$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/5caff080-9e00-34fe-b84b-47f47ef7e321.roa File: 5caff080-9e00-34fe-b84b-47f47ef7e321.roa (raw, json) Hash identifier: jJEEguvA3fLwz/D+JGNAKJd7CXfB3y3nHxmthzsalZs= Subject key identifier: 15:2C:17:43:12:95:2D:42:C2:13:9B:38:B1:1D:DE:11:F9:E9:6E:05 Certificate issuer: /CN=d721f6df-da07-469d-be94-82504f071adc Certificate serial: 010D0C9F43285847F84F78E0938D4D86EDF80240 Authority key identifier: 8E:B4:7F:97:79:EA:46:A8:29:E5:88:23:27:23:E0:D2:6A:7A:CC:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/5caff080-9e00-34fe-b84b-47f47ef7e321.roa Signing time: Sat 23 Nov 2024 02:00:28 +0000 ROA not before: Sat 23 Nov 2024 02:00:28 +0000 ROA not after: Fri 21 Feb 2025 02:00:28 +0000 asID: 8075 IP address blocks: 207.174.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f8:4f:78:e0:93:8d:4d:86:ed:f8:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d721f6df-da07-469d-be94-82504f071adc Validity Not Before: Nov 23 02:00:28 2024 GMT Not After : Feb 21 02:00:28 2025 GMT Subject: CN=754c2cd2-ffb4-4315-bcb8-da57da138c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5a:0d:53:cb:92:1d:62:cd:b1:90:fd:d5:d3: e6:b4:d8:cf:25:21:e2:3a:47:e8:80:99:72:88:96: 65:91:21:65:02:39:01:53:45:d4:41:67:d3:41:5c: 0b:33:fc:3d:86:af:32:87:50:7c:84:4f:df:36:7b: d0:55:a4:66:31:89:12:55:2c:6d:d1:5b:b1:24:92: f9:d8:35:ba:51:2c:7e:f8:6a:0d:aa:47:24:b5:3c: 5c:b8:a2:ac:b4:0f:32:de:4e:d3:55:3e:50:f2:57: fb:a8:40:ed:8c:ff:30:bf:65:0c:09:38:dd:01:d5: 09:6f:c9:b4:02:46:8a:93:25:5a:dd:61:e3:b5:81: fc:e6:e3:fd:63:17:37:f4:be:60:b8:0d:a4:cd:ef: 3e:eb:eb:1c:2a:fc:6c:fb:c2:d5:43:59:97:00:c2: cb:ae:6d:c9:b4:90:4a:a6:5c:d8:6d:47:8d:f1:bf: 87:ce:66:a2:8e:78:40:b7:df:fe:b2:5e:c5:cd:3a: d3:38:20:8a:48:c0:7a:2c:77:cb:28:69:bd:cf:8e: d2:7d:7d:a5:ae:27:9c:02:77:72:4e:19:48:6b:01: 98:dd:36:9b:09:3c:38:14:9e:7c:ec:e4:45:a2:e5: fa:3c:80:8f:8f:ce:d2:51:ca:68:ad:f5:ca:92:d2: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:17:43:12:95:2D:42:C2:13:9B:38:B1:1D:DE:11:F9:E9:6E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/5caff080-9e00-34fe-b84b-47f47ef7e321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.crl X509v3 Authority Key Identifier: keyid:8E:B4:7F:97:79:EA:46:A8:29:E5:88:23:27:23:E0:D2:6A:7A:CC:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc.cer sbgp-ipAddrBlock: critical IPv4: 207.174.