$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa File: 956cee3a-4407-3b22-a099-0422e4180296.roa (raw, json) Hash identifier: zUO89N0zIhTQoWIclg+7Tk8GNVoES6evlSO0O880r4A= Subject key identifier: 6C:86:AE:97:53:D9:55:04:54:D6:FC:0E:72:D8:B8:C0:4C:03:7A:97 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847CA3F7FDEE424BCE6D98A7400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 25668 IP address blocks: 207.194.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7f:de:e4:24:bc:e6:d9:8a:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=2cb81f19-6b1a-4b9f-b63c-ad534a42b270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:29:0f:67:3c:16:af:54:3d:e5:82:aa:a8: 6f:8d:1c:48:83:6a:a3:9f:5b:29:a5:ed:ea:76:45: 53:d6:65:90:5a:18:16:a7:fa:25:eb:56:22:18:d1: 54:51:a7:65:1a:23:01:9f:f9:ad:68:64:63:35:8e: 3e:42:ad:51:47:da:9f:4f:40:ac:23:aa:00:c3:23: 0b:cc:c8:64:fa:54:f2:15:b1:c1:c9:c6:a9:81:ef: 93:b5:1a:00:7d:19:66:dd:fe:6c:02:96:9d:d7:f6: af:51:25:f4:59:d8:a7:08:f9:f9:40:d3:b3:fd:af: 8d:fe:ec:f8:36:44:95:d4:4d:97:fd:da:b3:01:9d: 58:4a:17:69:a6:96:c4:df:b0:a0:d6:88:dd:9f:b0: f5:fc:c2:70:08:0d:29:25:2c:ec:36:90:bd:1a:e2: e7:49:8a:e4:d9:86:4a:8b:ef:c6:66:1a:a6:de:ad: 1c:2d:68:39:b1:60:79:6f:8a:54:c2:5a:4d:8c:8a: 11:21:50:e9:7b:74:7a:c0:67:94:46:df:15:68:1a: ec:af:36:8b:fb:69:83:e4:fd:d2:73:3b:70:c0:4a: e6:14:25:c8:7a:24:8d:ef:26:e6:79:eb:ff:2d:fe: 97:ef:34:2e:78:64:12:22:b9:50:50:82:b1:59:1d: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:86:AE:97:53:D9:55:04:54:D6:FC:0E:72:D8:B8:C0:4C:03:7A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f9:0e:62:51:68:8b:bd:9f:f8:6f:6c:3a:ed:bf:be:64:d0:39: e7:fb:2f:05:d5:f1:35:39:67:46:a4:6f:96:26:c2:1e:9f:87: fe:df:66:c4:10:7b:b9:be:60:2c:be:d3:d2:eb:5b:6d:6d:8b: 41:29:6b:61:da:aa:25:ad:f5:6f:9d:00:66:82:a6:10:65:92: 32:0e:73:79:b7:cf:c1:a4:5e:ad:ea:de:e3:4f:88:73:34:49: 82:26:05:75:60:7a:3f:70:66:c3:b0:3f:46:0a:54:5b:f5:4c: 45:4a:a7:a3:d5:8b:b4:ad:6d:c9:ba:2d:cd:f0:d3:70:51:c6: 9a:65:57:27:6c:42:d7:bc:91:ca:ff:4d:a1:de:62:54:e9:5f: d2:0c:42:3a:c8:c5:bd:fb:58:06:50:bd:5a:14:51:b2:6b:dc: 67:55:4f:69:7e:84:7a:91:10:22:29:8d:f3:53:2a:f5:36:cd: 46:64:cd:e9:73:23:f1:c9:9c:b2:de:38:a8:d4:fd:66:13:ca: cb:2d:00:aa:5f:c4:ac:d4:b9:42:90:3c:5a:7b:7b:5a:41:63: f6:eb:10:33:68:b8:d5:fa:55:b0:2c:33:9d:5f:e0:fa:81:85: 86:22:63:85:2d:4a:2c:70:95:1e:3f:83:e7:43:14:f4:a2:a1: b1:57:c9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3/e5CS85tmKdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MmNiODFmMTktNmIxYS00YjlmLWI2M2MtYWQ1MzRhNDJiMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPcpD2c8Fq9UPeWCqqhvjRxIg2qjn1sppe3q dkVT1mWQWhgWp/ol61YiGNFUUadlGiMBn/mtaGRjNY4+Qq1RR9qfT0CsI6oAwyML zMhk+lTyFbHBycapge+TtRoAfRlm3f5sApad1/avUSX0WdinCPn5QNOz/a+N/uz4 NkSV1E2X/dqzAZ1YShdpppbE37Cg1ojdn7D1/MJwCA0pJSzsNpC9GuLnSYrk2YZK i+/GZhqm3q0cLWg5sWB5b4pUwlpNjIoRIVDpe3R6wGeURt8VaBrsrzaL+2mD5P3S cztwwErmFCXIeiSN7ybmeev/Lf6X7zQueGQSIrlQUIKxWR1RfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyGrpdT2VUEVNb8DnLYuMBMA3qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTU2Y2VlM2EtNDQwNy0z YjIyLWEwOTktMDQyMmU0MTgwMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPkOYlFoi72f+G9sOu2/vmTQOef7LwXV8TU5Z0akb5Ymwh6fh/7fZsQQ e7m+YCy+09LrW21ti0Epa2HaqiWt9W+dAGaCphBlkjIOc3m3z8GkXq3q3uNPiHM0 SYImBXVgej9wZsOwP0YKVFv1TEVKp6PVi7Stbcm6Lc3w03BRxpplVydsQte8kcr/ TaHeYlTpX9IMQjrIxb37WAZQvVoUUbJr3GdVT2l+hHqRECIpjfNTKvU2zUZkzelz I/HJnLLeOKjU/WYTysstAKpfxKzUuUKQPFp7e1pBY/brEDNouNX6VbAsM51f4PqB hYYiY4UtSixwlR4/g+dDFPSiobFXyVw= -----END CERTIFICATE-----Generated at Fri Nov 22 21:07:24 2024 by rpki-client on console-fra.rpki-client.org