbYgiR0sgSJQx6GYeIHJHBgFXpEm0PzBIU cF3FVSCsr1WijxPenAWPptXjiu5H1JxVL0rt98alfqPQJF9+CqEpYVxFW1XrxrcG 4S7MaFuOhJ0Ml2CIHpESU7kukvN7GSdU19xdoGm7g6iwowJwS4MHBzWf0BSs4iLw do9ToHP3wx+69utkMUgJViwGPswlG78OOUA9EuFYnOcdDpTsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3JvCcyqx+e6yuIXwiG4dMik1+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGFmMmZiNDYtODU2My0z MDlmLTkxMjUtY2U1ZDdiZmQxNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+CCjyKDQUp0Z1z6G7s72AwXwr50n9gh3gmpqyYuAtBJTnPq/2Rq1Hq AhW9LyxWOXLtAtGdpsLhdyYuRd/ZJZm8wvUCG2QE9dDRf3e3EFGqTvaI9a8f9Pjb LYkGN5EJvkwMKz0DxK9Qrp7SOZhbQCYNtht1f785PLM8zZO4xyVEZcAyHc1cfOQU cmJN3xvSofnh4fAbsDrNPvQJXlXD1WSsevwn4wWfKh+U+L65wY7fcfgo60nzl1wg VxydfEI71SyK5K6wBuDBGn6X0LgeNoegAW8Sv7qHqFn3OT7amiHTylnW8vRomrKM sQ/Y1PkqJhref57uPK1BOCm5FXz95jA= -----END CERTIFICATE-----Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org