$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4e30095d-87e5-3faf-97bb-c51e3f9714b3.roa File: 4e30095d-87e5-3faf-97bb-c51e3f9714b3.roa (raw, json) Hash identifier: ez4xANYuTNx0R2EPxLlgDk0d7y4ediDlYXk+ppyJNL4= Subject key identifier: B1:83:33:F7:54:91:2A:E8:25:9B:33:A8:49:79:8C:A1:66:4B:02:41 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F43285847DA9A3BF778B45EE8710973F0 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4e30095d-87e5-3faf-97bb-c51e3f9714b3.roa Signing time: Tue 12 Nov 2024 10:36:56 +0000 ROA not before: Tue 12 Nov 2024 10:36:56 +0000 ROA not after: Mon 10 Feb 2025 10:36:56 +0000 asID: 21859 IP address blocks: 146.71.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:9a:3b:f7:78:b4:5e:e8:71:09:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Nov 12 10:36:56 2024 GMT Not After : Feb 10 10:36:56 2025 GMT Subject: CN=2d88e1d3-165c-469d-b7f9-6519bb145620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:ba:a9:7c:1c:d4:f7:ae:76:8e:28:cd:5b: 54:d5:47:71:89:0c:40:45:d8:7e:00:39:12:74:31: f1:bd:67:02:a1:cd:1a:02:02:e4:bc:ec:82:99:42: de:81:9b:df:dc:2d:63:b5:47:b8:31:fa:80:ea:7d: 26:f7:63:15:a1:18:81:68:d4:75:d9:13:18:64:8e: f7:7f:83:cb:1d:26:f1:9c:49:5b:5a:b2:ab:b1:01: 11:fe:33:a5:a4:4b:81:11:15:10:fc:30:8e:13:c1: 48:a3:3a:95:59:7b:6b:15:6a:3b:0d:ac:40:68:5d: b3:8c:b3:9f:69:7d:b4:63:ab:94:5e:9f:f7:ad:8a: d9:79:87:05:bd:15:95:92:07:69:68:6a:54:84:37: a4:a4:40:7c:a6:43:d8:2a:cf:f9:35:a9:9c:07:df: e2:3e:54:6d:da:03:8b:04:66:c7:09:1a:56:58:16: c0:31:0c:94:0d:8b:04:95:d0:dd:bc:c8:20:4f:38: 86:64:73:bf:5b:58:71:da:19:f9:1f:48:6d:59:7c: e2:3b:53:24:bd:43:73:31:eb:ff:bc:e5:df:1a:b5: 90:f0:9e:0e:64:45:28:72:ae:5a:a5:ee:bc:3e:69: 20:19:45:f4:4d:86:bc:c2:6e:30:cd:5d:ca:27:c0: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:33:F7:54:91:2A:E8:25:9B:33:A8:49:79:8C:A1:66:4B:02:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4e30095d-87e5-3faf-97bb-c51e3f9714b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 146.71.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b2:80:be:81:4e:64:46:fd:10:81:0c:1b:bc:b6:c4:c2:a5: c7:1c:36:bd:a8:85:c0:3e:a7:30:81:06:22:7e:b1:e0:ed:f1: 3e:64:1a:70:11:55:69:8c:90:a9:3a:01:2e:39:0f:9e:7c:fb: da:7d:99:cd:69:b5:fb:01:94:d5:cf:98:e5:70:24:3f:7b:83: 82:67:b6:e1:35:6d:16:ff:4a:f4:46:22:f8:e1:5d:8d:73:d7: 74:a4:2c:f0:b6:bc:fb:e2:c4:82:95:cf:2f:81:70:d9:24:7d: d2:47:09:5e:16:8d:07:a1:36:a7:de:24:81:bb:82:36:23:4b: 2b:5f:12:cf:ed:0c:12:c0:21:46:18:13:23:b3:e8:21:31:b0: 26:b0:c5:51:e4:2c:e3:55:b7:af:4b:54:bf:c5:b0:e8:5d:44: 4d:6f:ea:47:f5:9b:6e:ff:0d:59:ab:75:4e:5f:ea:45:5f:6b: e6:72:f2:41:28:a2:7f:c6:35:af:ef:c8:a0:74:2e:6d:ef:d4: 2b:62:d7:d6:9b:d3:6f:d7:17:a4:04:3c:b2:f8:05:76:af:9e: e2:b4:3a:08:9f:af:a4:54:7f:29:3e:2e:12:64:65:0a:e6:6b: 3f:9e:3a:23:94:77:d7:de:bc:4a:8a:e9:99:26:ff:7b:18:1b: 33:f9:6f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfamjv3eLRe6HEJc/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI0MTExMjEwMzY1NloXDTI1MDIxMDEwMzY1NlowLzEtMCsGA1UEAxMk MmQ4OGUxZDMtMTY1Yy00NjlkLWI3ZjktNjUxOWJiMTQ1NjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN26qXwc1Peudo4ozVtU1UdxiQxARdh+ADkS dDHxvWcCoc0aAgLkvOyCmULegZvf3C1jtUe4MfqA6n0m92MVoRiBaNR12RMYZI73 f4PLHSbxnElbWrKrsQER/jOlpEuBERUQ/DCOE8FIozqVWXtrFWo7DaxAaF2zjLOf aX20Y6uUXp/3rYrZeYcFvRWVkgdpaGpUhDekpEB8pkPYKs/5NamcB9/iPlRt2gOL BGbHCRpWWBbAMQyUDYsEldDdvMggTziGZHO/W1hx2hn5H0htWXziO1MkvUNzMev/ vOXfGrWQ8J4OZEUocq5ape68PmkgGUX0TYa8wm4wzV3KJ8AJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGDM/dUkSroJZszqEl5jKFmSwJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNGUzMDA5NWQtODdlNS0z ZmFmLTk3YmItYzUxZTNmOTcxNGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkdVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWygL6BTmRG/RCBDBu8tsTCpcccNr2ohcA+pzCBBiJ+seDt8T5kGnAR VWmMkKk6AS45D558+9p9mc1ptfsBlNXPmOVwJD97g4JntuE1bRb/SvRGIvjhXY1z 13SkLPC2vPvixIKVzy+BcNkkfdJHCV4WjQehNqfeJIG7gjYjSytfEs/tDBLAIUYY EyOz6CExsCawxVHkLONVt69LVL/FsOhdRE1v6kf1m27/DVmrdU5f6kVfa+Zy8kEo on/GNa/vyKB0Lm3v1Cti19ab02/XF6QEPLL4BXavnuK0Ogifr6RUfyk+LhJkZQrm az+eOiOUd9fevEqK6Zkm/3sYGzP5b3Y= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:36 2024 by rpki-client on console-fra.rpki-client.org