$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa File: 1d611970-d8e1-342b-b267-17fa1197a3ad.roa (raw, json) Hash identifier: kO5EX49Xdr9A03lf3Z1Eziu/IKTTgWoa8vZtE/EhHws= Subject key identifier: B7:69:7A:A5:0D:13:61:8D:BD:DF:F5:21:DB:40:AF:69:9C:D0:4D:7F Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285847E62B4992E970687E6E37D7E0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36492 IP address blocks: 172.102.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:49:92:e9:70:68:7e:6e:37:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=1e33e1ee-230a-43e8-b8b0-7cd66716463c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:1c:81:e6:8f:84:1a:5b:79:2a:7b:8b:dc: 49:d4:96:fe:3f:af:f2:30:aa:36:47:72:84:51:4f: f1:bc:cb:6f:f4:a0:4b:c7:64:59:be:96:76:36:d8: af:3c:10:9f:e2:75:d7:80:a2:4c:81:fb:41:d4:ab: 7c:85:fd:f1:7c:cc:64:24:a1:91:29:f1:36:40:26: d0:a9:6c:e4:d5:af:82:66:93:34:26:71:92:cd:2d: b9:c2:b6:de:93:fb:5c:59:bf:c6:4d:08:e7:89:6b: 5d:cc:dc:37:e5:22:b9:32:21:4e:fb:33:95:50:0e: 56:f2:f6:d4:5f:eb:e5:0a:47:48:d0:50:47:46:3c: 70:a6:71:1a:de:48:88:bc:c0:d1:16:6f:7a:47:91: 37:d0:a7:c1:79:29:05:e4:f6:6a:56:5f:ea:73:c7: d8:2c:e9:c8:7e:da:59:92:43:aa:ae:c1:15:75:b4: ab:49:86:3a:47:45:d9:ba:d0:37:b5:9b:3a:83:ca: 5b:03:d3:82:ab:25:56:34:06:d3:4c:f2:0f:9c:7e: f8:39:b6:24:84:0b:5c:b5:c3:77:5c:12:e5:b2:e5: 59:ef:61:3c:2a:e4:c5:d3:d5:56:33:5f:7e:f7:df: 57:10:10:ef:3c:a1:f0:0e:7b:0d:fb:7a:51:58:06: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:7A:A5:0D:13:61:8D:BD:DF:F5:21:DB:40:AF:69:9C:D0:4D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:20:22:6f:cb:c3:11:ad:47:27:a0:99:55:9b:e5:2b:ba:b1: d6:91:ba:c3:e3:cf:28:7e:07:78:10:8c:78:b2:10:c1:5c:6e: ff:ac:11:b5:a7:9b:f2:39:9e:fd:ed:f2:f8:30:da:c3:9b:82: 6c:ab:fa:1a:b4:e5:0d:01:13:4f:65:d7:18:43:93:c3:78:c1: 27:31:bf:19:0a:d5:ad:4e:50:ba:3e:08:36:05:5d:25:4f:d5: 07:84:48:a7:9b:bf:03:27:43:32:bf:c8:9f:f0:c3:6b:e9:cb: 9a:bd:28:99:ef:fd:59:49:bb:ca:c8:43:dd:5b:ae:ed:b5:d4: 53:a9:21:c1:da:70:67:ad:ef:65:67:47:73:1b:3b:8d:d5:8b: 12:3b:25:8b:ad:9c:6f:dd:57:59:5b:03:ed:5d:ad:bd:16:ab: 93:3b:27:a2:b3:93:1a:89:e3:b9:cd:32:3c:b9:a0:2d:e4:5c: 7a:c1:f3:61:76:8b:7e:f7:b7:68:c1:84:9a:02:90:bf:16:ea: 5f:a8:ba:d2:f7:9c:5b:3d:05:94:9d:b0:7b:ff:c2:25:ac:6e: eb:47:1e:88:44:6c:ab:cb:8b:d2:e6:bc:70:24:27:97:fd:a8: ab:9e:fc:72:cf:c5:cb:43:67:d8:42:7a:a3:1c:83:9e:9d:b4: 49:c1:46:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0mS6XBofm431+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MWUzM2UxZWUtMjMwYS00M2U4LWI4YjAtN2NkNjY3MTY0NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvQcgeaPhBpbeSp7i9xJ1Jb+P6/yMKo2R3KE UU/xvMtv9KBLx2RZvpZ2NtivPBCf4nXXgKJMgftB1Kt8hf3xfMxkJKGRKfE2QCbQ qWzk1a+CZpM0JnGSzS25wrbek/tcWb/GTQjniWtdzNw35SK5MiFO+zOVUA5W8vbU X+vlCkdI0FBHRjxwpnEa3kiIvMDRFm96R5E30KfBeSkF5PZqVl/qc8fYLOnIftpZ kkOqrsEVdbSrSYY6R0XZutA3tZs6g8pbA9OCqyVWNAbTTPIPnH74ObYkhAtctcN3 XBLlsuVZ72E8KuTF09VWM19+999XEBDvPKHwDnsN+3pRWAa4XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdpeqUNE2GNvd/1IdtAr2mc0E1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMWQ2MTE5NzAtZDhlMS0z NDJiLWIyNjctMTdmYTExOTdhM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACggIm/LwxGtRyegmVWb5Su6sdaRusPjzyh+B3gQjHiyEMFcbv+sEbWn m/I5nv3t8vgw2sObgmyr+hq05Q0BE09l1xhDk8N4wScxvxkK1a1OULo+CDYFXSVP 1QeESKebvwMnQzK/yJ/ww2vpy5q9KJnv/VlJu8rIQ91bru211FOpIcHacGet72Vn R3MbO43VixI7JYutnG/dV1lbA+1drb0Wq5M7J6KzkxqJ47nNMjy5oC3kXHrB82F2 i373t2jBhJoCkL8W6l+outL3nFs9BZSdsHv/wiWsbutHHohEbKvLi9LmvHAkJ5f9 qKue/HLPxctDZ9hCeqMcg56dtEnBRgA= -----END CERTIFICATE-----Generated at Sun Nov 24 18:29:22 2024 by rpki-client on console-ams.rpki-client.org