$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa File: 96785cf8-7262-32e6-b7e6-3db134e27f1c.roa (raw, json) Hash identifier: rhjmgxVGRdiHLX3We3lievF0SnE4+T8YfJQqRvR/zok= Subject key identifier: E2:05:02:8B:44:E4:42:F1:A8:F7:08:AA:2B:DE:E5:2F:C1:04:27:81 Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F43285847EE8A2712EEF87DE60E3FE840 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7862 IP address blocks: 146.23.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:27:12:ee:f8:7d:e6:0e:3f:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=38b1052f-e1a8-4469-96b3-a48f97e38c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:d2:0f:8f:14:bd:ac:c1:39:22:57:9f:41: 7b:c4:61:bc:00:c9:d5:03:0d:88:bb:3c:b9:d5:f5: 60:b6:a3:af:08:cc:a1:35:e4:fb:29:a8:20:7d:0d: 64:3e:6f:15:ac:22:93:53:ae:b2:17:cc:56:e6:79: e6:6a:bb:eb:63:8c:da:34:bf:1c:9e:9e:95:e3:34: 52:43:f3:5c:49:3d:f4:87:3c:52:42:c0:f1:6d:74: e9:c6:7d:97:21:29:fd:1d:6e:2c:a5:fd:58:8b:f2: 44:b1:a8:80:96:8e:74:04:77:01:d5:d4:92:70:af: 4d:5f:3c:2b:9d:52:80:d3:0c:c1:00:93:1a:81:33: ed:83:86:2d:33:0d:8e:44:a2:65:e5:03:24:f6:ca: ef:84:28:10:03:71:01:5f:94:1a:fb:53:00:ef:3b: 54:95:2d:b2:9a:b6:82:40:b1:eb:01:1e:e3:13:2f: e4:41:04:a8:8f:43:da:63:72:c1:aa:23:5c:6f:47: 9f:bc:6e:23:74:85:c1:c0:41:1f:4c:3b:c2:6f:14: c9:00:ea:fc:9b:2d:a9:69:86:08:c0:18:ed:77:57: 77:66:a0:0a:d3:e1:8c:81:35:95:74:36:0c:34:90: 5d:6a:a3:b6:fb:44:6a:de:41:2c:33:31:bf:fd:71: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:02:8B:44:E4:42:F1:A8:F7:08:AA:2B:DE:E5:2F:C1:04:27:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:94:30:98:b5:c6:15:32:f6:40:9d:51:33:d2:33:1d:64:33: b5:6f:37:ca:64:4e:fe:f7:75:f1:45:83:e2:56:4a:af:cc:e0: e1:59:b2:cd:de:00:9d:59:e5:0d:a5:6e:94:99:92:0d:f2:43: 90:9e:5a:6e:ee:82:44:3d:7a:47:a3:e4:4b:18:e8:39:43:4a: b1:a3:48:99:65:c0:e9:a3:81:0d:7e:8a:16:eb:2e:93:99:d5: 88:03:28:6e:d2:03:71:13:fc:91:41:c7:a7:76:b9:0b:1a:f7: fe:ae:ee:ff:78:85:2e:dc:c5:2b:2b:e4:6c:c7:c9:1a:ba:ac: 33:f9:20:cc:3c:41:f2:b9:70:2c:21:ca:48:50:ee:f2:57:73: 8e:9b:61:10:29:bd:0f:f1:4b:92:6d:50:88:78:4e:f9:82:ca: 02:c4:06:02:1f:77:27:a6:8d:9f:48:33:89:85:56:c2:cb:26: 7e:d5:dc:5a:93:76:3c:11:08:b7:ec:50:c9:c3:8c:19:65:6a: 15:a3:e2:1d:97:18:cd:eb:2a:bb:e7:0e:d3:45:b8:ae:fa:e5: a9:5b:99:b4:0a:f5:e0:c1:9e:bb:bb:db:61:94:49:69:3f:a3: 51:4b:87:21:45:2c:6c:f8:d5:d9:fb:e1:5c:2f:4a:b2:eb:b7: 35:85:54:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuiicS7vh95g4/6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk MzhiMTA1MmYtZTFhOC00NDY5LTk2YjMtYTQ4Zjk3ZTM4YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryfSD48UvazBOSJXn0F7xGG8AMnVAw2Iuzy5 1fVgtqOvCMyhNeT7KaggfQ1kPm8VrCKTU66yF8xW5nnmarvrY4zaNL8cnp6V4zRS Q/NcST30hzxSQsDxbXTpxn2XISn9HW4spf1Yi/JEsaiAlo50BHcB1dSScK9NXzwr nVKA0wzBAJMagTPtg4YtMw2ORKJl5QMk9srvhCgQA3EBX5Qa+1MA7ztUlS2ymraC QLHrAR7jEy/kQQSoj0PaY3LBqiNcb0efvG4jdIXBwEEfTDvCbxTJAOr8my2paYYI wBjtd1d3ZqAK0+GMgTWVdDYMNJBdaqO2+0Rq3kEsMzG//XGI3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIFAotE5ELxqPcIqive5S/BBCeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvOTY3ODVjZjgtNzI2Mi0z MmU2LWI3ZTYtM2RiMTM0ZTI3ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOUMJi1xhUy9kCdUTPSMx1kM7VvN8pkTv73dfFFg+JWSq/M4OFZss3e AJ1Z5Q2lbpSZkg3yQ5CeWm7ugkQ9ekej5EsY6DlDSrGjSJllwOmjgQ1+ihbrLpOZ 1YgDKG7SA3ET/JFBx6d2uQsa9/6u7v94hS7cxSsr5GzHyRq6rDP5IMw8QfK5cCwh ykhQ7vJXc46bYRApvQ/xS5JtUIh4TvmCygLEBgIfdyemjZ9IM4mFVsLLJn7V3FqT djwRCLfsUMnDjBllahWj4h2XGM3rKrvnDtNFuK765albmbQK9eDBnru722GUSWk/ o1FLhyFFLGz41dn74VwvSrLrtzWFVE4= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:04 2024 by rpki-client on console-fra.rpki-client.org