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:77:33:70:18:3c:42:0a:9c:69:1f:94:30:64:a2:ec:58:20: 5b:d9:5b:be:1d:32:2e:42:da:1d:aa:f1:51:dd:cf:a0:72:24: 72:31:74:34:3a:45:d5:b8:d1:89:99:4a:98:67:ed:a2:58:ee: d4:24:d2:01:5f:15:77:bb:6c:11:a2:a9:13:08:79:e4:9b:97: 96:2d:39:3a:02:80:b2:b3:69:be:c7:ef:18:a5:33:24:83:91: 25:24:77:1d:55:ee:57:7a:c3:4c:4a:50:65:7f:3c:09:b9:25: 72:ed:9a:61:5d:08:99:e3:0f:28:a7:99:c0:71:c1:dd:88:27: 96:22:2f:d3:cf:1a:cb:b4:cd:6e:b8:16:d6:96:b1:74:fd:92: a9:44:be:84:3d:dd:d2:66:5c:cb:ab:ad:1f:eb:d3:ce:54:7e: fc:72:35:ca:c0:22:70:c4:d6:8e:b9:d2:dd:5a:38:a7:de:3d: 80:55:86:af:82:4e:72:ac:f8:38:47:3e:50:61:03:68:11:82: 5d:0b:35:c0:cf:30:0e:26:32:c1:22:10:17:27:cc:34:fb:c9: 06:d6:9d:6f:e0:59:c0:68:4c:64:26:0c:92:33:41:13:f8:52: 4f:e7:24:64:5f:1f:4c:be:73:58:a3:08:3e:cd:3a:a4:6f:da: 24:0e:3b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T3jgk41Nhu34AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyMWY2ZGYtZGEwNy00NjlkLWJlOTQtODI1MDRmMDcx YWRjMB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk NzU0YzJjZDItZmZiNC00MzE1LWJjYjgtZGE1N2RhMTM4YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFoNU8uSHWLNsZD91dPmtNjPJSHiOkfogJly iJZlkSFlAjkBU0XUQWfTQVwLM/w9hq8yh1B8hE/fNnvQVaRmMYkSVSxt0VuxJJL5 2DW6USx++GoNqkcktTxcuKKstA8y3k7TVT5Q8lf7qEDtjP8wv2UMCTjdAdUJb8m0 AkaKkyVa3WHjtYH85uP9Yxc39L5guA2kze8+6+scKvxs+8LVQ1mXAMLLrm3JtJBK plzYbUeN8b+HzmaijnhAt9/+sl7FzTrTOCCKSMB6LHfLKGm9z47SfX2lriecAndy ThlIawGY3TabCTw4FJ587ORFouX6PICPj87SUcporfXKktJwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUsF0MSlS1CwhObOLEd3hH56W4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNzIx ZjZkZi1kYTA3LTQ2OWQtYmU5NC04MjUwNGYwNzFhZGMvNWNhZmYwODAtOWUwMC0z NGZlLWI4NGItNDdmNDdlZjdlMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDcyMWY2ZGYtZGEwNy00NjlkLWJl OTQtODI1MDRmMDcxYWRjL2Q3MjFmNmRmLWRhMDctNDY5ZC1iZTk0LTgyNTA0ZjA3 MWFkYy5jcmwwHwYDVR0jBBgwFoAUjrR/l3nqRqgp5YgjJyPg0mp6zFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNzIxZjZkZi1kYTA3LTQ2OWQtYmU5NC04MjUw NGYwNzFhZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl3M3AYPEIKnGkflDBkouxYIFvZW74dMi5C2h2q8VHdz6ByJHIxdDQ6 RdW40YmZSphn7aJY7tQk0gFfFXe7bBGiqRMIeeSbl5YtOToCgLKzab7H7xilMySD kSUkdx1V7ld6w0xKUGV/PAm5JXLtmmFdCJnjDyinmcBxwd2IJ5YiL9PPGsu0zW64 FtaWsXT9kqlEvoQ93dJmXMurrR/r085UfvxyNcrAInDE1o650t1aOKfePYBVhq+C TnKs+DhHPlBhA2gRgl0LNcDPMA4mMsEiEBcnzDT7yQbWnW/gWcBoTGQmDJIzQRP4 Uk/nJGRfH0y+c1ijCD7NOqRv2iQOO+I= -----END CERTIFICATE-----Generated at Mon Nov 25 03:33:50 2024 by rpki-client on console-fra.rpki-client.org