$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa File: 499a84c2-191a-39f2-b4fd-5937af6f121f.roa (raw, json) Hash identifier: 7r1HZjp8BG4qxmq3ktSksLda3k3zzExuLtyygZNL/ls= Subject key identifier: 30:45:C4:77:4D:AE:84:26:EB:C5:CB:81:4E:1A:60:75:0B:3B:AB:A0 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F432858474850AAEA99BF9C1E35107D00 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 23959 IP address blocks: 172.93.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:aa:ea:99:bf:9c:1e:35:10:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=0667db4e-caae-4687-9045-0fd222a7627b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:d1:a5:8f:3d:39:29:86:da:cc:e1:1a:1a: 77:28:37:b2:56:be:12:af:f1:fd:13:72:a1:ba:e5: 5a:fe:92:d8:27:aa:19:98:8f:cb:52:66:08:d5:cd: 01:f5:91:4a:84:3e:90:b2:f8:f1:4f:a8:8b:97:0b: 5f:5b:fa:14:5a:67:5f:e0:62:a0:9b:1b:c1:da:56: 51:24:f0:97:08:10:5b:fd:2a:d8:61:71:de:5b:22: 91:17:8a:0a:63:5b:2e:c0:31:5d:2f:9e:bb:71:91: 23:ac:36:28:5b:09:1a:3f:0b:fe:06:ae:4b:ec:3f: f1:c5:19:91:ee:44:a5:6d:23:57:e7:d0:1a:02:22: ee:0a:f1:c5:60:50:4f:84:77:9d:16:bc:f6:ed:f7: 7c:42:47:98:72:af:a7:6e:ed:2f:1d:13:e4:fa:b9: 93:33:37:d6:1a:95:2c:65:6b:cb:dd:fd:24:90:db: 4d:28:08:95:2f:f1:a2:77:ab:2b:a9:84:b4:07:90: 18:3f:5d:9e:52:43:97:1f:88:aa:f9:ae:09:53:48: 4d:3d:d4:f9:04:01:6b:44:f2:12:36:65:26:fd:95: 58:1c:36:ca:4a:8f:f6:52:6b:50:a8:a6:84:64:71: da:21:86:05:30:85:8a:83:82:e5:99:bb:a7:17:be: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:45:C4:77:4D:AE:84:26:EB:C5:CB:81:4E:1A:60:75:0B:3B:AB:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/499a84c2-191a-39f2-b4fd-5937af6f121f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:72:6d:83:f2:22:92:1e:c1:54:e7:d8:91:27:62:a5:97:36: 16:ba:c6:9c:61:81:69:5b:2e:1e:b3:86:d1:90:3c:22:10:18: 48:18:31:73:83:25:2f:72:29:3d:2c:f3:27:36:e2:e2:da:10: 5d:65:ab:f1:3d:c5:24:7b:70:58:0e:dd:e9:82:52:31:6e:13: c8:f7:b7:5c:25:75:c8:57:6f:4c:39:69:66:7e:df:9d:44:6e: b1:d4:4d:d7:22:47:32:88:a4:9f:79:78:fc:4f:dc:5b:6c:2e: bc:07:ec:30:5d:ec:b0:e5:1a:c8:0d:a0:6a:a3:a2:ac:57:92: 16:96:54:81:e6:a0:83:20:d8:1a:fe:9e:18:2f:8f:31:1a:d7: 99:6c:d1:84:12:8c:e2:61:1c:6b:fe:7e:59:a8:6b:f6:97:e4: 3a:10:ef:86:50:4c:d5:79:1d:24:f0:7f:5a:5b:20:93:33:50: 9c:fc:d7:4e:bf:83:9a:90:8d:cf:83:b1:b1:eb:8f:b3:18:c9: af:c0:f8:14:5f:f5:90:3f:4f:ec:68:43:8d:11:c3:ab:e0:32: 8e:ac:84:f3:c2:73:45:9b:02:3d:e5:76:7b:aa:d1:9d:0a:98: c5:42:da:b3:e0:e1:6f:ff:d2:2f:37:c8:dc:b4:03:c3:fa:31: 29:6e:60:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUKrqmb+cHjUQfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk MDY2N2RiNGUtY2FhZS00Njg3LTkwNDUtMGZkMjIyYTc2MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAturRpY89OSmG2szhGhp3KDeyVr4Sr/H9E3Kh uuVa/pLYJ6oZmI/LUmYI1c0B9ZFKhD6QsvjxT6iLlwtfW/oUWmdf4GKgmxvB2lZR JPCXCBBb/SrYYXHeWyKRF4oKY1suwDFdL567cZEjrDYoWwkaPwv+Bq5L7D/xxRmR 7kSlbSNX59AaAiLuCvHFYFBPhHedFrz27fd8QkeYcq+nbu0vHRPk+rmTMzfWGpUs ZWvL3f0kkNtNKAiVL/Gid6srqYS0B5AYP12eUkOXH4iq+a4JU0hNPdT5BAFrRPIS NmUm/ZVYHDbKSo/2UmtQqKaEZHHaIYYFMIWKg4LlmbunF76G2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBFxHdNroQm68XLgU4aYHULO6ugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNDk5YTg0YzItMTkxYS0z OWYyLWI0ZmQtNTkzN2FmNmYxMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrF3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpybYPyIpIewVTn2JEnYqWXNha6xpxhgWlbLh6zhtGQPCIQGEgYMXOD JS9yKT0s8yc24uLaEF1lq/E9xSR7cFgO3emCUjFuE8j3t1wldchXb0w5aWZ+351E brHUTdciRzKIpJ95ePxP3FtsLrwH7DBd7LDlGsgNoGqjoqxXkhaWVIHmoIMg2Br+ nhgvjzEa15ls0YQSjOJhHGv+flmoa/aX5DoQ74ZQTNV5HSTwf1pbIJMzUJz8106/ g5qQjc+DsbHrj7MYya/A+BRf9ZA/T+xoQ40Rw6vgMo6shPPCc0WbAj3ldnuq0Z0K mMVC2rPg4W//0i83yNy0A8P6MSluYLs= -----END CERTIFICATE-----Generated at Sun Nov 24 15:30:32 2024 by rpki-client on console-fra.rpki-client.org